What

The commitment proof is done in G2 instead of G1.

Why

To prevent a security issue where a malicious slot producer could commit data which are two times bigger than expected

How

Magic trick from the crypto (see Degree_check). Explanation will follow later.