Groth16 and Plonk proof checks in SP1 remained safe because they used wrapped proofs with fixed shapes that bypassed prover-controlled tensor formats