feat: execution verification (#2377)

<!--
Please read and fill out this form before submitting your PR.

Please make sure you have reviewed our contributors guide before
submitting your
first PR.

NOTE: PR titles should follow semantic commits:
https://www.conventionalcommits.org/en/v1.0.0/
-->

## Overview

fixes  #2250 

this pr adds apphash verification based on the execution environment. 

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Added support for immediate and delayed execution modes, allowing more
flexible block processing and validation.
* Exposed execution mode information in executors and related
interfaces.
* **Bug Fixes**
* Re-enabled strict block time validation to ensure block times are
strictly increasing.
  * Improved AppHash validation logic based on execution mode.
* **Tests**
  * Reactivated and updated tests for block time and AppHash validation.
  * Extended mocks to support execution mode queries.
* **Chores**
  * Updated dependency management and Go toolchain versions.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: tac0turtle <you@example.com>

Author: tac0turtle

apps/testapp/go.mod

@@ -13,6 +13,7 @@ require (
 	cosmossdk.io/log v1.6.0
 	github.com/ipfs/go-datastore v0.8.2
 	github.com/rollkit/rollkit v0.0.0-00010101000000-000000000000
+	github.com/rollkit/rollkit/core v0.0.0-20250312114929-104787ba1a4c
 	github.com/rollkit/rollkit/da v0.0.0-00010101000000-000000000000
 	github.com/rollkit/rollkit/sequencers/single v0.0.0-00010101000000-000000000000
 	github.com/rs/zerolog v1.34.0
@@ -147,7 +148,6 @@ require (
 	github.com/quic-go/quic-go v0.50.1 // indirect
 	github.com/quic-go/webtransport-go v0.8.1-0.20241018022711-4ac2c9250e66 // indirect
 	github.com/raulk/go-watchdog v1.3.0 // indirect
-	github.com/rollkit/rollkit/core v0.0.0-20250312114929-104787ba1a4c // indirect
 	github.com/sagikazarmark/locafero v0.4.0 // indirect
 	github.com/sagikazarmark/slog-shim v0.1.0 // indirect
 	github.com/sourcegraph/conc v0.3.0 // indirect

apps/testapp/kv/kvexecutor.go

@@ -10,6 +10,7 @@ import (
 
 	ds "github.com/ipfs/go-datastore"
 	"github.com/ipfs/go-datastore/query"
+	"github.com/rollkit/rollkit/core/execution"
 	"github.com/rollkit/rollkit/pkg/store"
 )
 
@@ -243,6 +244,12 @@ func (k *KVExecutor) SetFinal(ctx context.Context, blockHeight uint64) error {
 	return k.db.Put(ctx, ds.NewKey("/finalizedHeight"), []byte(fmt.Sprintf("%d", blockHeight)))
 }
 
+// GetExecutionMode returns the execution mode for this executor.
+// KVExecutor uses delayed execution mode.
+func (k *KVExecutor) GetExecutionMode() execution.ExecutionMode {
+	return execution.ExecutionModeDelayed
+}
+
 // InjectTx adds a transaction to the mempool channel.
 // Uses a non-blocking send to avoid blocking the caller if the channel is full.
 func (k *KVExecutor) InjectTx(tx []byte) {

block/manager.go

@@ -147,6 +147,8 @@ type Manager struct {
 	metrics *Metrics
 
 	exec coreexecutor.Executor
+	// executionMode caches the execution mode from the executor
+	executionMode coreexecutor.ExecutionMode
 
 	// daIncludedHeight is rollkit height at which all blocks have been included
 	// in the DA
@@ -351,6 +353,8 @@ func NewManager(
 	daH := atomic.Uint64{}
 	daH.Store(s.DAHeight)
 
+	executionMode := exec.GetExecutionMode()
+
 	m := &Manager{
 		signer:            signer,
 		config:            config,
@@ -380,6 +384,7 @@ func NewManager(
 		metrics:                  seqMetrics,
 		sequencer:                sequencer,
 		exec:                     exec,
+		executionMode:            executionMode,
 		da:                       da,
 		gasPrice:                 gasPrice,
 		gasMultiplier:            gasMultiplier,
@@ -800,22 +805,26 @@ func (m *Manager) execValidate(lastState types.State, header *types.SignedHeader
 	}
 
 	// // Verify that the header's timestamp is strictly greater than the last block's time
-	// headerTime := header.Time()
-	// if header.Height() > 1 && lastState.LastBlockTime.After(headerTime) {
-	// 	return fmt.Errorf("block time must be strictly increasing: got %v, last block time was %v",
-	// 		headerTime.UnixNano(), lastState.LastBlockTime)
-	// }
-
-	// // Validate that the header's AppHash matches the lastState's AppHash
-	// // Note: Assumes deferred execution
-	// if !bytes.Equal(header.AppHash, lastState.AppHash) {
-	// 	return fmt.Errorf("app hash mismatch: expected %x, got %x", lastState.AppHash, header.AppHash)
-	// }
+	headerTime := header.Time()
+	if header.Height() > 1 && lastState.LastBlockTime.After(headerTime) {
+		return fmt.Errorf("block time must be strictly increasing: got %v, last block time was %v",
+			headerTime.UnixNano(), lastState.LastBlockTime)
+	}
+
+	// Validate AppHash based on execution mode
+	if m.executionMode == coreexecutor.ExecutionModeDelayed {
+		// In delayed mode, AppHash should match the last state's AppHash
+		if !bytes.Equal(header.AppHash, lastState.AppHash) {
+			return fmt.Errorf("appHash mismatch in delayed mode: expected %x, got %x", lastState.AppHash, header.AppHash)
+		}
+	}
+	// Note: For immediate mode, we can't validate AppHash against lastState because
+	// it represents the state after executing the current block's transactions
 
 	return nil
 }
 
-func (m *Manager) execCreateBlock(_ context.Context, height uint64, lastSignature *types.Signature, lastHeaderHash types.Hash, _ types.State, batchData *BatchData) (*types.SignedHeader, *types.Data, error) {
+func (m *Manager) execCreateBlock(ctx context.Context, height uint64, lastSignature *types.Signature, lastHeaderHash types.Hash, lastState types.State, batchData *BatchData) (*types.SignedHeader, *types.Data, error) {
 	// Use when batchData is set to data IDs from the DA layer
 	// batchDataIDs := convertBatchDataToBytes(batchData.Data)
 
@@ -840,21 +849,54 @@ func (m *Manager) execCreateBlock(_ context.Context, height uint64, lastSignatur
 	// Determine if this is an empty block
 	isEmpty := batchData.Batch == nil || len(batchData.Transactions) == 0
 
+	// Create block data with appropriate transactions
+	blockData := &types.Data{
+		Txs: make(types.Txs, 0), // Start with empty transaction list
+	}
+
+	// Only add transactions if this is not an empty block
+	if !isEmpty {
+		blockData.Txs = make(types.Txs, len(batchData.Transactions))
+		for i := range batchData.Transactions {
+			blockData.Txs[i] = types.Tx(batchData.Transactions[i])
+		}
+	}
+
+	// Determine AppHash based on execution mode
+	var appHash []byte
+	if m.executionMode == coreexecutor.ExecutionModeImmediate && !isEmpty {
+		// For immediate execution, execute transactions now to get the new state root
+		rawTxs := make([][]byte, len(blockData.Txs))
+		for i := range blockData.Txs {
+			rawTxs[i] = blockData.Txs[i]
+		}
+
+		// Execute transactions
+		newStateRoot, _, err := m.exec.ExecuteTxs(ctx, rawTxs, height, batchData.Time, lastState.AppHash)
+		if err != nil {
+			return nil, nil, fmt.Errorf("failed to execute transactions for immediate mode: %w", err)
+		}
+		appHash = newStateRoot
+	} else {
+		// For delayed execution or empty blocks, use the app hash from last state
+		appHash = lastState.AppHash
+	}
+
 	header := &types.SignedHeader{
 		Header: types.Header{
 			Version: types.Version{
-				Block: m.lastState.Version.Block,
-				App:   m.lastState.Version.App,
+				Block: lastState.Version.Block,
+				App:   lastState.Version.App,
 			},
 			BaseHeader: types.BaseHeader{
-				ChainID: m.lastState.ChainID,
+				ChainID: lastState.ChainID,
 				Height:  height,
 				Time:    uint64(batchData.UnixNano()), //nolint:gosec // why is time unix? (tac0turtle)
 			},
 			LastHeaderHash: lastHeaderHash,
-			// DataHash is set at the end of the function
+			// DataHash is set below
 			ConsensusHash:   make(types.Hash, 32),
-			AppHash:         m.lastState.AppHash,
+			AppHash:         appHash,
 			ProposerAddress: m.genesis.ProposerAddress,
 		},
 		Signature: *lastSignature,
@@ -864,17 +906,8 @@ func (m *Manager) execCreateBlock(_ context.Context, height uint64, lastSignatur
 		},
 	}
 
-	// Create block data with appropriate transactions
-	blockData := &types.Data{
-		Txs: make(types.Txs, 0), // Start with empty transaction list
-	}
-
-	// Only add transactions if this is not an empty block
+	// Set DataHash
 	if !isEmpty {
-		blockData.Txs = make(types.Txs, len(batchData.Transactions))
-		for i := range batchData.Transactions {
-			blockData.Txs[i] = types.Tx(batchData.Transactions[i])
-		}
 		header.DataHash = blockData.DACommitment()
 	} else {
 		header.DataHash = dataHashForEmptyTxs
@@ -884,15 +917,61 @@ func (m *Manager) execCreateBlock(_ context.Context, height uint64, lastSignatur
 }
 
 func (m *Manager) execApplyBlock(ctx context.Context, lastState types.State, header *types.SignedHeader, data *types.Data) (types.State, error) {
-	rawTxs := make([][]byte, len(data.Txs))
-	for i := range data.Txs {
-		rawTxs[i] = data.Txs[i]
-	}
+	var newStateRoot []byte
+
+	// Check if we need to execute transactions
+	if m.executionMode == coreexecutor.ExecutionModeImmediate {
+		// For immediate mode, the aggregator already executed during block creation
+		// But syncing nodes need to execute to verify the AppHash
+		// Check if we're the block creator by verifying we signed this block
+		isBlockCreator := false
+		if m.signer != nil {
+			myAddress, err := m.signer.GetAddress()
+			if err == nil && bytes.Equal(header.ProposerAddress, myAddress) {
+				// Also verify this is the current height we're producing
+				currentHeight, err := m.store.Height(ctx)
+				if err == nil && header.Height() == currentHeight+1 {
+					isBlockCreator = true
+				}
+			}
+		}
 
-	ctx = context.WithValue(ctx, types.SignedHeaderContextKey, header)
-	newStateRoot, _, err := m.exec.ExecuteTxs(ctx, rawTxs, header.Height(), header.Time(), lastState.AppHash)
-	if err != nil {
-		return types.State{}, fmt.Errorf("failed to execute transactions: %w", err)
+		if isBlockCreator {
+			// We created this block, so we already executed transactions in execCreateBlock
+			// Just use the AppHash from the header
+			newStateRoot = header.AppHash
+		} else {
+			// We're syncing this block, need to execute to verify AppHash
+			rawTxs := make([][]byte, len(data.Txs))
+			for i := range data.Txs {
+				rawTxs[i] = data.Txs[i]
+			}
+
+			ctx = context.WithValue(ctx, types.SignedHeaderContextKey, header)
+			computedStateRoot, _, err := m.exec.ExecuteTxs(ctx, rawTxs, header.Height(), header.Time(), lastState.AppHash)
+			if err != nil {
+				return types.State{}, fmt.Errorf("failed to execute transactions: %w", err)
+			}
+
+			// Verify the AppHash matches
+			if !bytes.Equal(header.AppHash, computedStateRoot) {
+				return types.State{}, fmt.Errorf("AppHash mismatch in immediate mode: expected %x, got %x", computedStateRoot, header.AppHash)
+			}
+			newStateRoot = computedStateRoot
+		}
+	} else {
+		// For delayed mode, always execute transactions
+		rawTxs := make([][]byte, len(data.Txs))
+		for i := range data.Txs {
+			rawTxs[i] = data.Txs[i]
+		}
+
+		ctx = context.WithValue(ctx, types.SignedHeaderContextKey, header)
+		var err error
+		newStateRoot, _, err = m.exec.ExecuteTxs(ctx, rawTxs, header.Height(), header.Time(), lastState.AppHash)
+		if err != nil {
+			return types.State{}, fmt.Errorf("failed to execute transactions: %w", err)
+		}
 	}
 
 	s, err := lastState.NextState(header, newStateRoot)

block/manager_test.go

@@ -575,28 +575,26 @@ func TestManager_execValidate(t *testing.T) {
 		require.NoError(err)
 	})
 
-	// TODO: https://github.com/rollkit/rollkit/issues/2250
-
-	// t.Run("non-monotonic block time with height > 1", func(t *testing.T) {
-	// 	state, header, data, privKey := makeValid()
-	// 	state.LastBlockTime = time.Now().Add(time.Minute)
-	// 	state.LastBlockHeight = 1
-	// 	header.BaseHeader.Height = state.LastBlockHeight + 1
-	// 	data.Metadata.Height = state.LastBlockHeight + 1
-	// 	signer, err := noopsigner.NewNoopSigner(privKey)
-	// 	require.NoError(err)
-	// 	header.Signature, err = types.GetSignature(header.Header, signer)
-	// 	require.NoError(err)
-	// 	err = m.execValidate(state, header, data)
-	// 	require.ErrorContains(err, "block time must be strictly increasing")
-	// })
-
-	// t.Run("app hash mismatch", func(t *testing.T) {
-	// 	state, header, data, _ := makeValid()
-	// 	state.AppHash = []byte("different")
-	// 	err := m.execValidate(state, header, data)
-	// 	require.ErrorContains(err, "app hash mismatch")
-	// })
+	t.Run("non-monotonic block time with height > 1", func(t *testing.T) {
+		state, header, data, privKey := makeValid()
+		state.LastBlockTime = time.Now().Add(time.Minute)
+		state.LastBlockHeight = 1
+		header.BaseHeader.Height = state.LastBlockHeight + 1
+		data.Metadata.Height = state.LastBlockHeight + 1
+		signer, err := noopsigner.NewNoopSigner(privKey)
+		require.NoError(err)
+		header.Signature, err = types.GetSignature(header.Header, signer)
+		require.NoError(err)
+		err = m.execValidate(state, header, data)
+		require.ErrorContains(err, "block time must be strictly increasing")
+	})
+
+	t.Run("app hash mismatch", func(t *testing.T) {
+		state, header, data, _ := makeValid()
+		state.AppHash = []byte("different")
+		err := m.execValidate(state, header, data)
+		require.ErrorContains(err, "appHash mismatch in delayed mode")
+	})
 }
 
 // TestGetterMethods tests simple getter methods for the Manager

block/publish_block_p2p_test.go

@@ -20,6 +20,7 @@ import (
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 
+	coreexecution "github.com/rollkit/rollkit/core/execution"
 	coresequencer "github.com/rollkit/rollkit/core/sequencer"
 	"github.com/rollkit/rollkit/pkg/config"
 	genesispkg "github.com/rollkit/rollkit/pkg/genesis"
@@ -236,6 +237,10 @@ func (m mockExecutor) SetFinal(ctx context.Context, blockHeight uint64) error {
 	return nil
 }
 
+func (m mockExecutor) GetExecutionMode() coreexecution.ExecutionMode {
+	return coreexecution.ExecutionModeDelayed
+}
+
 var rnd = rand.New(rand.NewSource(1)) //nolint:gosec // test code only
 
 func bytesN(n int) []byte {

core/execution/dummy.go

@@ -91,6 +91,12 @@ func (e *DummyExecutor) SetFinal(ctx context.Context, blockHeight uint64) error
 	return fmt.Errorf("cannot set finalized block at height %d", blockHeight)
 }
 
+// GetExecutionMode returns the execution mode for this executor.
+// DummyExecutor uses delayed execution mode.
+func (e *DummyExecutor) GetExecutionMode() ExecutionMode {
+	return ExecutionModeDelayed
+}
+
 func (e *DummyExecutor) removeExecutedTxs(txs [][]byte) {
 	e.injectedTxs = slices.DeleteFunc(e.injectedTxs, func(tx []byte) bool {
 		return slices.ContainsFunc(txs, func(t []byte) bool { return bytes.Equal(tx, t) })

core/execution/execution.go

@@ -5,6 +5,23 @@ import (
 	"time"
 )
 
+// ExecutionMode defines when state transitions are applied relative to block creation
+type ExecutionMode int
+
+const (
+	// ExecutionModeDelayed means the AppHash in block N represents the state after executing block N-1
+	// This is the traditional approach used by CometBFT/Tendermint
+	ExecutionModeDelayed ExecutionMode = iota
+
+	// ExecutionModeImmediate means the AppHash in block N represents the state after executing block N
+	// Transactions are executed during block creation and the resulting state root is included
+	ExecutionModeImmediate
+
+	// ExecutionModeOptimistic means transactions are executed optimistically and finalized later
+	// This allows for faster block creation but requires a finalization step to confirm state
+	// ExecutionModeOptimistic
+)
+
 // Executor defines the interface that execution clients must implement to be compatible with Rollkit.
 // This interface enables the separation between consensus and execution layers, allowing for modular
 // and pluggable execution environments.
@@ -53,6 +70,7 @@ type Executor interface {
 	// - Must maintain deterministic execution
 	// - Must respect context cancellation/timeout
 	// - The rest of the rules are defined by the specific execution layer
+	// - Must verify state root after execution
 	//
 	// Parameters:
 	// - ctx: Context for timeout/cancellation control
@@ -82,4 +100,17 @@ type Executor interface {
 	// Returns:
 	// - error: Any errors during finalization
 	SetFinal(ctx context.Context, blockHeight uint64) error
+
+	// GetExecutionMode returns the execution mode supported by this executor.
+	// This determines when state transitions are applied:
+	// - Delayed: AppHash in block N represents state after executing block N-1
+	// - Immediate: AppHash in block N represents state after executing block N
+	//
+	// Requirements:
+	// - Must return consistent value across all calls
+	// - Mode cannot change after initialization
+	//
+	// Returns:
+	// - ExecutionMode: The execution mode supported by this executor
+	GetExecutionMode() ExecutionMode
 }

execution/evm/execution.go

@@ -302,6 +302,13 @@ func (c *EngineClient) SetFinal(ctx context.Context, blockHeight uint64) error {
 	return c.setFinal(ctx, blockHash, true)
 }
 
+// GetExecutionMode returns the execution mode for this executor.
+// EngineClient uses immediate execution mode since it calculates the state root
+// during transaction execution via engine_getPayloadV4.
+func (c *EngineClient) GetExecutionMode() execution.ExecutionMode {
+	return execution.ExecutionModeImmediate
+}
+
 func (c *EngineClient) derivePrevRandao(blockHeight uint64) common.Hash {
 	return common.BigToHash(new(big.Int).SetUint64(blockHeight))
 }