Kinship → religion → empire → bureaucracy → corporation → platform → cryptography. Each layer admits more strangers into a single coordinated act, at a cost the previous layer could not see coming. 血缘 → 宗教 → 帝国 → 官僚 → 公司 → 平台 → 密码学。每一层将更多陌生人纳入同一协调行为，其代价是前一层所看不见的。
Zero-knowledge proofs are the first new trust primitive in 400 years that doesn't require a central authority. Recursive proofs collapse all of computation into a single object that can be checked in milliseconds. Psy Protocol is the attempt to build this object — and the social fabric around it. 零知识证明是 400 年来首个无须中央权威的全新信任原语。递归证明将整个计算坍缩为一个可在毫秒内核验的对象。Psy 协议正在构建这一对象——以及围绕它的社会织物。
A prover convinces a verifier that a public statement x is true, by demonstrating knowledge of a secret witness w such that a circuit C(x, w) = 1. The proof π is short, uniform, and reveals nothing about w. With recursion, π can verify another π — collapsing arbitrary computation into a single object.证明者向验证者证明：公开命题 x 为真——通过对秘密见证 w（使电路 C(x, w) = 1）的知识。证明 π 短小、统一、不泄露任何关于 w 的信息。借助递归，π 可验证另一个 π——将任意计算坍缩为单一对象。
Trusted setup. Pairing-based curves (BN254, BLS12-381). 200-byte proofs verifiable in milliseconds. Used in Zcash, Tornado Cash, Polygon zkEVM.
需可信启动。基于配对曲线（BN254、BLS12-381）。证明仅 200 字节，毫秒级验证。被 Zcash、Tornado Cash、Polygon zkEVM 采用。
No trusted setup. Larger proofs (50-200 KB) but transparent and quantum-resistant. The substrate of StarkNet, RISC Zero, Plonky2.
无须可信启动。证明较大（50—200 KB），但透明且抗量子。是 StarkNet、RISC Zero、Plonky2 的基质。
One trusted setup serves all circuits. Custom gates make domain-specific provers fast. The dominant arithmetisation of the late 2020s.
一次可信启动服务所有电路。自定义门让特定领域的证明者高效。是 2020 年代后期的主导算术化方案。
Plonky2, Halo2, Nova, ProtoStar. The economic miracle: an entire chain of computation can be folded into one constant-size π. The technical substrate of every civilization-scale ZK system.
Plonky2、Halo2、Nova、ProtoStar。经济奇迹：整条计算链可被折叠为单一常数大小的 π。这是每个文明级 ZK 系统的技术基质。
Each layer keeps the previous one running underneath. We still trust kin and gods. The new layer just adds to the stack — and exposes a new failure mode the previous layers could not anticipate.每一层都保留下层在底部运行。我们仍信任血亲与神明。新一层只是为堆栈增层——并暴露下层未曾预见的新失败模式。
A civilization-grade proving system is a stack: a finite field, a hash, a circuit IR, a prover, a recursion engine, a settlement chain, and an application. Psy Protocol's job is to make every layer above the field cheap, modular, and recursively composable.文明级证明系统是一个堆栈：有限域、哈希、电路 IR、证明者、递归引擎、结算链、应用。Psy 协议的任务，是让有限域之上的每一层都变得廉价、模块化、可递归组合。
A consensus algorithm is a procedure for letting a global anonymous network agree on a single ordering of events. Each algorithm trades latency, security and decentralisation differently. ZK changes the picture: instead of debating who is right, the network simply checks the proof.共识算法让一个全球匿名网络对事件顺序达成一致。各算法在延迟、安全与去中心化之间作不同权衡。ZK 改变了图景：网络不再争论谁对，而是直接验证证明。
| System系统 | Sybil basis抗女巫基础 | Finality最终性 | ZK postureZK 取向 | Note注 |
|---|
Mathematics is what civilizations turn to when they outgrow the next-best alternative. Number → algebra → calculus → logic → cryptography. Each step expands the set of facts that can be coordinated without trust in a person.当文明超越次优替代品时，便转向数学。数 → 代数 → 微积分 → 逻辑 → 密码学。每一步都扩大了'无须信任某个人即可协调'的事实集合。
Cuneiform tablets in Sumer record grain receipts. The first time a fact about the world is committed to a substrate that cannot be reasoned with — only checked.
苏美尔楔形泥板记录粮食收据。这是首次将世界事实托付给一个无法被劝说、只能被核验的基质。
A proof is not a private revelation — it is a transferable, replayable object. Greek geometry invents the format that Bitcoin will reuse 2,300 years later.
证明不是私人启示——它是可转让、可重放的对象。希腊几何发明了比特币于 2,300 年后再用的格式。
Two strangers establish a shared secret over a public channel. The first time a piece of math made a state-level surveillance assumption obsolete.
两位陌生人在公开信道上协商共享密钥。这是数学首次让国家级监视假设过时。
Goldwasser, Micali, and Rackoff prove that you can prove statements without leaking information. The whole modern stack descends from this paper.
Goldwasser、Micali、Rackoff 证明：可在不泄露信息的前提下证明命题。整个现代堆栈皆源于此文。
Satoshi packages public-key crypto, hash chains and Sybil-resistance into a working system. The first sovereign-grade institution that nobody runs.
中本聪将公钥密码、哈希链与抗女巫机制打包为可运行系统。这是首个无人在运营的主权级机构。
Recursive Plonk-family proofs collapse the cost of arbitrary computation into the cost of one final verification. The economic precondition for civilization-scale verifiable systems.
递归 Plonk 系列证明将任意计算的成本坍缩为单一最终验证的成本。这是文明级可验证系统的经济前提。
Privacy without verifiability is hiding. Verifiability without privacy is surveillance. ZK is the first technology that gives both at once — and forces every state, every platform, and every individual to choose what they will carry.无可验证性的隐私是躲藏。无隐私的可验证是监视。ZK 是首个同时给予二者的技术——并迫使每个国家、平台与个人选择'携带什么'。
Prove you are over 18 without revealing your birth date. Prove you are a citizen without revealing which one. Prove you have funds without revealing how many. The unit-bundle of identity unbundles.
证明你已成年，而不暴露生日。证明你是公民，而不暴露国籍。证明你有资金，而不暴露金额。身份的整包被拆散。
A transaction signed by a private key cannot be unsigned by an institution. A node can be cut off; the math cannot be repealed. The substrate-level guarantee.
由私钥签名的交易，无法被机构反签。节点可被切断；数学无法被废止。这是基质层的保证。
The seed phrase is the smallest unit of sovereignty. The trade-off: total responsibility, no recovery without social or hardware fallback. Most political regimes are not yet ready to allow it at scale.
助记词是主权的最小单位。代价：完全责任，无社交或硬件后援即不可恢复。多数政治体系尚未准备好大规模允许之。
A cryptographic identity that travels with you between protocols, jurisdictions and platforms. Reputation, attestation, voting power and credentials become portable — and the nation-state becomes one provider among many.
一种随你在协议、法域、平台间穿行的密码学身份。声誉、属性证明、投票权与凭证皆可携带——民族国家由此成为众多供应商之一。
The math is one. The ideologies are many. Each narrative pulls Psy-grade infrastructure toward a different political end-state. They are not equally compatible.数学只有一种，意识形态却有许多。每种叙事将 Psy 级基础设施拉向不同的政治终态。它们之间未必相容。
When the cost of proving a computation drops below the cost of the computation itself, the social contract shifts. Every claim about a model, a transaction, an identity, a judgement begins to ship with a receipt.当证明一项计算的成本低于该计算本身，社会契约即发生迁移。关于模型、交易、身份、判断的每一项主张，都开始附带一张回执。
A toy model. Move the dials to assemble a coordination regime; the verdict at the bottom maps your configuration onto a known archetype: 1990s internet, 2010s platforms, 2020s ZK rollups, surveillance state, or a hypothetical 2040s civilization-scale ledger.一个玩具模型。移动旋钮以拼装一个协调体制；底部判决会将您的配置映射到一个已知原型：1990 年代互联网、2010 年代平台、2020 年代 ZK 汇总、监视国家，或2040 年代假设的文明级账本。
A protocol is not a politics-free zone. The next paragraph in this story is written by whoever runs the prover farms, writes the circuits, and ships the foundation grants.协议不是政治真空。本故事的下一段，由运营证明者农场、撰写电路、发放基金会拨款的人书写。
Religions schism, empires fall, banks fail, platforms close. A theorem, once proved, is proved forever. The bet behind Psy Protocol — and behind the broader ZK civilization thesis — is that moving as much of the trust stack as possible into the most permanent layer is the safest direction for a species that just spent fifty years discovering how easily its institutions can fail.宗教分裂、帝国崩溃、银行倒闭、平台关停。一个定理一旦被证明，就被永远证明。Psy 协议——以及更广义的 ZK 文明命题——的赌注是：将信任堆栈尽可能多地迁入最持久的那一层，对一个刚用五十年发现自己机构有多容易失败的物种而言，是最安全的方向。
— ψ · visit psy.psyverse.fun for the protocol itself — ψ · 访问 psy.psyverse.fun 了解协议本身
