secp256k1 ECDSAVerify(64,4) end-to-end
The heaviest circomlib reference circuit now compiles, generates a witness, and proves end-to-end. Optimized R1CS lands at ~1.49M constraints — below circom's own count — the witness verifies, and Groth16 prove + verify are measured. 162 E2E cross-prime tests still green.