Start with a 3-round ZK proof for NP
(say, G3C or Hamilton path):
P(x,w,r) V(x)
Pís commit: _
Vís challenge: _
Response: _