Very nice! You mention on github you use 9 = 6 + 3 columns. Your constraints in the hackmd look like they use a lot fewer than that (4 for rescue, I’m not sure how many for the curve gate).
Do you actually use 9 columns or is the github out of date? And do you have some way of avoiding paying for the columns in constraints where you don’t use them?
Also I wondered if you considered reducing the degree of the rescue gates by using additional columns?
Like let’s say \alpha = 5, you can add e.g., additional columns t_1, t_2 and instead of x_i = y_i^5 have t_i = y_i^2 and x_i = t_i^2 y_i.