The KZG polynomial commitment scheme, stepped through. Pick an evaluation point z on the cubic P(x) = x³−2x²−x+2 to watch the opening proof π materialize, see the pairing check pass, then corrupt π to make it fail — and read why 50,000 gas ($0.067) is all Ethereum needs to verify any such claim.
A single cryptographic primitive — the KZG polynomial commitment — quietly powers EIP-4844 blobs, zkEVM proof systems, and on-chain verifiable AI. You can verify one on Ethereum for 50,000 gas ($0.067 today). Here's the math, the ceremony, and why every zkML system depends on it.