Why ownPublicKey() Is Unsafe for Access Control in Compact

Why ownPublicKey() Is Unsafe for Access Control in Compact There's a pattern I see in early Midnight contracts that looks completely reasonable at first glance and is completely broken in practice. It goes like this: store the owner's public key in the ledger at initialization, then check ownPublicKey() in privileged circuits to verify the caller is the owner. // DON'T DO THIS contract BrokenVault { ledger ownerKey: ZswapCoinPublicKey; circuit initialize(ownerKey: ZswapCoinPublicKey): [] { ledge