Hardware proving consolidates around two designs

Most acceleration work now targets one of two architectural approaches. Costs fall accordingly, and so does the number of independent implementations a protocol can fall back on.

For systems whose security argument assumes plural provers, that concentration is worth stating in the threat model rather than assuming away.