In ZK mode
When multiple humans co-supervise AI work, BLS aggregation produces one aggregate signature that proves all required signers attested. Verification is constant-time regardless of the signer count.
Curve choice
BLS12-381 — the same curve used in Ethereum 2.0 and many ZK-rollup systems. Standard, well-implemented.
When to use
High-stakes AI work requiring multiple-human sign-off. The signature itself is the attestation; no per-signer cosignature ceremony needed.
Alternatives
Per-signer cosigning (each signer adds their own signature) is the default; BLS aggregation is the optimisation when signer count > 3 and verification efficiency matters.