Checks a taped-out circuit against its on-chain reference implementation over every possible input — not the 256 fixed vectors the protocol samples. A mismatch comes back with the exact input that proves it.