to the past neighbours and past neighbours of past neighbours, see the flow construction in [@DK2006]). Then the corrected angle (the one that is actually measured) is $\phi'_i = (-1)^{s_i^X}\phi_i + s_i^Z\pi$.

The computation can be totally hidden from the server due to the following observation: if instead of sending $\ket{+}$ states the client chooses at random and sends $\ket{+_\theta}=1/\sqrt{2}(\ket{0}+e^{i\theta}\ket{1})$ with $\theta \in \{0, \pi/8, 2\cdot\pi/8,\ldots, 7\cdot\pi/8\}$ then measuring the qubits in a similarly rotated basis has the same result as the initial non-rotated computation. If the client keeps the angle $\theta$ hidden from the server, the server is completely blind on what computation is being performed. To ensure that no information is leaked from the measurement outcome, we add another parameter $r_i$ for each qubit, which serves as a One-Time-Pad for the measurement outcome. The resulting measurement angle with all parameters taken into account is then $\delta_i = C(\phi_i, s_i^X, s_i^Z, \theta_i, r_i) = \phi'_i(\phi_i, s_i^X, s_i^Z) + \theta_i + r_i\pi$. In short, the client sends rotated qubits (to become the resource state once entangled) and then guides the computation with a set of classical instructions. It is the combination of these two parts (quantum state preparation and classical 