Proving inference · Operator atlas

Operator atlas

Every algorithm inside an LLM forward pass that a zkSNARK must prove, and how each proving scheme handles it. Matmul is not the bottleneck; the nonlinearities are.

OperatorzkGPTzkLLMDeepProveJolt AtlasMystiqueHao et al.
QuantizationNumeric substrate●●●●●●
RequantizationNumeric substrate●○●●○●
ClampingNumeric substrate○○●●○○
Matrix multiplicationLinear algebra●●●●●○
Embedding lookupLinear algebra○○●●○○
Residual additionLinear algebra○○●●○○
Absolute positional encodingPositional information○○●●○○
Rotary positional embeddingPositional information○○●●○○
Attention scoresAttention○●●●○○
Causal maskingAttention○○●●○○
SoftmaxAttention●●●●●●
Multi-head attentionAttention○●●●○○
RMSNormNormalization & activation●○●●○○
LayerNormNormalization & activation○○●●○●
GeLU activationNormalization & activation●●●●●●
Unembedding → logitsOutput & decoding○○●●○○
Argmax / greedy decodeOutput & decoding○○●○○○
Autoregression & certificationOutput & decoding○○●●○○
Memory & read consistencySystems-level obligations○○●●○○
Zero-knowledgeSystems-level obligations●●○●●●
The memory wallSystems-level obligations○●●●●○
Proof of non-hallucinationSystems-level obligations○○●○○○
The sumcheck protocolCryptographic machinery●●●○○○
Lookup arguments & range checksCryptographic machinery●●●○○●
Claims & the backward passCryptographic machinery○○●○○○
Model transforms & fusionCryptographic machinery○○●○○○

● = the paper describes a protocol for this operator. ○ = it does not. An empty column is not a criticism — most systems are explicit about their scope — but an empty row is a gap in the field.

Numeric substrate

Accuracy-critical

Quantization

float32 → q-bit signed integer

6 schemes address it
DeepProve's #1 cost

Requantization

rescale · round · shift · clamp

4 schemes address it
Table-size sensitive

Clamping

saturating out-of-range activations

2 schemes address it

Linear algebra

SNARK-friendly

Matrix multiplication

QKV projections, FFN, logits

5 schemes address it
Cheap if you're clever

Embedding lookup

token id → vector · ONNX Gather

2 schemes address it
Trivial — except for scales

Residual addition

x + sublayer(x)

2 schemes address it

Positional information

Nearly free

Absolute positional encoding

GPT-2

2 schemes address it
Needs a structural trick

Rotary positional embedding

Gemma 3, Llama, most modern LLMs

2 schemes address it

Attention

A matmul in disguise

Attention scores

Q·Kᵀ / √dₖ

3 schemes address it
O(s), not O(s²)

Causal masking

the −∞ upper triangle

2 schemes address it
DeepProve's #2 cost

Softmax

the exponential problem

6 schemes address it
Composition + padding pain

Multi-head attention

and GQA for Gemma 3

3 schemes address it

Normalization & activation

Square roots and inverses

RMSNorm

Gemma 3, Llama

3 schemes address it
A separate layer (keeps ε)

LayerNorm

GPT-2

3 schemes address it
DeepProve's #3 cost

GeLU activation

and Erf, Tanh, SiLU by the same recipe

6 schemes address it

Output & decoding

A matmul, then an argmax

Unembedding → logits

h · Wᵀ over the vocabulary

2 schemes address it
Two checks, one grand product

Argmax / greedy decode

and the sampling problem

1 schemes address it
DeepProve's best idea

Autoregression & certification

KV caching, sequence certification — the trick that kills the quadratic

2 schemes address it

Systems-level obligations

Or: avoid it entirely

Memory & read consistency

KV cache, tensor reads — what a read owes you

2 schemes address it
Usually not implemented

Zero-knowledge

hiding the weights and the prompt

5 schemes address it
The real binding constraint

The memory wall

scale out, or scale down

4 schemes address it
Nearly free

Proof of non-hallucination

an unexpected freebie

1 schemes address it

Cryptographic machinery

Foundational

The sumcheck protocol

the workhorse under every page

3 schemes address it
Foundational

Lookup arguments & range checks

how non-linearity is discharged

4 schemes address it
Foundational

Claims & the backward pass

how operators compose into one proof

1 schemes address it
Foundational

Model transforms & fusion

the graph rewrite before proving

1 schemes address it