build: depend on noir-zk 0.3.3, refrozen as zk-encryption@0.1.3

README.md

@@ -18,7 +18,7 @@ A post-quantum encrypted channel for zero-knowledge pipelines: a pairwise handsh
 
 **Constant-binding domains.** One envelope circuit serves both families: the payload domain is an input the app writes into its record, and each family pins it with `bind_const` (a noir-zk layout entry the kernel enforces). The sender doesn't choose the domain, two envelopes of one pipeline never share a keystream, and a pipeline folding the circuit twice under one domain is refused at build. Another payload (another domain string) is another family over the same frozen key.
 
-This freeze's roots (`zk-encryption@0.1.2`: `channel_session` 1.1.0, `channel_envelope` 1.0.0; noir 1.0.0-rc.3, bb 7.0.0-nightly.20260927, noir-zk 0.3.0): see `measurements.json` for the gates and the release's `catalog.json` for the roots and layouts.
+This freeze's roots (`zk-encryption@0.1.3`: `channel_session` 1.1.0, `channel_envelope` 1.0.0; noir 1.0.0-rc.3, bb 7.0.0-nightly.20260927, noir-zk 0.3.0): see `measurements.json` for the gates and the release's `catalog.json` for the roots and layouts.
 
 ## Receiver flow
 

mise.toml

@@ -14,7 +14,7 @@ NOIR_VERSION = "1.0.0-rc.3"
 BB_VERSION = "7.0.0-nightly.20260927"
 # noir-zk (registries, codegen, the generic kernels) from crates.io;
 # rust/Cargo.toml pins the same version.
-NOIR_ZK_VERSION = "0.3.0"
+NOIR_ZK_VERSION = "0.3.3"
 # Per-version toolchain directories: this repository never replaces the
 # nargo or bb other projects use from ~/.nargo and ~/.bb.
 NARGO_HOME = "{{env.HOME}}/.toolchains/noir-{{env.NOIR_VERSION}}"

rust/zk-encryption-circuits/Cargo.toml

@@ -9,8 +9,8 @@ publish.workspace = true
 repository.workspace = true
 
 [dependencies]
-noir-zk-core = "=0.3.0"
-noir-zk-backend = { version = "=0.3.0", features = ["packs", "http"] }
+noir-zk-core = "=0.3.3"
+noir-zk-backend = { version = "=0.3.3", features = ["packs", "http"] }
 zk-encryption = { path = "../zk-encryption", version = "0.1.0" }
 serde_json = "1"
 sha3 = "0.10"
@@ -19,7 +19,7 @@ hex = "0.4"
 toml = "1"
 
 [build-dependencies]
-noir-zk-codegen = "=0.3.0"
+noir-zk-codegen = "=0.3.3"
 
 [features]
 serde = ["zk-encryption/serde"]

rust/zk-encryption-circuits/README.md

@@ -4,7 +4,7 @@ The post-quantum channel as one building block for noir-zk pipelines: the circui
 
 ## What the layer is
 
-**Circuits** (`circuits/manifest.toml`, frozen by `noir-zk freeze --library zk-encryption@0.1.2`, bytecode bundled: no packs, no download):
+**Circuits** (`circuits/manifest.toml`, frozen by `noir-zk freeze --library zk-encryption@0.1.3`, bytecode bundled: no packs, no download):
 
 | family | circuit | record | what it does |
 |---|---|---|---|

rust/zk-encryption-circuits/circuits/manifest.toml

@@ -5,7 +5,7 @@ bb = "7.0.0-nightly.20260927"
 
 [library]
 name = "zk-encryption"
-version = "0.1.2"
+version = "0.1.3"
 
 [[circuit]]
 label = "channel_envelope"