Currently the prover is not performing validation in the Attestation of the Notary's secret used to derive the encodings.
Relevant code:

This opens up an attack which will go like this:

• the Notary flips an encoding of a single bit and sends the encodings to the Prover
• the Prover commits (unknowingly) to the flipped encoding and gets an Attestation
• later the Prover creates a presentation and sends it to an app-specific Verifier
• the Verifier will fail or verify the encoding commitment
• the Notary will observe the failure

at best, this would be a DoS attack against the Prover
additionally, the Notary will also learn whether a certain bit was opened to the Verifier or not