feat: crash-tolerant dkg [skip-line-limit]

.github/workflows/ci.yml

@@ -219,6 +219,9 @@ jobs:
       - name: Checking code format rust
         run: pnpm rust:lint
 
+      - name: Check repository invariants
+        run: pnpm check:invariants
+
       - name: Compile contracts for ABI catalog tests
         run: pnpm evm:build
 
@@ -277,6 +280,7 @@ jobs:
       - name: Stage source-aligned circuit fixtures
         run: |
           chmod +x .ci-noir/bin/bb
+          test -f .ci-noir/circuits/insecure-512/minimum/default/recursive_aggregation/c2ab_fold/c2ab_fold.json
           mkdir -p dist/circuits/insecure-512
           cp -R .ci-noir/circuits/insecure-512/minimum dist/circuits/insecure-512/
 
@@ -286,14 +290,34 @@ jobs:
           E3_CUSTOM_BB: ${{ github.workspace }}/.ci-noir/bin/bb
         run: 'cargo test --test integration -- --nocapture'
 
+      - name: Run offline DKG integration test with full proofs
+        timeout-minutes: 20
+        env:
+          BENCHMARK_MODE: insecure
+          BENCHMARK_OFFLINE_AFTER_C0_PARTY_ID: '1'
+          BENCHMARK_DKG_WINDOW_SECS: '1200'
+          E3_ENCRYPTION_KEY_COLLECTION_TIMEOUT_SECS: '60'
+          E3_THRESHOLD_SHARE_COLLECTION_TIMEOUT_SECS: '180'
+          E3_CUSTOM_BB: ${{ github.workspace }}/.ci-noir/bin/bb
+        run: 'cargo test -p e3-tests --test integration test_trbfv_actor -- --exact --nocapture'
+
+      - name: Run full-proof DKG integration with standby node
+        timeout-minutes: 20
+        env:
+          BENCHMARK_MODE: insecure
+          BENCHMARK_DKG_WINDOW_SECS: '1200'
+          E3_ENCRYPTION_KEY_COLLECTION_TIMEOUT_SECS: '60'
+          E3_THRESHOLD_SHARE_COLLECTION_TIMEOUT_SECS: '120'
+          E3_CUSTOM_BB: ${{ github.workspace }}/.ci-noir/bin/bb
+        run: 'cargo test -p e3-tests --test integration test_trbfv_actor -- --exact --nocapture'
+
   zk_prover_integration:
-    needs: [detect_changes]
+    needs: [detect_changes, integration_prebuild]
     if: needs.detect_changes.outputs.zk_prover_integration == 'true'
-    timeout-minutes: 30
+    timeout-minutes: 60
     runs-on:
-      ${{ github.repository == 'theinterfold/interfold' && github.event_name != 'pull_request' && (github.ref == 'refs/heads/main' ||
-      github.ref == 'refs/heads/dev') && format('runs-on={0}-{1}-{2}/runner=4cpu-linux-x64/ram=16', github.run_id, github.run_attempt,
-      'zk_prover_integration') || 'ubuntu-latest' }}
+      group: enclave-ci
+      labels: [enclave-ci-runner]
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
@@ -321,21 +345,19 @@ jobs:
       - name: 'Install the dependencies'
         run: 'pnpm install --frozen-lockfile'
 
+      - name: Download source-aligned ZK fixtures
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: integration-noir-artifacts
+          path: .ci-noir/
+
       - name: Prepare source-aligned circuit archive
         run: |
-          SOURCE_HASH=$(pnpm tsx scripts/build-circuits.ts hash)
-          git fetch origin circuit-artifacts
-          ARTIFACT_SOURCE_HASH=$(git show origin/circuit-artifacts:SOURCE_HASH)
-          if [ "$ARTIFACT_SOURCE_HASH" != "$SOURCE_HASH" ]; then
-            echo "::error::Circuit artifacts do not match this source tree."
-            exit 1
-          fi
+          test -f .ci-noir/circuits/insecure-512/minimum/default/dkg/pk/pk.json
+          test -f .ci-noir/circuits/secure-8192/minimum/default/dkg/pk/pk.json
           mkdir -p "$RUNNER_TEMP/circuit-release"
-          git archive \
-            --format=tar.gz \
-            --prefix=circuits/ \
-            --output="$RUNNER_TEMP/circuit-release/circuits-candidate.tar.gz" \
-            origin/circuit-artifacts
+          tar -czf "$RUNNER_TEMP/circuit-release/circuits-candidate.tar.gz" \
+            -C .ci-noir circuits
 
       - name: Cache Barretenberg binary
         uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
@@ -534,11 +556,10 @@ jobs:
   integration_prebuild:
     needs: [detect_changes]
     if: needs.detect_changes.outputs.integration_prebuild == 'true'
-    timeout-minutes: 30
+    timeout-minutes: 45
     runs-on:
-      ${{ github.repository == 'theinterfold/interfold' && github.event_name != 'pull_request' && (github.ref == 'refs/heads/main' ||
-      github.ref == 'refs/heads/dev') && format('runs-on={0}-{1}-{2}/runner=4cpu-linux-x64/ram=16', github.run_id, github.run_attempt,
-      'integration_prebuild') || 'ubuntu-latest' }}
+      group: enclave-ci
+      labels: [enclave-ci-runner]
     steps:
       - name: 'Check out the repo'
         uses: 'actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10' # v6
@@ -588,7 +609,9 @@ jobs:
       - name: 'Install the dependencies'
         run: 'pnpm install --frozen-lockfile'
 
-      - name: 'Run prebuild'
+      - name: 'Run full-proof prebuild'
+        env:
+          CIPHERNODE_SKIP_PROOF_AGGREGATION: 'false'
         run: 'pnpm test:integration prebuild'
 
       - name: 'Verify build artifacts exist'
@@ -1006,7 +1029,7 @@ jobs:
   build_circuits:
     needs: [detect_changes]
     if: needs.detect_changes.outputs.build_circuits == 'true'
-    timeout-minutes: 30
+    timeout-minutes: 45
     runs-on:
       ${{ github.repository == 'theinterfold/interfold' && github.event_name != 'pull_request' && (github.ref == 'refs/heads/main' ||
       github.ref == 'refs/heads/dev') && format('runs-on={0}-{1}-{2}/runner=4cpu-linux-x64/ram=16', github.run_id, github.run_attempt,
@@ -1068,6 +1091,13 @@ jobs:
       - name: Build circuits
         run: pnpm build:circuits
 
+      - name: Check generated circuit sources are committed
+        run: |
+          git diff --exit-code -- \
+            circuits/lib/src/configs \
+            packages/interfold-contracts/contracts/lib/ActiveCryptoConfig.sol \
+            packages/interfold-contracts/scripts/utils.ts
+
       - name: Test circuit artifact validation
         run: pnpm test:circuit-tooling
 
@@ -1083,6 +1113,7 @@ jobs:
       - name: Check generated verifiers are in sync
         run: pnpm check:verifiers --no-compile
 
+      # Release workflows also verify the promoted six-pair circuit matrix.
       - name: Pull the complete circuit matrix
         run: pnpm store:circuits pull
 

agent/ARCHITECTURE.md

@@ -178,6 +178,9 @@ Protocol-specific invariants must be named and tested. Important examples includ
 - runtime `party_id` is derived from the finalized committee normalized by ascending address;
 - the active aggregator is the lowest eligible `party_id` after on-chain exclusions and the current
   phase's durable unresponsive-party set;
+- after enough members publish signed DKG readiness, the active aggregator proposes a canonical
+  `H`-member contribution roster; the existing readiness-gated failover promotes the next eligible
+  party if roster publication stalls;
 - the DKG aggregation circuit receives exactly `H` canonical honest NodeFold proofs and exactly `N`
   ordered committee addresses;
 - C2a/C2b are singleton proofs, while C3a/C3b follow the configured recipient/row multiplicities;

agent/CONTEXT.md

@@ -27,7 +27,7 @@ output — every step backed by ZK proofs verified on-chain.
 | ------------ | ------------------------------------------------------------------------------------------------------------------------------- |
 | E3           | Encrypted Execution Environment — one confidential computation instance (`e3Id`)                                                |
 | Ciphernode   | Node operator running keyshare/DKG/decryption actors in a committee                                                             |
-| Committee    | Ciphernodes serving an E3. Sizes `(N, T, H)`: `minimum` (3,1,2), `micro` (9,4,5), `small` (19,9,10)                             |
+| Committee    | Ciphernodes serving an E3. Sizes `(N, T, H)`: `minimum` (3,1,2), `micro` (9,4,5), `small` (19,9,14)                             |
 | DKG          | Distributed key generation — joint threshold public key, no party holds the full secret                                         |
 | BFV / TrBFV  | Brakerski–Fan–Vercauteren FHE scheme / its threshold (publicly verifiable) variant                                              |
 | Preset       | BFV parameter set: `insecure-512` (dev/CI default) or `secure-8192`                                                             |