Prove Without Revealing.

// Private transfer circuit — proves sender owns balance without revealing it
use dep::std::hash::pedersen_hash;
use dep::aztec::{note::Note, context::PrivateContext};

fn main(
    // Private inputs — never appear on-chain
    sender_secret: Field,
    balance_before: Field,
    amount:         Field,

    // Public inputs — visible on-chain, prove nothing private
    nullifier:      pub Field,
    commitment:     pub Field,
) {
    // Prove: sender knows secret key without revealing it
    let computed_hash = pedersen_hash([sender_secret, balance_before]);
    assert(computed_hash == commitment);

    // Prove: balance is sufficient without revealing amount
    assert(balance_before - amount >= 0);

    // Proof generated. Verified on Ethereum. Nothing revealed. ✓
}