판 이력 — How to prove more false statements: Fiat–Shamir limitations on (generated) R1CS | AIChainDay