Thanks! I have a big rabbit hole to go down now :) I don't get what causes the proof to fail if I provide the wrong bytes to the zkvm when it tries to read fro

Thanks! I have a big rabbit hole to go down now :) I don't get what causes the proof to fail if I provide the wrong bytes to the zkvm when it tries to read from inside the hashed area after the hash & signature are verified (this might not be directly sequential I guess, I think it has to be part of the same proof). Put another way, I get we have to zk prove that a) I know a message M that hashes to H ... (can see this is do-able from googling), but also that a particular byte range M[A-B] is part of M, in a way that the verifier can trust I'm not lying and I don't see how the second bit is accomplished. It feels like there are also details in proving that the data comes from the right "field" in the DG1. This stuff is such black magic! EDIT: will try this out in ZoKrates...