zk-shark-agent

name	zk-shark-agent
description	Drive ZK Shark, the Shark of All Streets agent, for nullifiers, Groth16 proofs, Light Protocol compressed state, model attestations, encrypted-state commitments, proof checks, nullifier derivation, and deterministic natural-language routing.
when_to_use	Use this skill whenever the request is one of: - "attest this model with hash 0xab12... and proof.json" - "publish an attestation for my fine-tuned model" - "commit this encrypted state blob" - "verify this Groth16 proof against the publish inputs" - "derive a nullifier for context foo" - "show me the ZK Shark config" / "inspect the zk shark agent" Do not use it for on-chain trading, voice calls, or generic Solana RPC queries.
inputs	["modelHash (optional, hex) - 32-byte model hash for attest intents","payloadCommitment (optional, hex) - 32-byte payload commitment for attest","ciphertextCommitment (optional, hex) - 32-byte ciphertext commitment for commit","stateVersion (optional, number) - version number for commit (default 1)","context (optional, string) - domain-separated context tag","proofPath (optional, string) - path to a Groth16 proof JSON file","proof (optional, Groth16Proof) - inline proof if not loading from disk"]
outputs	["nullifierHex (string) - the derived 32-byte nullifier","publicInputsPackedHex (string) - the canonical public input vector","instruction (TransactionInstruction) - ready-to-sign Solana instruction","signature (string, optional) - transaction signature when a signer is attached","summary (string) - human-readable operation summary"]
env	{"required":["ZK_SHARK_RPC_URL"],"optional":["ZK_SHARK_PROGRAM_ID","ZK_SHARK_PHOTON_URL","ZK_SHARK_API_KEY","ZK_SHARK_COMMITMENT","ZK_SHARK_KEYPAIR","ZK_SHARK_NETWORK"]}

ZK Shark Agent

ZK Shark is the Shark of All Streets agent, named in honor of zk Shark, the legend of ordinals. It wraps the lower-level @clawd/zk-client SDK and exposes the four operations an agent needs most:

Method	Purpose
agent.attestModel({ modelHash, payloadCommitment, proof, context })	Build a publish_attestation instruction.
agent.commitEncryptedState({ modelHash, ciphertextCommitment, stateVersion, proof })	Build a commit_encrypted_state instruction.
agent.verifyProof({ proof, publicInputs?, ... })	Off-chain Groth16 sanity check.
agent.computeNullifierFor(secret, context)	Deterministic 32-byte nullifier.

The class name is ZkSharkAgent. ClawdZkAgent remains exported as a compatibility alias.

Quick Start

import { ZkSharkAgent, routeIntent, dispatchRoute } from "@clawd/zk-shark-agent";

const agent = await ZkSharkAgent.fromEnv();

const route = routeIntent(
  "attest this model 0xab12cd34... with my proof.json",
  agent,
  { payloadCommitment: "0x" + "ab".repeat(32), proofPath: "./proof.json" },
);

const result = await dispatchRoute(route, agent);
console.log(result);

The router is deterministic and rule-based. It makes no model calls.

Recognised Intents

Verb pattern	Routed action	Required context
attest, attestation, publish, publish_attestation	attestModel	modelHash, payloadCommitment, proofPath
commit, commit_state, encrypted state, ciphertext	commitEncryptedState	ciphertextCommitment, stateVersion, proofPath
verify, check, validate	verifyProof	proofPath
nullifier, derive, compute_nullifier	computeNullifier	context
inspect, config, status, show	describe	none
help, usage, how, what	help	none

CLI

zk-shark-agent inspect
zk-shark-agent attest  <modelHash> <payloadCommitment> <proof.json> [--context "..."]
zk-shark-agent commit  <ciphertextCommitment> <stateVersion> <proof.json> [--model <modelHash>]
zk-shark-agent verify  <proof.json>
zk-shark-agent nullifier "context-tag"
zk-shark-agent ask     "natural language"

shark-of-all-streets is also available as a binary alias. The legacy clawd-zk-agent binary remains available for older scripts.

The proof JSON shape is:

{
  "a": "0x...",
  "b": "0x...",
  "c": "0x...",
  "verifyingKey": "0x..."
}

Configuration

Use ZK_SHARK_RPC_URL plus the optional ZK_SHARK_* variables declared in the frontmatter. Legacy CLAWD_ZK_* variables are still accepted as fallbacks.

Named program aliases:

Alias	Purpose
ZK_SHARK_MAINNET	Default mainnet placeholder.
ZK_SHARK_DEVNET	Devnet placeholder.
ZK_SHARK_LOCALNET	Localnet placeholder.

Legacy CLAWDZK_MAINNET, CLAWDZK_DEVNET, and CLAWDZK_LOCALNET are also accepted.

Failure Modes

• ZK_SHARK_RPC_URL is not set - add it to the environment, or keep using legacy CLAWD_ZK_RPC_URL.
• Invalid ZK_SHARK_PROGRAM_ID/CLAWD_ZK_PROGRAM_ID - the value is not a base58 pubkey and not a known alias.
• proof.a must be 64 bytes - the proof JSON is malformed; re-export from the prover.
• Secret must be at least 16 bytes - supply a real nullifier secret.

Cross-References

• Lower-level SDK: zk-primitives/client/
• Anchor program: zk-primitives/programs/clawd-zk/
• Architecture notes: zk-primitives/docs/ARCHITECTURE.md
• Agent catalog: AGENTS.md