Cross-circuit check: C6→C8 — verify C7 uses C6s decrypted shares of honest parties

[0xjei]

this requires a change in the circuit to make d private and pass the commitments along C6->C7