Looking for a security reviewer: a small zero-knowledge age gate with shielded testnet payments

Visitors can then pay with a shielded Zcash payment through ZecCheckout, which holds only a viewing key. Everything runs on test credentials and testnet. Code: GitHub - Mirrorisor/age-gate: Experimental zero-knowledge "over 18" check with an optional Zcash testnet payment gate (learning project) · GitHub Before I ask anyone for funding, I’d like someone with security experience to look at it. I’ve tried to make that easy: Threat model, with the gaps I already know about: age-gate/docs/THREAT-MODEL.md at main · Mirrorisor/age-gate · GitHub The part I’m least sure of, the passport check (about 190 lines of TypeScript plus a few routes), with specific questions: age-gate/docs/REVIEW-PASSPORT.md at main · Mirrorisor/age-gate · GitHub What funding would pay for, milestone by milestone: age-gate/docs/ROADMAP.md at main · Mirrorisor/age-gate · GitHub It runs in Docker, there’s a one-command end-to-end check (scripts/e2e.ps1), and CI builds and tests every part. The payment side is