The preceding chapter, Merlin Transcripts, describes how Merlin transcripts operate. This chapter describes how to use Merlin to implement a proof protocol:

• Transcript Protocols describes how to specify how a proof system's mathematical objects are encoded into transcript messages;
• Passing Transcripts describes how to pass transcripts into proving and verification functions, and how this can provide domain separation and sequential composition;
• Prover-Verifier Duality describes how two counterparties can interactively compose non-interactive proofs.