+ No DSL, plain Go, no dependencies + Compiles large circuit (seconds) + Playground, constraints profiler, … + multiple curves and backends + MPC trusted setup + Web2 and Solidity verification + Several packages audited (by Algorand, EF, Worldcoin and Linea) + One code base which performs well on: