evstack
diff --git a/‎.github/workflows/integration_test.yml‎
Lines changed: 139 additions & 0 deletions b/‎.github/workflows/integration_test.yml‎
Lines changed: 139 additions & 0 deletions
diff --git a/‎Makefile‎
Lines changed: 23 additions & 0 deletions b/‎Makefile‎
Lines changed: 23 additions & 0 deletions
diff --git a/‎attester/.gitignore‎
Lines changed: 1 addition & 0 deletions b/‎attester/.gitignore‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎attester/README.md‎
Lines changed: 65 additions & 0 deletions b/‎attester/README.md‎
Lines changed: 65 additions & 0 deletions
@@ -11,6 +11,92 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  build-gm-image:
+    name: Build GM Image
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    permissions:
+      contents: read
+      packages: write
+    outputs:
+      image_tag: ${{ steps.tag.outputs.tag }}
+    env:
+      IGNITE_VERSION: v29.3.1
+      IGNITE_EVOLVE_APP_VERSION: main
+      EVNODE_VERSION: v1.0.0-beta.7
+    steps:
+      - uses: actions/checkout@v5
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Determine image tag
+        id: tag
+        run: |
+          if [ "${{ github.event_name }}" = "pull_request" ]; then
+            echo "tag=ghcr.io/evstack/evolve-gm:pr-${{ github.event.pull_request.number }}" >> "$GITHUB_OUTPUT"
+          else
+            echo "tag=ghcr.io/evstack/evolve-gm:${{ github.sha }}" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Build and push GM image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: tests/integration/docker/Dockerfile.gm
+          push: true
+          tags: ${{ steps.tag.outputs.tag }}
+          build-args: |
+            IGNITE_VERSION=${{ env.IGNITE_VERSION }}
+            IGNITE_EVOLVE_APP_VERSION=${{ env.IGNITE_EVOLVE_APP_VERSION }}
+            EVNODE_VERSION=${{ env.EVNODE_VERSION }}
+
+  build-attester-image:
+    name: Build Attester Image
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    permissions:
+      contents: read
+      packages: write
+    outputs:
+      image_tag: ${{ steps.tag.outputs.tag }}
+    steps:
+      - uses: actions/checkout@v5
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Determine image tag
+        id: tag
+        run: |
+          if [ "${{ github.event_name }}" = "pull_request" ]; then
+            echo "tag=ghcr.io/evstack/attester:pr-${{ github.event.pull_request.number }}" >> "$GITHUB_OUTPUT"
+          else
+            echo "tag=ghcr.io/evstack/attester:${{ github.sha }}" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Build and push Attester image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: tests/integration/docker/Dockerfile.attester
+          push: true
+          tags: ${{ steps.tag.outputs.tag }}
+
   liveness-tastora:
     name: Test with EV-ABCI Chain (Tastora)
     runs-on: ubuntu-latest
@@ -276,6 +362,9 @@ jobs:
 
       - name: Download gm Binary and gmd Home Directory
         uses: actions/download-artifact@v4 # keep v4.
+        with:
+          name: gmd
+          path: gmd
 
       - name: Download Gaia Binary
         run: |
@@ -478,3 +567,53 @@ jobs:
           if [[ -n "${HERMES_PID}" ]]; then
             kill -9 $HERMES_PID || true
           fi
+
+  attester-integration:
+    needs: [build-gm-image, build-attester-image]
+    name: Attester Mode Integration Test
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    env:
+      DO_NOT_TRACK: true
+      EVNODE_VERSION: "v1.0.0-beta.7"
+      EVNODE_DA_VERSION: "v1.0.0-beta.1"
+      IGNITE_VERSION: "v29.3.1"
+      IGNITE_EVOLVE_APP_VERSION: "main"
+      GAIA_VERSION: "v25.1.0"
+      EVOLVE_IMAGE_REPO: "evabci/gm"
+      EVOLVE_IMAGE_TAG: "local"
+
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Pull GM image from GHCR
+        run: |
+          docker pull ${{ needs.build-gm-image.outputs.image_tag }}
+          docker tag ${{ needs.build-gm-image.outputs.image_tag }} evabci/gm:local
+
+      - name: Pull Attester image from GHCR
+        run: |
+          docker pull ${{ needs.build-attester-image.outputs.image_tag }}
+          docker tag ${{ needs.build-attester-image.outputs.image_tag }} evabci/attester:local
+
+      - name: Run attester integration test
+        working-directory: tests/integration
+        env:
+          GOTOOLCHAIN: auto
+          VERBOSE: "true"
+        run: |
+          go test -v -run 'TestDockerIntegrationTestSuite/TestAttesterSystem' -count=1
@@ -4,6 +4,10 @@ pkgs := $(shell go list ./...)
 run := .
 count := 1
 
+IGNITE_VERSION ?= v29.3.1
+IGNITE_EVOLVE_APP_VERSION ?= main
+EVNODE_VERSION ?= v1.0.0-beta.5
+
 ## help: Show this help message
 help: Makefile
 	@echo " Choose a command run in "$(PROJECTNAME)":"
@@ -77,3 +81,22 @@ proto-gen:
 	@rm -r modules/github.com
 
 .PHONY: proto-gen
+
+
+## build-attester-docker-images: Build Docker images for the GM chain and attester integration tests
+build-attester-docker-images:
+	@echo "--> Building GM integration Docker image"
+	@docker build \
+		-f tests/integration/docker/Dockerfile.gm \
+		--build-arg IGNITE_VERSION=$(IGNITE_VERSION) \
+		--build-arg IGNITE_EVOLVE_APP_VERSION=$(IGNITE_EVOLVE_APP_VERSION) \
+		--build-arg EVNODE_VERSION=$(EVNODE_VERSION) \
+		-t evabci/gm:local \
+		.
+	@echo "--> Building attester integration Docker image"
+	@docker build \
+		-f tests/integration/docker/Dockerfile.attester \
+		-t evabci/attester:local \
+		.
+
+.PHONY: build-attester-docker-images
@@ -0,0 +1 @@
+/attester
@@ -0,0 +1,65 @@
+# Evolve Attester (beta)
+
+> Early, simplified attester mode. Work in progress – expect breaking changes and incomplete feature coverage.
+
+This command-line helper joins the attester set of an Evolve-based chain and streams attestations for new blocks. It is the first public beta of the attester workflow and intentionally omits a number of production-hardening features (automatic key management, batching, robust persistence, etc.). The goal is to unblock experimentation on top of the upcoming attester mode.
+
+## What it does
+
+- Configures the Cosmos SDK Bech32 prefixes required by the target chain.
+- Derives an operator account key from a mnemonic and loads the validator consensus key from the local `priv_validator_key.json`.
+- Submits a `MsgJoinAttesterSet` transaction so the validator's consensus key is registered as an attester.
+- Polls the node's RPC (`/status` and `/block`) to detect new heights and rebuilds the Evolve header and original `BlockID` for each block.
+- Signs a precommit-style vote with the consensus key and wraps it in `MsgAttest` transactions paid for by the operator account.
+- Retries failed submissions a few times and keeps catching up when the attester falls behind.
+
+## Prerequisites
+
+- An Evolve node exposing RPC on `tcp://HOST:PORT` and REST API on `http://HOST:PORT`.
+- Access to the validator home directory so the attester can read `config/priv_validator_key.json` and `data/priv_validator_state.json`.
+- A funded Cosmos SDK account mnemonic that will cover the attestation fees.
+- The chain ID and Bech32 prefixes used by your deployment.
+
+## Running the attester
+
+Build with Go 1.22+:
+
+```bash
+cd attester
+go build -o attester
+```
+
+Run it against your node (adjust the sample values):
+
+```bash
+./attester \
+  --chain-id evmallus-1 \
+  --node tcp://localhost:26657 \
+  --api-addr http://localhost:1317 \
+  --home /path/to/validator/home \
+  --mnemonic "word1 word2 … word24" \
+  --verbose
+```
+
+### Important flags
+
+- `--home` – validator home directory containing the CometBFT private validator files.
+- `--mnemonic` – Cosmos SDK mnemonic for the operator account that pays fees.
+- `--bech32-account-prefix` and friends – override if your chain does not use the defaults (`gm`, `gmvaloper`, etc.).
+- `--node` / `--api-addr` – RPC and REST endpoints used for account queries and block data.
+
+## Operational notes
+
+- The attester assumes the node accepts `MsgAttest` at every height. Current networks only process attestations at checkpoint heights (multiples of the epoch length); out-of-window submissions will be rejected with code 18 (`invalid request`).
+- Sequence numbers are cached in memory. Restarting the process while transactions are pending can still produce sequence mismatches.
+- HTTP polling currently drives block detection. There is no WebSocket subscription or backoff logic yet, so running it against remote nodes may require proxying/caching to avoid throttling.
+- Logging is verbose by default to aid debugging. Remove `--verbose` once the setup is stable.
+
+## Limitations and future work
+
+- No automatic key rotation or secure storage – mnemonic and consensus keys must be provided manually.
+- No persistence of attestation state across restarts beyond what the chain tracks.
+- Lacks production monitoring hooks, metrics, and alerting.
+- Error handling focuses on known happy paths; unexpected RPC responses will cause retries or exits.
+
+Feedback is welcome. Please treat this module as beta software and be prepared for rapid iteration as the attester mode matures.