Add Dusk contract standards and Forge reference contracts

.github/workflows/ci.yml

@@ -5,6 +5,50 @@ on:
       - main
 
 jobs:
+  changes:
+    name: Detect changed contract areas
+    runs-on: core
+    outputs:
+      legacy: ${{ steps.filter.outputs.legacy }}
+      standards: ${{ steps.filter.outputs.standards }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - id: filter
+        shell: bash
+        run: |
+          set -euo pipefail
+
+          legacy=false
+          standards=false
+
+          if [[ "${{ github.event_name }}" == "push" ]]; then
+            legacy=true
+            standards=true
+          else
+            files="$(git diff --name-only \
+              "${{ github.event.pull_request.base.sha }}" \
+              "${{ github.event.pull_request.head.sha }}")"
+
+            while IFS= read -r file; do
+              [[ -z "$file" ]] && continue
+              case "$file" in
+                genesis/*|tests/*|bin/*|scripts/setup-compiler.sh|scripts/download-rusk.sh|scripts/build-test-contracts.sh)
+                  legacy=true
+                  ;;
+              esac
+              case "$file" in
+                standards/*|docs/dusk-contract-standards*|scripts/dusk-contract-standards-*|Cargo.toml|Cargo.lock|Makefile|README.md|rust-toolchain.toml|.github/workflows/ci.yml|.github/workflows/standards-hardening.yml)
+                  standards=true
+                  ;;
+              esac
+            done <<< "$files"
+          fi
+
+          echo "legacy=$legacy" >> "$GITHUB_OUTPUT"
+          echo "standards=$standards" >> "$GITHUB_OUTPUT"
+
   dusk_analyzer:
     name: Dusk Analyzer
     runs-on: core
@@ -13,9 +57,12 @@ jobs:
       - uses: dsherret/rust-toolchain-file@v1
       - run: cargo install --git https://github.com/dusk-network/cargo-dusk-analyzer
       - run: cargo dusk-analyzer
+      - run: cargo dusk-analyzer --manifest-path standards/Cargo.toml
 
   clippy:
     name: Clippy check
+    needs: changes
+    if: needs.changes.outputs.legacy == 'true'
     runs-on: core
     steps:
       - uses: actions/checkout@v4
@@ -25,9 +72,22 @@ jobs:
 
   test:
     name: Run Tests
+    needs: changes
+    if: needs.changes.outputs.legacy == 'true'
     runs-on: core
     steps:
       - uses: actions/checkout@v4
       - uses: dsherret/rust-toolchain-file@v1
       - run: make keys
       - run: make test
+
+  standards:
+    name: Standards CI
+    needs: changes
+    if: needs.changes.outputs.standards == 'true'
+    runs-on: core
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dsherret/rust-toolchain-file@v1
+      - run: rustup target add wasm32-unknown-unknown
+      - run: make standards-ci

.github/workflows/standards-hardening.yml

@@ -0,0 +1,31 @@
+name: Standards Hardening
+
+on:
+  workflow_dispatch:
+    inputs:
+      property_cases:
+        description: Property-test cases per invariant
+        required: false
+        default: "8192"
+      data_driver_cases:
+        description: Forge data-driver fuzz cases
+        required: false
+        default: "2048"
+  schedule:
+    - cron: "17 2 * * *"
+
+jobs:
+  hardening:
+    name: Standards property and ABI fuzzing
+    runs-on: core
+    timeout-minutes: 240
+    env:
+      STANDARDS_PROPTEST_CASES: ${{ github.event.inputs.property_cases || '8192' }}
+      STANDARDS_PROPTEST_MAX_SHRINK_ITERS: "16384"
+      STANDARDS_DATA_DRIVER_FUZZ_CASES: ${{ github.event.inputs.data_driver_cases || '2048' }}
+      STANDARDS_DATA_DRIVER_FUZZ_SHRINK_ITERS: "4096"
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dsherret/rust-toolchain-file@v1
+      - run: rustup target add wasm32-unknown-unknown
+      - run: make standards-hardening