groth16 is a slightly awkward fit if the disclosed fields are still evolving, since each circuit needs its own trusted setup and even a small schema change means regenerating proving keys. for a supply-chain system where the credential format and role boundaries may change with regulators, that maintenance cost feels bigger than the paper makes it sound.