diff --git a/Cargo.lock b/Cargo.lock
index 7e31a87a..cb9c6137 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -741,7 +741,7 @@ dependencies = [
  "bitflags",
  "cexpr",
  "clang-sys",
- "itertools 0.12.1",
+ "itertools 0.13.0",
  "proc-macro2",
  "quote",
  "regex",
@@ -1568,7 +1568,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ccc2776f0c61eca1ca32528f85548abd1a4be8fb53d1b21c013e4f18da1e7090"
 dependencies = [
  "data-encoding",
- "syn 1.0.109",
+ "syn 2.0.117",
 ]
 
 [[package]]
@@ -2124,6 +2124,14 @@ dependencies = [
  "tracing",
 ]
 
+[[package]]
+name = "ethlambda-prover-core"
+version = "0.1.0"
+dependencies = [
+ "ethlambda-types",
+ "thiserror 2.0.18",
+]
+
 [[package]]
 name = "ethlambda-rpc"
 version = "0.1.0"
@@ -4843,7 +4851,7 @@ source = "git+https://github.com/leanEthereum/leanVM.git?rev=e2592df#e2592df4e30
 dependencies = [
  "itertools 0.14.0",
  "mt-utils",
- "num-bigint 0.3.3",
+ "num-bigint 0.4.6",
  "parallel",
  "paste",
  "rand 0.10.1",
@@ -4859,7 +4867,7 @@ dependencies = [
  "itertools 0.14.0",
  "mt-field",
  "mt-utils",
- "num-bigint 0.3.3",
+ "num-bigint 0.4.6",
  "paste",
  "rand 0.10.1",
  "serde",
@@ -5328,29 +5336,29 @@ dependencies = [
 
 [[package]]
 name = "p3-bn254-fr"
-version = "0.3.3-succinct"
+version = "0.4.3-succinct"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "577200e3fa7e49e2b21e940a6dc7399dc63acb8581da088558cdf7c455adafc0"
+checksum = "2077757c7cb514202ccb5368f521f23f5709c720599e6545c683c66e0a52d2d8"
 dependencies = [
  "ff",
  "num-bigint 0.4.6",
- "p3-field 0.3.3-succinct",
- "p3-poseidon2 0.3.3-succinct",
- "p3-symmetric 0.3.3-succinct",
+ "p3-field 0.4.3-succinct",
+ "p3-poseidon2 0.4.3-succinct",
+ "p3-symmetric 0.4.3-succinct",
  "rand 0.8.6",
  "serde",
 ]
 
 [[package]]
 name = "p3-challenger"
-version = "0.3.3-succinct"
+version = "0.4.3-succinct"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "75358edd6e2562752c01f5064a66d88144a3e75ace0407166dbdf8a727597f52"
+checksum = "b6a908924d43e4cfb93fb41c8346cac211b70314385a9037e9241f5b7f3eaf77"
 dependencies = [
- "p3-field 0.3.3-succinct",
- "p3-maybe-rayon 0.3.3-succinct",
- "p3-symmetric 0.3.3-succinct",
- "p3-util 0.3.3-succinct",
+ "p3-field 0.4.3-succinct",
+ "p3-maybe-rayon 0.4.3-succinct",
+ "p3-symmetric 0.4.3-succinct",
+ "p3-util 0.4.3-succinct",
  "serde",
  "tracing",
 ]
@@ -5370,14 +5378,14 @@ dependencies = [
 
 [[package]]
 name = "p3-dft"
-version = "0.3.3-succinct"
+version = "0.4.3-succinct"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "761f1e1b014f2b1b69bd0309124e233d64aa3590e6a41ee786000dd849506d51"
+checksum = "be6408b10a2c27eb13a7d5580c546c2179a8dc7dbc10a990657311891f9b41c0"
 dependencies = [
- "p3-field 0.3.3-succinct",
- "p3-matrix 0.3.3-succinct",
- "p3-maybe-rayon 0.3.3-succinct",
- "p3-util 0.3.3-succinct",
+ "p3-field 0.4.3-succinct",
+ "p3-matrix 0.4.3-succinct",
+ "p3-maybe-rayon 0.4.3-succinct",
+ "p3-util 0.4.3-succinct",
  "tracing",
 ]
 
@@ -5397,14 +5405,14 @@ dependencies = [
 
 [[package]]
 name = "p3-field"
-version = "0.3.3-succinct"
+version = "0.4.3-succinct"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2df7cebaa4079b24e0dd7e3aad59eebcbb99a67c1271f79ad884a7c032f5f183"
+checksum = "3dc75969ca3ac847f43e632ab979d59ff7a68f9eac8dbf8edcbba47fc2e1d3aa"
 dependencies = [
  "itertools 0.12.1",
  "num-bigint 0.4.6",
  "num-traits",
- "p3-util 0.3.3-succinct",
+ "p3-util 0.4.3-succinct",
  "rand 0.8.6",
  "serde",
 ]
@@ -5426,16 +5434,16 @@ dependencies = [
 
 [[package]]
 name = "p3-koala-bear"
-version = "0.3.3-succinct"
+version = "0.4.3-succinct"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6cea0ba3389b034b6088d566aea8b57aa29dd2e180966e0c8056f61331c92b4e"
+checksum = "3a9683cd0ef68100df7c62490533047bcf19c04c4a0fa1efc9d7c1e03e31f6b3"
 dependencies = [
  "cfg-if 1.0.4",
  "num-bigint 0.4.6",
- "p3-field 0.3.3-succinct",
- "p3-mds 0.3.3-succinct",
- "p3-poseidon2 0.3.3-succinct",
- "p3-symmetric 0.3.3-succinct",
+ "p3-field 0.4.3-succinct",
+ "p3-mds 0.4.3-succinct",
+ "p3-poseidon2 0.4.3-succinct",
+ "p3-symmetric 0.4.3-succinct",
  "rand 0.8.6",
  "rustc_version 0.4.1",
  "serde",
@@ -5458,14 +5466,14 @@ dependencies = [
 
 [[package]]
 name = "p3-matrix"
-version = "0.3.3-succinct"
+version = "0.4.3-succinct"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fae5cc6ce726cc265cc687c1214e3f1ac1f5c6e973442286ba00d1e75da1c3cb"
+checksum = "75c3f150ceb90e09539413bf481e618d05ee19210b4e467d2902eb82d2e15281"
 dependencies = [
  "itertools 0.12.1",
- "p3-field 0.3.3-succinct",
- "p3-maybe-rayon 0.3.3-succinct",
- "p3-util 0.3.3-succinct",
+ "p3-field 0.4.3-succinct",
+ "p3-maybe-rayon 0.4.3-succinct",
+ "p3-util 0.4.3-succinct",
  "rand 0.8.6",
  "serde",
  "tracing",
@@ -5487,9 +5495,9 @@ dependencies = [
 
 [[package]]
 name = "p3-maybe-rayon"
-version = "0.3.3-succinct"
+version = "0.4.3-succinct"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "55ac1d2f102cf8c71dba1b449575c99697781fcc028831e83d2245787bd7a650"
+checksum = "e0641952b42da45e1dfa2d4a2a3163e330f944ad9740942f35026c0a71a605f1"
 
 [[package]]
 name = "p3-maybe-rayon"
@@ -5498,16 +5506,16 @@ source = "git+https://github.com/Plonky3/Plonky3.git#3f67d136c71bec40f180c85d0bb
 
 [[package]]
 name = "p3-mds"
-version = "0.3.3-succinct"
+version = "0.4.3-succinct"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f072643e385d65fb9eb089ee6824b320417f78671a0db748566e057e28b250e"
+checksum = "aa4a5f250e174dcfca5cbeac6ad75713924e7e7320e0a335e3c50b8b1f4fe8ec"
 dependencies = [
  "itertools 0.12.1",
- "p3-dft 0.3.3-succinct",
- "p3-field 0.3.3-succinct",
- "p3-matrix 0.3.3-succinct",
- "p3-symmetric 0.3.3-succinct",
- "p3-util 0.3.3-succinct",
+ "p3-dft 0.4.3-succinct",
+ "p3-field 0.4.3-succinct",
+ "p3-matrix 0.4.3-succinct",
+ "p3-symmetric 0.4.3-succinct",
+ "p3-util 0.4.3-succinct",
  "rand 0.8.6",
 ]
 
@@ -5558,14 +5566,14 @@ dependencies = [
 
 [[package]]
 name = "p3-poseidon2"
-version = "0.3.3-succinct"
+version = "0.4.3-succinct"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "00cc4b6e8a439f79541b0910a016da9e6e12a05a24309bbb713e1db0db396952"
+checksum = "522986377b2164c5f94f2dae88e0e0a3d169cc6239202ef4aeb4322d60feffd0"
 dependencies = [
  "gcd",
- "p3-field 0.3.3-succinct",
- "p3-mds 0.3.3-succinct",
- "p3-symmetric 0.3.3-succinct",
+ "p3-field 0.4.3-succinct",
+ "p3-mds 0.4.3-succinct",
+ "p3-symmetric 0.4.3-succinct",
  "rand 0.8.6",
  "serde",
 ]
@@ -5584,12 +5592,12 @@ dependencies = [
 
 [[package]]
 name = "p3-symmetric"
-version = "0.3.3-succinct"
+version = "0.4.3-succinct"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8eebff7fea7deb08a57ccf731a0ed39df25cc66a0e0c2d92c4472c4dee02ee21"
+checksum = "9047ce85c086a9b3f118e10078f10636f7bfeed5da871a04da0b61400af8793a"
 dependencies = [
  "itertools 0.12.1",
- "p3-field 0.3.3-succinct",
+ "p3-field 0.4.3-succinct",
  "serde",
 ]
 
@@ -5606,9 +5614,9 @@ dependencies = [
 
 [[package]]
 name = "p3-util"
-version = "0.3.3-succinct"
+version = "0.4.3-succinct"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a8164df89bbc92e29938f916cc5f1ccbfe6a36fb5040f21ba93c1f21985b9868"
+checksum = "cff962f8eaa5f36e0447cee7c241f6b4b475fadf3ee61f154327a26bb4e009ba"
 dependencies = [
  "serde",
 ]
@@ -6042,7 +6050,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "27c6023962132f4b30eb4c172c91ce92d933da334c59c23cddee82358ddafb0b"
 dependencies = [
  "anyhow",
- "itertools 0.12.1",
+ "itertools 0.14.0",
  "proc-macro2",
  "quote",
  "syn 2.0.117",
@@ -7106,20 +7114,20 @@ checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
 
 [[package]]
 name = "slop-algebra"
-version = "6.2.1"
+version = "6.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a473c3a06b466dd0708829415a8a9fab451740da066e07862c8c098904aaad6"
+checksum = "8c112cafd4c5c374d267a48c8976d12fca3b0f2cc2e44e6fb1343808310b4fc6"
 dependencies = [
  "itertools 0.14.0",
- "p3-field 0.3.3-succinct",
+ "p3-field 0.4.3-succinct",
  "serde",
 ]
 
 [[package]]
 name = "slop-bn254"
-version = "6.2.1"
+version = "6.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e7fbae5dd16a3d1e87c9e99cfd557338171710be01458bd5b12dded3878d3fd8"
+checksum = "ea991a652ea2e55f0523649f5c9efbfb32cf9fdcc2bf3b3580b4343a94379503"
 dependencies = [
  "ff",
  "p3-bn254-fr",
@@ -7132,12 +7140,12 @@ dependencies = [
 
 [[package]]
 name = "slop-challenger"
-version = "6.2.1"
+version = "6.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f4e80df718cef7d3100658dc8b46fafcc994b814421ec9a7d0763a6ee1e5070c"
+checksum = "33b33f1eaadcd4159157758b0edcf1c14f470915f85c648e660e4740ff83e921"
 dependencies = [
  "futures",
- "p3-challenger 0.3.3-succinct",
+ "p3-challenger 0.4.3-succinct",
  "serde",
  "slop-algebra",
  "slop-symmetric",
@@ -7145,12 +7153,12 @@ dependencies = [
 
 [[package]]
 name = "slop-koala-bear"
-version = "6.2.1"
+version = "6.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d6586b1c0e66c503e4026a8cb007349fa99c2466957c5b09d18fe658d1391ed8"
+checksum = "8795ee9a92ecf0a604c0e3ed20e80bbc38772310c0622f94a2e1b66ca2455cb8"
 dependencies = [
  "lazy_static",
- "p3-koala-bear 0.3.3-succinct",
+ "p3-koala-bear 0.4.3-succinct",
  "serde",
  "slop-algebra",
  "slop-challenger",
@@ -7160,29 +7168,29 @@ dependencies = [
 
 [[package]]
 name = "slop-poseidon2"
-version = "6.2.1"
+version = "6.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c956b11fff1b8a071fa4ba982dc35e458cff1620dc7b33d9cf22d8df30895f79"
+checksum = "25561d9ecf4bcf1aa2e800560ac557bff6dad943b9dc5cd0e8427fceca1e8c65"
 dependencies = [
- "p3-poseidon2 0.3.3-succinct",
+ "p3-poseidon2 0.4.3-succinct",
 ]
 
 [[package]]
 name = "slop-primitives"
-version = "6.2.1"
+version = "6.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "de169e0ca381847f9efa0db5a54533371c10558d7aaed4cb3b2a9bae24a0fe83"
+checksum = "f6b24ad70b49f40d6acfe7b1ccf042db25820abe305a4c2232f15204f63f0227"
 dependencies = [
  "slop-algebra",
 ]
 
 [[package]]
 name = "slop-symmetric"
-version = "6.2.1"
+version = "6.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "955145ad6e3a1d083a428f9274071cfbb44c3b29013aae9d6c4c29fb7328cfc0"
+checksum = "94e580d03bb5383aca1c12579a8a24b838afb12eb356439e740cba34904b6864"
 dependencies = [
- "p3-symmetric 0.3.3-succinct",
+ "p3-symmetric 0.4.3-succinct",
 ]
 
 [[package]]
@@ -7251,9 +7259,9 @@ dependencies = [
 
 [[package]]
 name = "sp1-lib"
-version = "6.2.1"
+version = "6.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "02cd166e010c80e542585bf74585ea80eff117c361656cae43f2968cf0af12d4"
+checksum = "629b673d6aa3c666b41e14d699323413fa90195c906365ba8c49d1b8e4531151"
 dependencies = [
  "bincode",
  "serde",
@@ -7262,9 +7270,9 @@ dependencies = [
 
 [[package]]
 name = "sp1-primitives"
-version = "6.2.1"
+version = "6.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4df14efe799ebd675cf530c853153a4787327a2385067716dfad4ede79ff31ad"
+checksum = "421b4590a89bf7c263f8a64844a4034ee8cb73c351498911ce0acd18da6b5ed2"
 dependencies = [
  "bincode",
  "blake3",
@@ -7565,7 +7573,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
 dependencies = [
  "fastrand",
- "getrandom 0.3.4",
+ "getrandom 0.4.2",
  "once_cell",
  "rustix",
  "windows-sys 0.61.2",
diff --git a/Cargo.toml b/Cargo.toml
index 100b1a4a..a27e9f72 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -13,9 +13,19 @@ members = [
     "crates/net/api",
     "crates/net/p2p",
     "crates/net/rpc",
+    "crates/prover/core",
     "crates/storage",
 ]
 
+# NOTE: zkVM guest programs are their own workspaces: they build for the respective
+# target ISA via their respective build commands, not for the host, so `cargo {clippy,test}
+# --workspace` must not try to compile them.
+#
+# `ethlambda-prover-sp1` targets the host, but its build script compiles the
+# guest ELF and needs the SP1 (`cargo prove`) toolchain, so it is kept out of
+# the default `--workspace` build too.
+exclude = ["crates/guest-program/sp1", "crates/prover/sp1"]
+
 [workspace.package]
 authors = ["LambdaClass"]
 edition = "2024"
@@ -38,6 +48,8 @@ ethlambda-network-api = { path = "crates/net/api" }
 ethlambda-p2p = { path = "crates/net/p2p" }
 ethlambda-rpc = { path = "crates/net/rpc" }
 ethlambda-storage = { path = "crates/storage" }
+ethlambda-prover-core = { path = "crates/prover/core" }
+ethlambda-prover-sp1 = { path = "crates/prover/sp1" }
 
 tracing = "0.1"
 thiserror = "2.0.9"
@@ -72,11 +84,17 @@ rand = "0.10"
 lru = "0.16"
 rocksdb = "0.24"
 libc = "0.2"
-reqwest = { version = "0.12", default-features = false, features = ["rustls-tls"] }
+reqwest = { version = "0.12", default-features = false, features = [
+    "rustls-tls",
+] }
 eyre = "0.6"
 
 # Allocator + heap profiling
-tikv-jemallocator = { version = "0.6", features = ["stats", "unprefixed_malloc_on_supported_platforms", "profiling"] }
+tikv-jemallocator = { version = "0.6", features = [
+    "stats",
+    "unprefixed_malloc_on_supported_platforms",
+    "profiling",
+] }
 jemalloc_pprof = { version = "0.8", features = ["flamegraph"] }
 
 # NOTE: Shadow-simulator builds also replace quinn-udp with the fallback crate
diff --git a/crates/common/types/src/lib.rs b/crates/common/types/src/lib.rs
index 6db9a590..8eff6965 100644
--- a/crates/common/types/src/lib.rs
+++ b/crates/common/types/src/lib.rs
@@ -7,6 +7,7 @@ pub mod genesis;
 pub mod primitives;
 pub mod signature;
 pub mod state;
+pub mod stf;
 
 /// Display helper for truncated root hashes (8 hex chars)
 pub struct ShortRoot<'a>(pub &'a [u8; 32]);
diff --git a/crates/common/types/src/stf.rs b/crates/common/types/src/stf.rs
new file mode 100644
index 00000000..4244b5e8
--- /dev/null
+++ b/crates/common/types/src/stf.rs
@@ -0,0 +1,49 @@
+use libssz::{SszDecode, SszEncode};
+use serde::{Deserialize, Serialize};
+
+use crate::{block::Block, primitives::H256, state::State};
+
+/// Input type for the zkVM's
+///
+/// The inputs to the zkVM need to derive serde Serialize/deserialize
+/// which is not derived for state (libssz traits)
+/// wrapping pre-serialized SSZ bytes sidesteps that part.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct StfInput {
+    state: Vec<u8>,
+    block: Vec<u8>,
+}
+
+/// Public values committed by the STF guest program.
+///
+/// These bind a proof to one concrete transition: applying the block with
+/// `block_root` to the state with `pre_state_root` yields the state with
+/// `post_state_root`. A verifier reads these back from the proof without ever
+/// seeing the full pre-state or block, and can chain proofs by matching one
+/// transition's `post_state_root` to the next's `pre_state_root`.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct StfPublicValues {
+    /// `hash_tree_root` of the pre-state.
+    pub pre_state_root: H256,
+    /// `hash_tree_root` of the block being applied.
+    pub block_root: H256,
+    /// `hash_tree_root` of the post-state (equals `block.state_root`).
+    pub post_state_root: H256,
+}
+
+impl StfInput {
+    pub fn new(state: State, block: Block) -> Self {
+        StfInput {
+            state: state.to_ssz(),
+            block: block.to_ssz(),
+        }
+    }
+
+    pub fn state(&self) -> State {
+        State::from_ssz_bytes(&self.state).expect("error decoding State")
+    }
+
+    pub fn block(&self) -> Block {
+        Block::from_ssz_bytes(&self.block).expect("error decoding block")
+    }
+}
diff --git a/crates/guest-program/sp1/Cargo.toml b/crates/guest-program/sp1/Cargo.toml
new file mode 100644
index 00000000..1e2a93c7
--- /dev/null
+++ b/crates/guest-program/sp1/Cargo.toml
@@ -0,0 +1,15 @@
+# Standalone workspace: this guest builds for a RISC-V zkVM target via
+# `cargo prove build`, so it is excluded from the root workspace and cannot
+# inherit its `[workspace.package]` / `[workspace.dependencies]` values.
+[workspace]
+
+[package]
+name = "zkvm_guest_sp1"
+version = "0.1.0"
+edition = "2024"
+publish = false
+
+[dependencies]
+sp1-zkvm = "6.1.0"
+ethlambda-types = { path = "../../common/types" }
+ethlambda-state-transition = { path = "../../blockchain/state_transition" }
diff --git a/crates/guest-program/sp1/src/main.rs b/crates/guest-program/sp1/src/main.rs
new file mode 100644
index 00000000..859fb72a
--- /dev/null
+++ b/crates/guest-program/sp1/src/main.rs
@@ -0,0 +1,29 @@
+#![no_main]
+sp1_zkvm::entrypoint!(main);
+
+use ethlambda_state_transition::state_transition;
+use ethlambda_types::{
+    primitives::HashTreeRoot,
+    stf::{StfInput, StfPublicValues},
+};
+
+fn main() {
+    let input: StfInput = sp1_zkvm::io::read(); 
+    let mut state = input.state();
+    let block = input.block();
+
+    // Capture the pre-state and block roots before mutating the state, so the
+    // committed public values bind the proof to this specific transition.
+    let pre_state_root = state.hash_tree_root();
+    let block_root = block.hash_tree_root();
+
+    state_transition(&mut state, &block).expect("state transition failed");
+
+    let public_values = StfPublicValues {
+        pre_state_root,
+        block_root,
+        // state_transition already asserts this equals block.state_root.
+        post_state_root: state.hash_tree_root(),
+    };
+    sp1_zkvm::io::commit(&public_values);
+}
diff --git a/crates/prover/core/Cargo.toml b/crates/prover/core/Cargo.toml
new file mode 100644
index 00000000..a8f3187d
--- /dev/null
+++ b/crates/prover/core/Cargo.toml
@@ -0,0 +1,15 @@
+[package]
+name = "ethlambda-prover-core"
+authors.workspace = true
+edition.workspace = true
+keywords.workspace = true
+license.workspace = true
+readme.workspace = true
+repository.workspace = true
+rust-version.workspace = true
+version.workspace = true
+
+[dependencies]
+ethlambda-types.workspace = true
+thiserror.workspace = true
+
diff --git a/crates/prover/core/src/lib.rs b/crates/prover/core/src/lib.rs
new file mode 100644
index 00000000..e0a7518c
--- /dev/null
+++ b/crates/prover/core/src/lib.rs
@@ -0,0 +1,55 @@
+pub use ethlambda_types::stf::{StfInput, StfPublicValues};
+
+/// A serialized proof of a single state transition.
+///
+/// The bytes depend upon the specific zkVM being used, (SP1ProofWithPublicValues)
+/// and carry both the proof and the committed public values, so
+/// [`StfProver::verify`] can recover the [`StfPublicValues`] without re-running
+/// the transition.
+#[derive(Debug, Clone)]
+pub struct Proof(pub Vec<u8>);
+
+impl Proof {
+    /// Borrow the raw proof bytes.
+    pub fn as_bytes(&self) -> &[u8] {
+        &self.0
+    }
+}
+
+impl From<Vec<u8>> for Proof {
+    fn from(bytes: Vec<u8>) -> Self {
+        Self(bytes)
+    }
+}
+
+/// Proves and verifies state-transition executions on a zkVM backend.
+///
+/// The methods are `async` because real backends (SP1, RISC0, …) drive an
+/// async prover client. This makes the trait non–object-safe, so consumers
+/// select a backend by concrete type rather than `Box<dyn StfProver>`.
+///
+/// `async_fn_in_trait` is allowed deliberately: we don't constrain the returned
+/// futures to `Send`, since backend prover clients don't all guarantee it.
+#[allow(async_fn_in_trait)]
+pub trait StfProver {
+    /// Prove that applying the input's block to its pre-state is a valid
+    /// transition, returning [`Proof`].
+    async fn prove(&self, input: &StfInput) -> Result<Proof, ProverError>;
+
+    /// Verify a proof and return the public values it commits to.
+    async fn verify(&self, proof: &Proof) -> Result<StfPublicValues, ProverError>;
+}
+
+/// Errors raised while proving or verifying a state transition.
+#[derive(Debug, thiserror::Error)]
+pub enum ProverError {
+    /// The backend failed to produce a proof.
+    #[error("proving failed: {0}")]
+    Prove(String),
+    /// The proof did not verify, or verification could not run.
+    #[error("verification failed: {0}")]
+    Verify(String),
+    /// A proof or its public values could not be (de)serialized.
+    #[error("proof (de)serialization failed: {0}")]
+    Serialization(String),
+}
diff --git a/crates/prover/sp1/Cargo.toml b/crates/prover/sp1/Cargo.toml
new file mode 100644
index 00000000..395223c3
--- /dev/null
+++ b/crates/prover/sp1/Cargo.toml
@@ -0,0 +1,20 @@
+# Standalone workspace: this crate is excluded from the root workspace because
+# its build script needs the SP1 (`cargo prove`) toolchain.  
+[workspace]
+
+[package]
+name = "ethlambda-prover-sp1"
+version = "0.1.0"
+edition = "2024"
+publish = false
+
+[dependencies]
+sp1-sdk = "6.3.1"
+ethlambda-prover-core = { path = "../core" }
+ethlambda-types = { path = "../../common/types" }
+# Serializes the whole SP1ProofWithPublicValues into `Proof` so verify can
+# recover the committed public values.
+bincode = "1.3"
+
+[build-dependencies]
+sp1-build = "6.3.1"
diff --git a/crates/prover/sp1/build.rs b/crates/prover/sp1/build.rs
new file mode 100644
index 00000000..9952bcb9
--- /dev/null
+++ b/crates/prover/sp1/build.rs
@@ -0,0 +1,5 @@
+fn main() {
+    // Compile the RISC-V guest program so `include_elf!("zkvm_guest_sp1")` can
+    // embed its ELF. Path is relative to this crate's manifest directory.
+    sp1_build::build_program("../../guest-program/sp1");
+}
diff --git a/crates/prover/sp1/src/lib.rs b/crates/prover/sp1/src/lib.rs
new file mode 100644
index 00000000..cb8cc688
--- /dev/null
+++ b/crates/prover/sp1/src/lib.rs
@@ -0,0 +1,67 @@
+use ethlambda_prover_core::{Proof, ProverError, StfInput, StfProver, StfPublicValues};
+use sp1_sdk::{
+    MockProver, Prover, SP1ProofWithPublicValues, SP1ProvingKey, SP1Stdin, SP1VerifyingKey,
+    include_elf,
+};
+
+
+const STATE_TRANSITION_ELF: &[u8] = include_elf!("zkvm_guest_sp1");
+const CYCLE_LIMIT: u64 = 10_000_000;
+
+/// SP1 prover: proves the STF guest and verifies its proofs.
+///
+/// The proving/verifying keys are derived once via [`Sp1Prover::new`] because
+/// `setup` is expensive and must not run per proof.
+/// [TODO!]: check if using Lazylock might be better 
+pub struct Sp1Prover {
+    client: MockProver,
+    pk: SP1ProvingKey,
+    vk: SP1VerifyingKey,
+}
+
+impl Sp1Prover {
+    /// Build the prover once, caching the proving/verifying keys and
+    /// currently uses the MockProver. 
+    pub async fn new() -> Self {
+        let client = MockProver::new().await;
+        // let client = ProverClient::builder().cpu().await;
+        let (pk, vk) = client.setup(STATE_TRANSITION_ELF).await;
+        Self { client, pk, vk }
+    }
+}
+
+impl StfProver for Sp1Prover {
+    async fn prove(&self, input: &StfInput) -> Result<Proof, ProverError> {
+
+        let mut stdin = SP1Stdin::new();
+        stdin.write(input);
+
+        // use `.groth16()` instead of `.compressed()` for real proving and verification
+        let proof = self
+            .client
+            .prove(&self.pk, stdin)
+            .compressed()
+            .cycle_limit(CYCLE_LIMIT)
+            .await
+            .map_err(|err| ProverError::Prove(err.to_string()))?;
+
+        // Store the whole proof (including public values) so `verify` can
+        // recover the committed `StfPublicValues`.
+        let bytes =
+            bincode::serialize(&proof).map_err(|err| ProverError::Serialization(err.to_string()))?;
+        Ok(Proof(bytes))
+    }
+
+    async fn verify(&self, proof: &Proof) -> Result<StfPublicValues, ProverError> {
+        let mut sp1_proof: SP1ProofWithPublicValues = bincode::deserialize(proof.as_bytes())
+            .map_err(|err| ProverError::Serialization(err.to_string()))?;
+
+        self.client
+            .verify(&sp1_proof, &self.vk)
+            .await
+            .map_err(|err| ProverError::Verify(err.to_string()))?;
+
+        // The guest committed `StfPublicValues` via `io::commit`; read it back.
+        Ok(sp1_proof.public_values.read::<StfPublicValues>())
+    }
+}