$$ X = (nullifier, cm^{value}_x, cm^{value}_y, cm^{token}, root, signature^{public}_x, signature^{public}_y)$$
$$ W = (sk, sn, spendHook, data, value, tokenId, blind^{value}, blind^{token}, pos, path, signature^{secret}) $$
$$ \mathcal{L}= {X:(X,W)\in \mathcal{R}} $$
| Public Input | Description |
|---|---|
| nullifier | dao's proposal coin nullifier |
| $cm^{value}_x$ | x coordinate of value point commitment |
| $cm^{value}_y$ | y coordinate of value point commitment |
| $cm^{token}$ | commitment of tokenId as field element |
| root | root of commitments merkle tree of coins |
| $signature^{public}_x$ | signature public key x coordinate |
| $signature^{public}_y$ | signature public key y coordinate |
| Witnesses | Description |
|---|---|
| sk | proposal coin secret key |
| sn | proposal coin serial number |
| spendHook | burn spendHook contract |
| data | spendHook contract input data |
| value | proposal coin value |
| tokenId | proposal coin token id |
| $blind^{value}$ | proposal value commitment blinding term |
| $blind^{token}$ | token commitment blinding term |
| pos | proposal coin leaf position in merkle tree |
| path | proposal coin path in merkle tree |
| $signature^{secret}$ | proposal signature secret key |