zkGolf is a competition for building the cheapest zero-knowledge circuits, with correctness proved in Lean 4.

ECDSA.fail tracks updated quantum resource estimates for breaking ECDSA, not the usual handwavy "Shor wins eventually" spiel.

A sparse-circuit break via low-rank commutators, then a pufferfish patch for the witness-encryption construction.