circuit ciphertext witness is not cryptographically tied to the published ciphertext bytes.

[0xjei]

There is no bridge between the circuit’s Poseidon ct_commitment and the on-chain Keccak hash of e3.ciphertextOutput. decryption_aggregator does not expose or validate the final ciphertext commitment on-chain.