@rygorous hmm but a reverse setup also makes sense: let's imagine that prover had an array of statements they can prove and what we want to keep secret is _which_ of them the verifier wanted proven.
I wonder if I'm describing something that's will known under some renaming (or maybe it's just a special case of private retrieval; but it's if maybe strictly simpler than that).