The same frozen model behind the published calls. The SHA-256 shown here is bit-identical to the command-line tool, and nothing is tuned per circuit.