leadership mint proof

$X = (e p, C, c m_{x}^{v a l u e}, c m_{y}^{v a l u e})$ $W = (p k_{x}, p k_{y}, v a l u e, e p, n o n ce, v a l u e_{b l in d})$ $L = {X : W \in R}$

Public Input	Description
ep	epoch index
C	coin commitment
$c m_{x}^{v a l u e}$	value commitment affine x coordinate
$c m_{y}^{v a l u e}$	value commitment affine y coordinate

Witnesses	Description
$p k_{x}$	coin public key pk affine x coordinate
$p k_{y}$	coin public key pk affine y coordinate
value	coin value $\in Z$ or u64
ep	epoch index
nonce¹	random nonce derived from previous coin
$v a l u e_{b l in d}$	blinding scalar for value commitment

Functions	Description
pk	commitment to sk
C	$ha s h (p k_{x} ∣∣ p k_{y} ∣∣ v a l u e ∣∣ e p ∣ n o n ce)$
$c m^{v a l u e}$	commitment to value

if you read this after zerocash which crypsinous is based off, both papers calls nullifiers serial numbers. and serial number is nonce, sn in the table below can be called nullifier in our contract using zcash sapling terminology which is used in our money contract (sapling contract).

The DarkFi Book

leadership mint proof