standards: add workspace and CI split

Author: HDauven

.github/workflows/ci.yml

@@ -5,6 +5,45 @@ on:
       - main
 
 jobs:
+  changes:
+    name: Detect changed contract areas
+    runs-on: core
+    outputs:
+      legacy: ${{ steps.filter.outputs.legacy }}
+      standards: ${{ steps.filter.outputs.standards }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - id: filter
+        uses: dorny/paths-filter@v3
+        with:
+          filters: |
+            legacy:
+              - 'genesis/**'
+              - 'tests/**'
+              - 'bin/**'
+              - 'scripts/setup-compiler.sh'
+              - 'scripts/download-rusk.sh'
+              - 'scripts/build-test-contracts.sh'
+              - 'Cargo.toml'
+              - 'Cargo.lock'
+              - 'Makefile'
+              - 'README.md'
+              - 'rust-toolchain.toml'
+              - '.github/workflows/ci.yml'
+            standards:
+              - 'standards/**'
+              - 'docs/dusk-contract-standards*'
+              - 'scripts/dusk-contract-standards-*'
+              - 'Cargo.toml'
+              - 'Cargo.lock'
+              - 'Makefile'
+              - 'README.md'
+              - 'rust-toolchain.toml'
+              - '.github/workflows/ci.yml'
+              - '.github/workflows/standards-hardening.yml'
+
   dusk_analyzer:
     name: Dusk Analyzer
     runs-on: core
@@ -13,9 +52,13 @@ jobs:
       - uses: dsherret/rust-toolchain-file@v1
       - run: cargo install --git https://github.com/dusk-network/cargo-dusk-analyzer
       - run: cargo dusk-analyzer
+      - run: rustup toolchain install nightly-2026-02-27 --profile minimal --component rust-src --component rustfmt --component clippy --target wasm32-unknown-unknown
+      - run: cd standards && cargo dusk-analyzer
 
   clippy:
     name: Clippy check
+    needs: changes
+    if: needs.changes.outputs.legacy == 'true'
     runs-on: core
     steps:
       - uses: actions/checkout@v4
@@ -25,9 +68,22 @@ jobs:
 
   test:
     name: Run Tests
+    needs: changes
+    if: needs.changes.outputs.legacy == 'true'
     runs-on: core
     steps:
       - uses: actions/checkout@v4
       - uses: dsherret/rust-toolchain-file@v1
       - run: make keys
       - run: make test
+
+  standards:
+    name: Standards CI
+    needs: changes
+    if: needs.changes.outputs.standards == 'true'
+    runs-on: core
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dsherret/rust-toolchain-file@v1
+      - run: rustup toolchain install nightly-2026-02-27 --profile minimal --component rust-src --component rustfmt --component clippy --target wasm32-unknown-unknown
+      - run: make standards-ci

Cargo.toml

@@ -14,13 +14,15 @@ members = [
 resolver = "2"
 
 [workspace.dependencies]
-# Dusk dependencies
-dusk-core = "1.4.0"
+# Dusk dependencies used by the legacy genesis/test contracts. The standards
+# crates pin their Aegis/Forge dependencies in their own manifests so they do
+# not force genesis contracts onto a compiler-incompatible dependency graph.
+dusk-core = "=1.4.0"
 dusk-bytes = "0.1.7"
-dusk-vm = "1.4.3"
-dusk-wallet-core = "1.4.0"
-rusk-profile = "1.4.0"
-rusk-prover = "1.3.0"
+dusk-vm = "=1.4.3"
+dusk-wallet-core = "=1.4.0"
+rusk-profile = "=1.4.0"
+rusk-prover = "=1.3.0"
 
 # Other dependencies
 bytecheck = { version = "0.6.12", default-features = false }

Makefile

@@ -1,20 +1,60 @@
-SUBDIRS := tests/alice tests/bob tests/charlie genesis/transfer genesis/stake tests/host_fn
+STANDARDS_EXAMPLES :=
+STANDARDS_WASM_CONTRACTS :=
+LEGACY_SUBDIRS := tests/alice tests/bob tests/charlie genesis/transfer genesis/stake tests/host_fn
+STANDARDS_PROPTEST_CASES ?= 8192
+STANDARDS_PROPTEST_MAX_SHRINK_ITERS ?= 16384
+STANDARDS_DATA_DRIVER_FUZZ_CASES ?= 2048
+STANDARDS_DATA_DRIVER_FUZZ_SHRINK_ITERS ?= 4096
 
-all: setup-compiler $(SUBDIRS) ## Build all the contracts
+all: setup-compiler $(LEGACY_SUBDIRS) ## Build the legacy genesis/test contracts
 
 help: ## Display this help screen
 	@grep -h \
 		-E '^[a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | \
 		awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-30s\033[0m %s\n", $$1, $$2}'
 
 test: wasm ## Run all the tests in the subfolder
-	$(MAKE) $(SUBDIRS) MAKECMDGOALS=test
+	$(MAKE) $(LEGACY_SUBDIRS) MAKECMDGOALS=test
 
 wasm: setup-compiler ## Generate the WASM for all the contracts
-	$(MAKE) $(SUBDIRS) MAKECMDGOALS=wasm
+	$(MAKE) $(LEGACY_SUBDIRS) MAKECMDGOALS=wasm
+
+standards-fmt: ## Check Dusk standards formatting without the Dusk compiler bundle
+	cd standards && cargo fmt --all --check
+
+standards-check: ## Check the Dusk standards crate without the Dusk compiler bundle
+	$(MAKE) -C standards/dusk-contract-standards check
+
+standards-test: ## Test the Dusk standards crate without the Dusk compiler bundle
+	$(MAKE) -C standards/dusk-contract-standards test
+
+standards-wasm: ## Build standards reference contracts without the Dusk compiler bundle
+	@true
+
+standards-clippy: ## Run standards clippy without the Dusk compiler bundle
+	$(MAKE) -C standards/dusk-contract-standards clippy
+
+standards-ci: standards-fmt standards-check standards-clippy standards-test standards-wasm ## Run regular standards CI checks
+
+standards-data-drivers: ## Generate Forge data-driver WASM for standards reference contracts
+	@if [ -n "$(STANDARDS_EXAMPLES)" ]; then \
+		$(MAKE) $(STANDARDS_EXAMPLES) MAKECMDGOALS=wasm-dd; \
+	fi
+
+standards-properties: ## Run the longer standards property hardening suite
+	STANDARDS_PROPTEST_CASES=$(STANDARDS_PROPTEST_CASES) \
+	STANDARDS_PROPTEST_MAX_SHRINK_ITERS=$(STANDARDS_PROPTEST_MAX_SHRINK_ITERS) \
+	cd standards && cargo test -p dusk-contract-standards --test properties
+
+standards-data-driver-fuzz: standards-data-drivers ## Fuzz Forge data-driver JSON/rkyv input codecs
+	STANDARDS_DATA_DRIVER_FUZZ_CASES=$(STANDARDS_DATA_DRIVER_FUZZ_CASES) \
+	STANDARDS_DATA_DRIVER_FUZZ_SHRINK_ITERS=$(STANDARDS_DATA_DRIVER_FUZZ_SHRINK_ITERS) \
+	cd standards && cargo test -p dusk-contract-standards --test data_driver_fuzz -- --ignored
+
+standards-hardening: standards-properties standards-data-driver-fuzz ## Run long standards hardening checks
 
 clippy: setup-compiler ## Run clippy
-	$(MAKE) $(SUBDIRS) MAKECMDGOALS=clippy
+	$(MAKE) $(LEGACY_SUBDIRS) MAKECMDGOALS=clippy
 
 keys: ## Create the keys for the circuits
 	./scripts/download-rusk.sh
@@ -24,9 +64,9 @@ COMPILER_VERSION=v0.3.0-rc.1
 setup-compiler: ## Setup the Dusk Contract Compiler
 	@./scripts/setup-compiler.sh $(COMPILER_VERSION)
 
-doc: $(SUBDIRS) ## Run doc gen
+doc: $(LEGACY_SUBDIRS) ## Run doc gen
 
-$(SUBDIRS):
+$(LEGACY_SUBDIRS) $(STANDARDS_WASM_CONTRACTS):
 	$(MAKE) -C $@ $(MAKECMDGOALS)
 
-.PHONY: all test help $(SUBDIRS)
+.PHONY: all test help standards-fmt standards-check standards-test standards-wasm standards-clippy standards-ci standards-data-drivers standards-properties standards-data-driver-fuzz standards-hardening $(LEGACY_SUBDIRS) $(STANDARDS_WASM_CONTRACTS)

README.md

@@ -11,6 +11,9 @@ This repository contains smart contracts for the Dusk ecosystem:
 
 - Genesis protocol contracts: part of the genesis state and provide core
   functionality to the Dusk protocol.
+- Contract standards: reusable Dusk-native primitives and examples for access
+  control, tokens, replay and nonce protection, timelocks, pausing, reentrancy
+  guards, and upgrade policy.
 - Test contracts: small contracts used for integration tests and host function
   coverage.
 
@@ -45,3 +48,11 @@ The on-chain ContractId for the stake contract is:
   on behalf of a contract via the transfer and stake contracts.
 - [`host_fn`](tests/host_fn): wraps host functions (hashing, signature/proof
   verification, chain metadata, etc.) for testing.
+
+## Contract Standards
+
+- [`dusk-contract-standards`](standards/dusk-contract-standards): reusable
+  primitives.
+
+Reference contracts, design notes, and security documentation are added in the
+follow-up standards PRs.