A construction that compresses multiple signatures into one proof to reduce bandwidth and verification overhead.