Proof verification costs are the hidden bottleneck in zk systems. Here's how on-chain constraints shape what zero-knowledge ...