Paper on amortizing prover work across many independently checked proofs, via multi-verifier Fiat-Shamir and local folding.