RUST - Zero-Knowledge System - Debugging

We have a zero-knowledge proof system for using Groth16 (BLS12-381). The core cryptography works, but we're experiencing proof verification failures due to a mismatch between the circuit and host implementations.

Technical Stack & Architecture

Core Cryptography:

Proof System: Groth16 SNARKs over BLS12-381 curve
Circuit Framework: Bellman
Circuit Complexity: 117,787 constraints, 7 public inputs

Key Components:

Pedersen commitments (Zcash Sapling-style)
RedJubjub signatures on Jubjub curve
Blake2s hashing for challenges
Custom multipack for field element packing

Technical Requirements
Must Have:

Understanding of Groth16 and BLS12-381
Experience with Zcash libraries (bellman, jubjub curves)
Finite field arithmetic (understand modular reduction, field capacity)

Nice to Have:

Prior work with Zcash Sapling circuits
Experience debugging proof verification failures
Knowledge of Pedersen hashing and RedJubjub signatures