┌─────────────────────────────────────────────────────────────┐
│                    应用层：会议协作/版权管理 SaaS            │
│  会议录制/纪要生成 → 版权登记 → 授权分发 → 侵权监测/取证      │
├─────────────────────────────────────────────────────────────┤
│                    验证层：ZKP 电路 + 链上验证合约            │
│  电路：内容哈希一致性 / 所有权签名有效性 / 时间区间包含性      │
├─────────────────────────────────────────────────────────────┤
│                    存证层：区块链账本 + 索引服务              │
│  锚定哈希、元数据、权利人 DID、授权策略 → 不可篡改账本       │
├─────────────────────────────────────────────────────────────┤
│                    数据层：对象存储 + 内容寻址 (IPFS/CID)     │
│  原始音视频/文档 → 分片加密存储 → CID 回写链上                │
└─────────────────────────────────────────────────────────────┘

{
  "@context": "https://www.w3.org/2018/credentials/v1",
  "type": ["VerifiableCredential", "MeetingContentProof"],
  "issuer": "did:example:platform:conference-system",
  "issuanceDate": "2025-07-15T09:30:00Z",
  "credentialSubject": {
    "contentCID": "bafybeigdyrzt5sfp7udm7hu76uh7y26nf3efuylqabf3oclgtqy55fbzdi",
    "contentHash": "0x7f83b1657ff1fc53b92dc18148a1d65dfc2d4b1fa3d677284addd200126d9069",
    "meetingId": "meet_20250715_001",
    "participants": ["did:example:user:alice", "did:example:user:bob"],
    "startTime": "2025-07-15T09:00:00Z",
    "endTime": "2025-07-15T10:30:00Z",
    "rights": ["reproduction", "distribution", "adaptation"]
  },
  "proof": { "type": "EcdsaSecp256k1RecoverySignature2020", ... }
}

// methods/guest/src/bin/verify_integrity.rs
use risc0_zkvm::guest::env;
use sha2::{Sha256, Digest};

fn main() {
    // 1. 读取私有输入 (Host 传入，不上链)
    let raw_content: Vec<u8> = env::read();          // 会议原始内容 (或分片)
    let content_hash_onchain: [u8; 32] = env::read(); // 链上锚定的哈希

    // 2. 核心计算逻辑 (纯 Rust，可单独单测)
    let mut hasher = Sha256::new();
    hasher.update(&raw_content);
    let computed_hash = hasher.finalize();

    // 3. 约束断言 (失败则 Panic，证明生成失败)
    assert_eq!(computed_hash.as_slice(), content_hash_onchain.as_slice(), "Hash mismatch");

    // 4. 公开输出 (写入 Journal，链上 Verifier 可读)
    // 这里仅输出会议 ID 和时间戳，不输出原始内容
    let meeting_id: String = env::read();
    env::commit(&(meeting_id, content_hash_onchain));
}

// contracts/MeetingRegistry.sol
event ContentAnchored(
    uint64 indexed chainId,           // 来源链 ID (支持多链聚合)
    bytes32 indexed contentHash,      // 核心检索键
    string meetingId,                 // 业务主键
    address indexed owner,            // 权利人地址/DID 解析地址
    uint64 timestamp,                 // 区块时间戳
    string cid,                       // IPFS CID (非索引，节省 Gas)
    bytes32 policyHash,               // 授权策略哈希
    uint256 blockNumber               // 锚定区块高度
);

┌─────────────┐     NewHeads/Logs      ┌──────────────────┐     Upsert      ┌──────────────┐
│  区块链 RPC  │ ─────────────────────▶ │  索引器 Worker    │ ─────────────▶  │  PostgreSQL  │
│  (Archive)   │  ◀── Reorg Handling ── │  (Rust/TS/GraphQL)│  ◀── Checkpoint │  (TimescaleDB)│
└─────────────┘                        └──────────────────┘                 └──────────────┘
                                              │
                                              ▼ (Dual Write)
                                    ┌──────────────────┐
                                    │  消息队列         │
                                    │  (Kafka/Pulsar)   │
                                    └────────┬─────────┘
                                             ▼
                                    ┌──────────────────┐
                                    │  实时计算引擎     │
                                    │  (Flink/RisingWave)│
                                    └────────┬─────────┘
                                             ▼
                                    ┌──────────────────┐
                                    │  搜索/分析层      │
                                    │  (Elasticsearch/  │
                                    │   ClickHouse)     │
                                    └──────────────────┘

query MeetingProof($meetingId: String!, $requesterDid: String!) {
  meeting(where: { meetingId: $meetingId }) {
    contentHash
    cid
    anchorBlock { number timestamp transactionHash }
    owner { did address }
    # ZKP 验证所需公开输入自动拼装
    zkpPublicInputs: verifyIntegrityInputs(requesterDid: $requesterDid) {
      contentHashOnchain
      meetingId
      anchorTimestamp
    }
    # 授权策略链下解析
    policy @resolvePolicy(hash: $policyHash) {
      allowRedaction
      allowedFields
      expiry
    }
  }
}

{
  "@context": [
    "https://www.w3.org/2018/credentials/v1",
    "https://schema.org/",
    "https://example.com/meeting-vocab/v1"
  ],
  "type": ["VerifiableCredential", "MeetingRecord"],
  "issuer": "did:web:meeting.example.com",
  "validFrom": "2025-07-15T09:00:00Z",
  "credentialSubject": {
    "id": "did:ethr:0x742...",  // 会议发起人/版权人
    "meetingId": "meet_20250715_001",
    "platform": "feishu",
    "contentHash": "0x7f83...",
    "storage": { "type": "IPFS", "cid": "bafybei...", "encryption": "AES-256-GCM" },
    "participants": [
      { "did": "did:web:corp-a.com", "role": "host" },
      { "did": "did:key:z6Mk...", "role": "guest" }
    ],
    "rights": ["reproduction", "translation", "commercial-use"]
  },
  "proof": {
    "type": "EcdsaSecp256k1RecoverySignature2020",
    "created": "2025-07-15T09:30:05Z",
    "verificationMethod": "did:web:meeting.example.com#keys-1",
    "proofPurpose": "assertionMethod",
    "proofValue": "z3y4x..."
  }
}

# meeting-content.ipldsch
type MeetingContent struct {
  meetingId     String
  totalSize     Int
  chunkSize     Int           # 固定分片大小 (建议 4MB/16MB)
  chunks        [&Chunk]      # 有序链表
  manifestHash  &Manifest     # 顶层 Merkle Root
  codec         String        # "h264", "opus", "pdf"
  drm           DRMPolicy?    # 可选 DRM 策略
}

type Chunk struct {
  index       Int
  cid         &Bytes          # 原始分片 CID
  hash        Bytes           # SHA-256(chunk_bytes)
  size        Int
  timestamp   Int             # 相对会议开始偏移(ms)
}

type Manifest struct {
  rootHash    Bytes           # Merkle Root of all chunk hashes
  chunkCount  Int
}

// 存证交易签名载荷结构
struct HybridSignedPayload {
    // 经典签名 (当前主流)
    classic: SignatureBundle {
        alg: "ECDSA_secp256k1_sha256",
        pubkey: [u8; 33],
        sig: [u8; 64],
    },
    // 抗量子签名 (预埋)
    pq: SignatureBundle {
        alg: "ML-DSA-65",           // NIST FIPS 204
        pubkey: [u8; 1952],
        sig: [u8; 3309],
    },
    // 域分离标识
    domain: "meeting-anchor-v2",
}

源会议内容 (Raw) 
    │
    ├─▶ [人工/规则] 纪要/切片 ──▶ 存证锚定 (Hash_A)
    │
    └─▶ [AIGC 模型] 生成内容 ──▶ 隐形水印嵌入 (Watermark_Key) ──▶ 存证锚定 (Hash_B)
                                      │
                                      ▼
                            ZKP 电路证明:
                            1. Hash_B 包含有效水印
                            2. 水印 Key 派生自 Hash_A (或授权策略)
                            3. 未泄露 Raw Content / Model Weights

interface IMeetingRoyalty {
    // 存证时预付 3 年存储费 + 索引费
    function anchorWithPrepay(
        bytes32 contentHash,
        string calldata cid,
        uint256 storageYears
    ) external payable returns (uint256 anchorId);

    // 授权分发时自动分账
    function mintLicense(
        uint256 anchorId,
        address licensee,
        uint256 amount,
        uint256 expiry
    ) external returns (uint256 licenseId);

    // 版税接收器 (支持 EIP-2981)
    function royaltyInfo(
        uint256 tokenId,
        uint256 salePrice
    ) external view returns (address receiver, uint256 royaltyAmount);
}

// @meeting-copyright/sdk-core
interface MeetingCopyrightSDK {
  // 1. 身份初始化
  init(config: { did: string; privateKey: Signer; rpcUrl: string; indexerUrl: string }): Promise<void>;

  // 2. 一键存证 (自动分片、加密、上链、索引)
  anchorMeeting(params: {
    meetingId: string;
    rawContent: ReadableStream | Buffer; // 支持流式
    participants: Did[];
    rights: Right[];
  }): Promise<AnchorReceipt>; // { anchorId, txHash, cid, contentHash, blockNumber }

  // 3. 生成 ZKP 证明 (本地/云端 Worker)
  generateProof(task: 'integrity' | 'ownership' | 'watermark', inputs: ProofInputs): Promise<ZKProof>;

  // 4. 链上验证 (返回布尔 + 交易回执)
  verifyOnChain(proof: ZKProof, publicInputs: PublicInputs): Promise<VerifyResult>;

  // 5. 司法取证报告生成 (PDF/JSON-LD, 含区块链浏览器链接、Merkle Proof)
  generateForensicReport(anchorId: string, proof: ZKProof): Promise<ForensicReport>;
}

meeting-copyright-starter/
├── contracts/           # Foundry/Hardhat 项目
│   ├── src/MeetingRegistry.sol
│   ├── src/VerifierGroth16.sol (自动生成)
│   └── script/Deploy.s.sol
├── circuits/            # RISC Zero Guest 程序
│   └── methods/verify_integrity/src/main.rs
├── indexer/             # Ponder/GraphQL 索引器
│   └── src/meeting.ts
├── sdk/                 # TS SDK (npm pack)
│   └── src/index.ts
├── cli/                 # 开发者调试工具
│   └── src/commands/anchor.ts
├── docker-compose.yml   # 一键启动: Anvil + IPFS + Postgres + Indexer + Frontend
└── README.md            # 5 分钟跑通流程指引

git clone https://github.com/example/meeting-copyright-starter
cd meeting-copyright-starter
docker-compose up -d  # 启动本地链、IPFS、数据库、索引器
pnpm install && pnpm build:circuits  # 编译 RISC Zero ELF
pnpm cli anchor --meetingId "demo_001" --file ./test.mp4 --did "did:key:z6Mk..."
# 输出: AnchorReceipt { txHash, cid, contentHash, explorerUrl }