@aztec/cli 0.0.1-commit.d3ec352c → 0.0.1-commit.d58ff9d0

package/src/config/chain_l2_config.ts

@@ -1,668 +1,72 @@
-import { DefaultL1ContractsConfig, type L1ContractsConfig, type L1TxUtilsConfig } from '@aztec/ethereum';
 import type { NetworkNames } from '@aztec/foundation/config';
-import { EthAddress } from '@aztec/foundation/eth-address';
-import type { SharedNodeConfig } from '@aztec/node-lib/config';
-import type { P2PConfig } from '@aztec/p2p';
-import type { SequencerConfig, SlasherConfig } from '@aztec/stdlib/interfaces/server';
+import { createLogger } from '@aztec/foundation/log';
+import { type ConsensusEnvVar, checkConsensusEnvOverrides } from '@aztec/stdlib/config';
 
 import path from 'path';
 
-import publicIncludeMetrics from '../../public_include_metric_prefixes.json' with { type: 'json' };
-import { enrichEthAddressVar, enrichVar } from './enrich_env.js';
+import { devnetConfig, mainnetConfig, testnetConfig } from './generated/networks.js';
 
-const SNAPSHOTS_URL = 'https://aztec-labs-snapshots.com';
+type NetworkConfigEnv = Record<string, string | number | boolean>;
 
-const defaultDBMapSizeKb = 128 * 1_024 * 1_024; // 128 GB
-const tbMapSizeKb = 1_024 * 1_024 * 1_024; // 1 TB
-
-export type L2ChainConfig = Omit<L1ContractsConfig, keyof L1TxUtilsConfig> &
-  Omit<SlasherConfig, 'slashValidatorsNever' | 'slashValidatorsAlways' | 'slashOverridePayload' | 'slashSelfAllowed'> &
-  Pick<P2PConfig, 'bootstrapNodes' | 'p2pEnabled' | 'txPoolDeleteTxsAfterReorg'> &
-  Pick<SequencerConfig, 'minTxsPerBlock' | 'maxTxsPerBlock'> & {
-    l1ChainId: number;
-    testAccounts: boolean;
-    sponsoredFPC: boolean;
-    minTxsPerBlock: number;
-    maxTxsPerBlock: number;
-    realProofs: boolean;
-    snapshotsUrls: string[];
-    autoUpdate: SharedNodeConfig['autoUpdate'];
-    autoUpdateUrl?: string;
-    maxTxPoolSize: number;
-    publicMetricsOptOut: boolean;
-    publicIncludeMetrics?: string[];
-    publicMetricsCollectorUrl?: string;
-    publicMetricsCollectFrom?: string[];
-    skipArchiverInitialSync?: boolean;
-    blobAllowEmptySources?: boolean;
-
-    // Setting the dataStoreMapSize provides the default for every DB in the node.
-    // Then we explicitly override the sizes for the archiver and the larger trees.
-    dataStoreMapSizeKb: number;
-    archiverStoreMapSizeKb: number;
-    noteHashTreeMapSizeKb: number;
-    nullifierTreeMapSizeKb: number;
-    publicDataTreeMapSizeKb: number;
-
-    // Control whether sentinel is enabled or not. Needed for slashing
-    sentinelEnabled: boolean;
-    disableTransactions: boolean;
-  };
-
-const DefaultSlashConfig = {
-  /** Tally-style slashing */
-  slasherFlavor: 'tally',
-  /** Allow one round for vetoing */
-  slashingExecutionDelayInRounds: 1,
-  /** How long for a slash payload to be executed */
-  slashingLifetimeInRounds: 5,
-  /** Allow 2 rounds to discover faults */
-  slashingOffsetInRounds: 2,
-  /** No slash vetoer */
-  slashingVetoer: EthAddress.ZERO,
-  /** Use default disable duration */
-  slashingDisableDuration: DefaultL1ContractsConfig.slashingDisableDuration,
-  /** Use default slash amounts */
-  slashAmountSmall: DefaultL1ContractsConfig.slashAmountSmall,
-  slashAmountMedium: DefaultL1ContractsConfig.slashAmountMedium,
-  slashAmountLarge: DefaultL1ContractsConfig.slashAmountLarge,
-
-  // Slashing stuff
-  slashMinPenaltyPercentage: 0.5,
-  slashMaxPenaltyPercentage: 2.0,
-  slashInactivityTargetPercentage: 0.7,
-  slashInactivityConsecutiveEpochThreshold: 1,
-  slashInactivityPenalty: DefaultL1ContractsConfig.slashAmountSmall,
-  slashPrunePenalty: DefaultL1ContractsConfig.slashAmountSmall,
-  slashDataWithholdingPenalty: DefaultL1ContractsConfig.slashAmountSmall,
-  slashProposeInvalidAttestationsPenalty: DefaultL1ContractsConfig.slashAmountLarge,
-  slashAttestDescendantOfInvalidPenalty: DefaultL1ContractsConfig.slashAmountLarge,
-  slashUnknownPenalty: DefaultL1ContractsConfig.slashAmountSmall,
-  slashBroadcastedInvalidBlockPenalty: 0n, // DefaultL1ContractsConfig.slashAmountSmall // Disabled until further testing
-  slashMaxPayloadSize: 50,
-  slashGracePeriodL2Slots: 32 * 2, // Two epochs from genesis
-  slashOffenseExpirationRounds: 8,
-  sentinelEnabled: true,
-  slashExecuteRoundsLookBack: 4,
-} satisfies Partial<L2ChainConfig>;
-
-const DefaultNetworkDBMapSizeConfig = {
-  dataStoreMapSizeKb: defaultDBMapSizeKb,
-  archiverStoreMapSizeKb: tbMapSizeKb,
-  noteHashTreeMapSizeKb: tbMapSizeKb,
-  nullifierTreeMapSizeKb: tbMapSizeKb,
-  publicDataTreeMapSizeKb: tbMapSizeKb,
-} satisfies Partial<L2ChainConfig>;
-
-export const stagingIgnitionL2ChainConfig: L2ChainConfig = {
-  l1ChainId: 11155111,
-  testAccounts: false,
-  sponsoredFPC: false,
-  disableTransactions: true,
-  p2pEnabled: true,
-  bootstrapNodes: [],
-  minTxsPerBlock: 0,
-  maxTxsPerBlock: 0,
-  realProofs: true,
-  snapshotsUrls: [`${SNAPSHOTS_URL}/staging-ignition/`],
-  autoUpdate: 'config-and-version',
-  autoUpdateUrl: 'https://storage.googleapis.com/aztec-testnet/auto-update/staging-ignition.json',
-  maxTxPoolSize: 0,
-  publicMetricsOptOut: false,
-  publicIncludeMetrics,
-  publicMetricsCollectorUrl: 'https://telemetry.alpha-testnet.aztec-labs.com/v1/metrics',
-  publicMetricsCollectFrom: ['sequencer'],
-  txPoolDeleteTxsAfterReorg: false,
-  blobAllowEmptySources: true,
-
-  /** How many seconds an L1 slot lasts. */
-  ethereumSlotDuration: 12,
-  /** How many seconds an L2 slots lasts (must be multiple of ethereum slot duration). */
-  aztecSlotDuration: 72,
-  /** How many L2 slots an epoch lasts. */
-  aztecEpochDuration: 32,
-  /** The target validator committee size. */
-  aztecTargetCommitteeSize: 24,
-  /** The number of epochs to lag behind the current epoch for validator selection. */
-  lagInEpochsForValidatorSet: 2,
-  /** The number of epochs to lag behind the current epoch for randao selection. */
-  lagInEpochsForRandao: 2,
-  /** The number of epochs after an epoch ends that proofs are still accepted. */
-  aztecProofSubmissionEpochs: 1,
-  /** How many sequencers must agree with a slash for it to be executed. */
-  slashingQuorum: 65,
-
-  slashingRoundSizeInEpochs: 4,
-  slashingLifetimeInRounds: 40,
-  slashingExecutionDelayInRounds: 28,
-  slashAmountSmall: 2_000n * 10n ** 18n,
-  slashAmountMedium: 10_000n * 10n ** 18n,
-  slashAmountLarge: 50_000n * 10n ** 18n,
-  slashingOffsetInRounds: 2,
-  slasherFlavor: 'tally',
-  slashingVetoer: EthAddress.ZERO,
-
-  /** The mana target for the rollup */
-  manaTarget: 0n,
-
-  exitDelaySeconds: 5 * 24 * 60 * 60,
-
-  /** The proving cost per mana */
-  provingCostPerMana: 0n,
-  localEjectionThreshold: 196_000n * 10n ** 18n,
-
-  ejectionThreshold: 100_000n * 10n ** 18n,
-  activationThreshold: 200_000n * 10n ** 18n,
-
-  governanceProposerRoundSize: 300,
-  governanceProposerQuorum: 151,
-
-  // Node slashing config
-  slashMinPenaltyPercentage: 0.5,
-  slashMaxPenaltyPercentage: 2.0,
-  slashInactivityTargetPercentage: 0.7,
-  slashInactivityConsecutiveEpochThreshold: 2,
-  slashInactivityPenalty: 2_000n * 10n ** 18n,
-  slashPrunePenalty: 0n, // 2_000n * 10n ** 18n, We disable slashing for prune offenses right now
-  slashDataWithholdingPenalty: 0n, // 2_000n * 10n ** 18n, We disable slashing for data withholding offenses right now
-  slashProposeInvalidAttestationsPenalty: 50_000n * 10n ** 18n,
-  slashAttestDescendantOfInvalidPenalty: 50_000n * 10n ** 18n,
-  slashUnknownPenalty: 2_000n * 10n ** 18n,
-  slashBroadcastedInvalidBlockPenalty: 0n, // 10_000n * 10n ** 18n, Disabled for now until further testing
-  slashMaxPayloadSize: 50,
-  slashGracePeriodL2Slots: 32 * 4, // One round from genesis
-  slashOffenseExpirationRounds: 8,
-  sentinelEnabled: true,
-  slashingDisableDuration: 5 * 24 * 60 * 60,
-  slashExecuteRoundsLookBack: 4,
-
-  ...DefaultNetworkDBMapSizeConfig,
-};
-
-export const stagingPublicL2ChainConfig: L2ChainConfig = {
-  l1ChainId: 11155111,
-  testAccounts: false,
-  sponsoredFPC: true,
-  disableTransactions: false,
-  p2pEnabled: true,
-  bootstrapNodes: [],
-  minTxsPerBlock: 0,
-  maxTxsPerBlock: 20,
-  realProofs: true,
-  snapshotsUrls: [`${SNAPSHOTS_URL}/staging-public/`],
-  autoUpdate: 'config-and-version',
-  autoUpdateUrl: 'https://storage.googleapis.com/aztec-testnet/auto-update/staging-public.json',
-  publicMetricsOptOut: false,
-  publicIncludeMetrics,
-  publicMetricsCollectorUrl: 'https://telemetry.alpha-testnet.aztec-labs.com/v1/metrics',
-  publicMetricsCollectFrom: ['sequencer'],
-  maxTxPoolSize: 100_000_000, // 100MB
-  txPoolDeleteTxsAfterReorg: true,
-
-  // Deployment stuff
-  /** How many seconds an L1 slot lasts. */
-  ethereumSlotDuration: 12,
-  /** How many seconds an L2 slots lasts (must be multiple of ethereum slot duration). */
-  aztecSlotDuration: 36,
-  /** How many L2 slots an epoch lasts. */
-  aztecEpochDuration: 32,
-  /** The target validator committee size. */
-  aztecTargetCommitteeSize: 48,
-  /** The number of epochs to lag behind the current epoch for validator selection. */
-  lagInEpochsForValidatorSet: DefaultL1ContractsConfig.lagInEpochsForValidatorSet,
-  /** The number of epochs to lag behind the current epoch for randao selection. */
-  lagInEpochsForRandao: DefaultL1ContractsConfig.lagInEpochsForRandao,
-  /** The local ejection threshold for a validator. Stricter than ejectionThreshold but local to a specific rollup */
-  localEjectionThreshold: DefaultL1ContractsConfig.localEjectionThreshold,
-  /** The number of epochs after an epoch ends that proofs are still accepted. */
-  aztecProofSubmissionEpochs: 1,
-  /** The deposit amount for a validator */
-  activationThreshold: DefaultL1ContractsConfig.activationThreshold,
-  /** The minimum stake for a validator. */
-  ejectionThreshold: DefaultL1ContractsConfig.ejectionThreshold,
-  /** The slashing round size */
-  slashingRoundSizeInEpochs: DefaultL1ContractsConfig.slashingRoundSizeInEpochs,
-  /** Governance proposing round size */
-  governanceProposerRoundSize: DefaultL1ContractsConfig.governanceProposerRoundSize,
-  /** The mana target for the rollup */
-  manaTarget: DefaultL1ContractsConfig.manaTarget,
-  /** The proving cost per mana */
-  provingCostPerMana: DefaultL1ContractsConfig.provingCostPerMana,
-  /** Exit delay for stakers */
-  exitDelaySeconds: DefaultL1ContractsConfig.exitDelaySeconds,
-
-  ...DefaultSlashConfig,
-
-  ...DefaultNetworkDBMapSizeConfig,
-};
-
-export const nextNetL2ChainConfig: L2ChainConfig = {
-  l1ChainId: 11155111,
-  testAccounts: true,
-  sponsoredFPC: true,
-  p2pEnabled: true,
-  disableTransactions: false,
-  bootstrapNodes: [],
-  minTxsPerBlock: 0,
-  maxTxsPerBlock: 8,
-  realProofs: true,
-  snapshotsUrls: [],
-  autoUpdate: 'config-and-version',
-  autoUpdateUrl: '',
-  publicMetricsOptOut: true,
-  publicIncludeMetrics,
-  publicMetricsCollectorUrl: '',
-  publicMetricsCollectFrom: [''],
-  maxTxPoolSize: 100_000_000, // 100MB
-  txPoolDeleteTxsAfterReorg: false,
-
-  // Deployment stuff
-  /** How many seconds an L1 slot lasts. */
-  ethereumSlotDuration: 12,
-  /** How many seconds an L2 slots lasts (must be multiple of ethereum slot duration). */
-  aztecSlotDuration: 36,
-  /** How many L2 slots an epoch lasts. */
-  aztecEpochDuration: 32,
-  /** The target validator committee size. */
-  aztecTargetCommitteeSize: 48,
-  /** The number of epochs to lag behind the current epoch for validator selection. */
-  lagInEpochsForValidatorSet: DefaultL1ContractsConfig.lagInEpochsForValidatorSet,
-  /** The number of epochs to lag behind the current epoch for randao selection. */
-  lagInEpochsForRandao: DefaultL1ContractsConfig.lagInEpochsForRandao,
-  /** The local ejection threshold for a validator. Stricter than ejectionThreshold but local to a specific rollup */
-  localEjectionThreshold: DefaultL1ContractsConfig.localEjectionThreshold,
-  /** The number of epochs after an epoch ends that proofs are still accepted. */
-  aztecProofSubmissionEpochs: 1,
-  /** The deposit amount for a validator */
-  activationThreshold: DefaultL1ContractsConfig.activationThreshold,
-  /** The minimum stake for a validator. */
-  ejectionThreshold: DefaultL1ContractsConfig.ejectionThreshold,
-  /** The slashing round size */
-  slashingRoundSizeInEpochs: DefaultL1ContractsConfig.slashingRoundSizeInEpochs,
-  /** Governance proposing round size */
-  governanceProposerRoundSize: DefaultL1ContractsConfig.governanceProposerRoundSize,
-  /** The mana target for the rollup */
-  manaTarget: DefaultL1ContractsConfig.manaTarget,
-  /** The proving cost per mana */
-  provingCostPerMana: DefaultL1ContractsConfig.provingCostPerMana,
-  /** Exit delay for stakers */
-  exitDelaySeconds: DefaultL1ContractsConfig.exitDelaySeconds,
-
-  ...DefaultSlashConfig,
-
-  ...DefaultNetworkDBMapSizeConfig,
-};
-
-export const testnetL2ChainConfig: L2ChainConfig = {
-  l1ChainId: 11155111,
-  testAccounts: false,
-  sponsoredFPC: true,
-  p2pEnabled: true,
-  disableTransactions: true,
-  bootstrapNodes: [],
-  minTxsPerBlock: 0,
-  maxTxsPerBlock: 0,
-  realProofs: true,
-  snapshotsUrls: [`${SNAPSHOTS_URL}/testnet/`],
-  autoUpdate: 'config-and-version',
-  autoUpdateUrl: 'https://storage.googleapis.com/aztec-testnet/auto-update/testnet.json',
-  maxTxPoolSize: 100_000_000, // 100MB
-  publicMetricsOptOut: false,
-  publicIncludeMetrics,
-  publicMetricsCollectorUrl: 'https://telemetry.alpha-testnet.aztec-labs.com/v1/metrics',
-  publicMetricsCollectFrom: ['sequencer'],
-  txPoolDeleteTxsAfterReorg: true,
-  skipArchiverInitialSync: true,
-  blobAllowEmptySources: true,
-
-  /** How many seconds an L1 slot lasts. */
-  ethereumSlotDuration: 12,
-  /** How many seconds an L2 slots lasts (must be multiple of ethereum slot duration). */
-  aztecSlotDuration: 72,
-  /** How many L2 slots an epoch lasts. */
-  aztecEpochDuration: 32,
-  /** The target validator committee size. */
-  aztecTargetCommitteeSize: 24,
-  /** The number of epochs to lag behind the current epoch for validator selection. */
-  lagInEpochsForValidatorSet: 2,
-  /** The number of epochs to lag behind the current epoch for randao selection. */
-  lagInEpochsForRandao: 2,
-  /** The number of epochs after an epoch ends that proofs are still accepted. */
-  aztecProofSubmissionEpochs: 1,
-
-  // This is a diff from mainnet: we have 2-strikes you're out, rather than 3 on mainnet.
-  localEjectionThreshold: 198_000n * 10n ** 18n,
-  /** How many sequencers must agree with a slash for it to be executed. */
-  slashingQuorum: 65,
-  slashingRoundSizeInEpochs: 4,
-  slashingExecutionDelayInRounds: 28,
-  slashingLifetimeInRounds: 34,
-  slashingVetoer: EthAddress.fromString('0xBbB4aF368d02827945748b28CD4b2D42e4A37480'),
-  slashingOffsetInRounds: 2,
-
-  slashingDisableDuration: 259_200, // 3 days
-  slasherFlavor: 'tally',
-
-  slashAmountSmall: 2_000n * 10n ** 18n,
-  slashAmountMedium: 2_000n * 10n ** 18n,
-  slashAmountLarge: 2_000n * 10n ** 18n,
-
-  /** The mana target for the rollup */
-  manaTarget: 0n,
-
-  /** The proving cost per mana */
-  provingCostPerMana: 0n,
-
-  exitDelaySeconds: 4 * 24 * 60 * 60, // 4 days
-
-  activationThreshold: 200_000n * 10n ** 18n,
-  ejectionThreshold: 100_000n * 10n ** 18n,
-
-  governanceProposerRoundSize: 300,
-  governanceProposerQuorum: 151,
-
-  // Node slashing config
-  slashInactivityTargetPercentage: 0.8,
-  slashInactivityConsecutiveEpochThreshold: 2,
-  slashInactivityPenalty: 2_000n * 10n ** 18n,
-  slashPrunePenalty: 0n, // 2_000n * 10n ** 18n, We disable slashing for prune offenses right now
-  slashDataWithholdingPenalty: 0n, // 2_000n * 10n ** 18n, We disable slashing for data withholding offenses right now
-  slashProposeInvalidAttestationsPenalty: 2_000n * 10n ** 18n,
-  slashAttestDescendantOfInvalidPenalty: 2_000n * 10n ** 18n,
-  slashUnknownPenalty: 2_000n * 10n ** 18n,
-  slashBroadcastedInvalidBlockPenalty: 2_000n * 10n ** 18n, // 10_000n * 10n ** 18n, Disabled for now until further testing
-  slashGracePeriodL2Slots: 1_200, // One day from deployment
-  slashOffenseExpirationRounds: 8,
-
-  slashMinPenaltyPercentage: 0.5,
-  slashMaxPenaltyPercentage: 2.0,
-  slashMaxPayloadSize: 50,
-  slashExecuteRoundsLookBack: 4,
-
-  sentinelEnabled: true,
-
-  ...DefaultNetworkDBMapSizeConfig,
+const NetworkConfigs: Partial<Record<NetworkNames, NetworkConfigEnv>> = {
+  devnet: devnetConfig,
+  testnet: testnetConfig,
+  mainnet: mainnetConfig,
 };
 
-export const mainnetL2ChainConfig: L2ChainConfig = {
-  txPoolDeleteTxsAfterReorg: true,
-  disableTransactions: true,
+/** Every generated network config must define every consensus-critical env var. */
+export type ConsensusComplete = Record<ConsensusEnvVar, string | number | boolean>;
+({ devnetConfig, testnetConfig, mainnetConfig }) satisfies Record<string, ConsensusComplete>;
 
-  l1ChainId: 1,
-  testAccounts: false,
-  sponsoredFPC: false,
-  p2pEnabled: true,
-  bootstrapNodes: [],
-  minTxsPerBlock: 0,
-  maxTxsPerBlock: 0,
-  realProofs: true,
-  snapshotsUrls: [`${SNAPSHOTS_URL}/mainnet/`],
-  autoUpdate: 'notify',
-  autoUpdateUrl: 'https://storage.googleapis.com/aztec-mainnet/auto-update/mainnet.json',
-  maxTxPoolSize: 0,
-  publicMetricsOptOut: true,
-  publicIncludeMetrics,
-  publicMetricsCollectorUrl: 'https://telemetry.alpha-testnet.aztec-labs.com/v1/metrics',
-  publicMetricsCollectFrom: ['sequencer'],
-  blobAllowEmptySources: true,
+const log = createLogger('cli:chain_l2_config');
 
-  /** How many seconds an L1 slot lasts. */
-  ethereumSlotDuration: 12,
-  /** How many seconds an L2 slots lasts (must be multiple of ethereum slot duration). */
-  aztecSlotDuration: 72,
-  /** How many L2 slots an epoch lasts. */
-  aztecEpochDuration: 32,
-  /** The target validator committee size. */
-  aztecTargetCommitteeSize: 24,
-  /** The number of epochs to lag behind the current epoch for validator selection. */
-  lagInEpochsForValidatorSet: 2,
-  /** The number of epochs to lag behind the current epoch for randao selection. */
-  lagInEpochsForRandao: 2,
-  /** The number of epochs after an epoch ends that proofs are still accepted. */
-  aztecProofSubmissionEpochs: 1,
-
-  localEjectionThreshold: 196_000n * 10n ** 18n,
-  /** How many sequencers must agree with a slash for it to be executed. */
-  slashingQuorum: 65,
-  slashingRoundSizeInEpochs: 4,
-  slashingExecutionDelayInRounds: 28,
-  slashingLifetimeInRounds: 34,
-  slashingVetoer: EthAddress.fromString('0xBbB4aF368d02827945748b28CD4b2D42e4A37480'),
-  slashingOffsetInRounds: 2,
-
-  slashingDisableDuration: 259_200, // 3 days
-  slasherFlavor: 'tally',
-
-  slashAmountSmall: 2_000n * 10n ** 18n,
-  slashAmountMedium: 2_000n * 10n ** 18n,
-  slashAmountLarge: 2_000n * 10n ** 18n,
-
-  /** The mana target for the rollup */
-  manaTarget: 0n,
-
-  /** The proving cost per mana */
-  provingCostPerMana: 0n,
-
-  exitDelaySeconds: 4 * 24 * 60 * 60, // 4 days
-
-  activationThreshold: 200_000n * 10n ** 18n,
-  ejectionThreshold: 100_000n * 10n ** 18n,
-
-  governanceProposerRoundSize: 1000,
-  governanceProposerQuorum: 600,
-
-  // Node slashing config
-  slashInactivityTargetPercentage: 0.8,
-  slashInactivityConsecutiveEpochThreshold: 2,
-  slashInactivityPenalty: 2_000n * 10n ** 18n,
-  slashPrunePenalty: 0n, // 2_000n * 10n ** 18n, We disable slashing for prune offenses right now
-  slashDataWithholdingPenalty: 0n, // 2_000n * 10n ** 18n, We disable slashing for data withholding offenses right now
-  slashProposeInvalidAttestationsPenalty: 2_000n * 10n ** 18n,
-  slashAttestDescendantOfInvalidPenalty: 2_000n * 10n ** 18n,
-  slashUnknownPenalty: 2_000n * 10n ** 18n,
-  slashBroadcastedInvalidBlockPenalty: 2_000n * 10n ** 18n, // 10_000n * 10n ** 18n, Disabled for now until further testing
-  slashGracePeriodL2Slots: 1_200, // One day from deployment
-  slashOffenseExpirationRounds: 8,
-
-  slashMinPenaltyPercentage: 0.5,
-  slashMaxPenaltyPercentage: 2.0,
-  slashMaxPayloadSize: 50,
-  slashExecuteRoundsLookBack: 4,
-
-  sentinelEnabled: true,
-
-  ...DefaultNetworkDBMapSizeConfig,
-};
-
-export const devnetL2ChainConfig: L2ChainConfig = {
-  l1ChainId: 11155111,
-  testAccounts: true,
-  sponsoredFPC: true,
-  p2pEnabled: true,
-  disableTransactions: false,
-  bootstrapNodes: [],
-  minTxsPerBlock: 0,
-  maxTxsPerBlock: 8,
-  realProofs: false,
-  snapshotsUrls: [],
-  autoUpdate: 'config-and-version',
-  autoUpdateUrl: '',
-  publicMetricsOptOut: true,
-  publicIncludeMetrics,
-  publicMetricsCollectorUrl: '',
-  publicMetricsCollectFrom: [''],
-  maxTxPoolSize: 100_000_000, // 100MB
-  txPoolDeleteTxsAfterReorg: true,
-
-  // Deployment stuff
-  /** How many seconds an L1 slot lasts. */
-  ethereumSlotDuration: 12,
-  /** How many seconds an L2 slots lasts (must be multiple of ethereum slot duration). */
-  aztecSlotDuration: 36,
-  /** How many L2 slots an epoch lasts. */
-  aztecEpochDuration: 8,
-  /** The target validator committee size. */
-  aztecTargetCommitteeSize: 1,
-  /** The number of epochs to lag behind the current epoch for validator selection. */
-  lagInEpochsForValidatorSet: 1,
-  /** The number of epochs to lag behind the current epoch for randao selection. */
-  lagInEpochsForRandao: 1,
-  /** The local ejection threshold for a validator. Stricter than ejectionThreshold but local to a specific rollup */
-  localEjectionThreshold: DefaultL1ContractsConfig.localEjectionThreshold,
-  /** The number of epochs after an epoch ends that proofs are still accepted. */
-  aztecProofSubmissionEpochs: 1,
-  /** The deposit amount for a validator */
-  activationThreshold: DefaultL1ContractsConfig.activationThreshold,
-  /** The minimum stake for a validator. */
-  ejectionThreshold: DefaultL1ContractsConfig.ejectionThreshold,
-  /** The slashing round size */
-  slashingRoundSizeInEpochs: DefaultL1ContractsConfig.slashingRoundSizeInEpochs,
-  /** Governance proposing round size */
-  governanceProposerRoundSize: DefaultL1ContractsConfig.governanceProposerRoundSize,
-  /** The mana target for the rollup */
-  manaTarget: DefaultL1ContractsConfig.manaTarget,
-  /** The proving cost per mana */
-  provingCostPerMana: DefaultL1ContractsConfig.provingCostPerMana,
-  /** Exit delay for stakers */
-  exitDelaySeconds: DefaultL1ContractsConfig.exitDelaySeconds,
-
-  ...DefaultSlashConfig,
-
-  ...DefaultNetworkDBMapSizeConfig,
-};
-
-export function getL2ChainConfig(networkName: NetworkNames): L2ChainConfig | undefined {
-  let config: L2ChainConfig | undefined;
-  if (networkName === 'staging-public') {
-    config = { ...stagingPublicL2ChainConfig };
-  } else if (networkName === 'testnet') {
-    config = { ...testnetL2ChainConfig };
-  } else if (networkName === 'staging-ignition') {
-    config = { ...stagingIgnitionL2ChainConfig };
-  } else if (networkName === 'mainnet') {
-    config = { ...mainnetL2ChainConfig };
-  } else if (networkName === 'next-net') {
-    config = { ...nextNetL2ChainConfig };
-  } else if (networkName === 'devnet') {
-    config = { ...devnetL2ChainConfig };
+function enrichEnvironmentWithNetworkConfig(config: NetworkConfigEnv): void {
+  for (const [key, value] of Object.entries(config)) {
+    if (process.env[key] === undefined && value !== undefined) {
+      process.env[key] = String(value);
+    }
   }
-  return config;
 }
 
 function getDefaultDataDir(networkName: NetworkNames): string {
   return path.join(process.env.HOME || '~', '.aztec', networkName, 'data');
 }
 
+/**
+ * Sets up environment for the given network.
+ *
+ * For 'local' network: returns early, using hardcoded defaults from DefaultL1ContractsConfig
+ * and DefaultSlasherConfig (which match the 'defaults' section of defaults.yml).
+ *
+ * For deployed networks: applies network configuration from generated defaults.yml,
+ * merging base defaults with network-specific overrides. Before merging, enforces that operators have not
+ * overridden any consensus-critical env var with a value diverging from the network config (throwing unless
+ * ALLOW_OVERRIDING_NETWORK_CONFIG is set), so all nodes of a network agree on consensus-critical values.
+ *
+ * @param networkName - The network name
+ */
 export function enrichEnvironmentWithChainName(networkName: NetworkNames) {
+  // For 'local', we don't inject any env vars - use hardcoded TypeScript/Solidity defaults
+  // These defaults are defined in defaults.yml 'defaults' section and match:
+  // - DefaultL1ContractsConfig (yarn-project/ethereum/src/config.ts)
+  // - Solidity vm.envOr defaults (l1-contracts/script/deploy/RollupConfiguration.sol)
   if (networkName === 'local') {
     return;
   }
 
-  enrichVar('DATA_DIRECTORY', getDefaultDataDir(networkName));
-  const config = getL2ChainConfig(networkName);
-
-  if (!config) {
-    throw new Error(`Unknown network name: ${networkName}`);
-  }
-
-  enrichEnvironmentWithChainConfig(config);
-}
-
-export function enrichEnvironmentWithChainConfig(config: L2ChainConfig) {
-  enrichVar('BOOTSTRAP_NODES', config.bootstrapNodes.join(','));
-  enrichVar('TEST_ACCOUNTS', config.testAccounts.toString());
-  enrichVar('SPONSORED_FPC', config.sponsoredFPC.toString());
-  enrichVar('P2P_ENABLED', config.p2pEnabled.toString());
-  enrichVar('L1_CHAIN_ID', config.l1ChainId.toString());
-  enrichVar('SEQ_MIN_TX_PER_BLOCK', config.minTxsPerBlock.toString());
-  enrichVar('SEQ_MAX_TX_PER_BLOCK', config.maxTxsPerBlock.toString());
-  enrichVar('PROVER_REAL_PROOFS', config.realProofs.toString());
-  enrichVar('PXE_PROVER_ENABLED', config.realProofs.toString());
-  enrichVar('SYNC_SNAPSHOTS_URLS', config.snapshotsUrls.join(','));
-  enrichVar('P2P_MAX_TX_POOL_SIZE', config.maxTxPoolSize.toString());
-  enrichVar('P2P_TX_POOL_DELETE_TXS_AFTER_REORG', config.txPoolDeleteTxsAfterReorg.toString());
-
-  enrichVar('DATA_STORE_MAP_SIZE_KB', config.dataStoreMapSizeKb.toString());
-  enrichVar('ARCHIVER_STORE_MAP_SIZE_KB', config.archiverStoreMapSizeKb.toString());
-  enrichVar('NOTE_HASH_TREE_MAP_SIZE_KB', config.noteHashTreeMapSizeKb.toString());
-  enrichVar('NULLIFIER_TREE_MAP_SIZE_KB', config.nullifierTreeMapSizeKb.toString());
-  enrichVar('PUBLIC_DATA_TREE_MAP_SIZE_KB', config.publicDataTreeMapSizeKb.toString());
-
-  if (config.skipArchiverInitialSync !== undefined) {
-    enrichVar('SKIP_ARCHIVER_INITIAL_SYNC', config.skipArchiverInitialSync.toString());
-  }
-
-  if (config.blobAllowEmptySources !== undefined) {
-    enrichVar('BLOB_ALLOW_EMPTY_SOURCES', config.blobAllowEmptySources.toString());
-  }
-
-  if (config.autoUpdate) {
-    enrichVar('AUTO_UPDATE', config.autoUpdate?.toString());
+  // Apply generated network config from defaults.yml
+  // For devnet iterations (v4-devnet-1, etc.), use the base devnet config
+  const configKey = /^v\d+-devnet-\d+$/.test(networkName) ? 'devnet' : networkName;
+  const generatedConfig = NetworkConfigs[configKey];
+  if (generatedConfig) {
+    // The check is pure; this layer owns env mutation, so apply its canonical writes before enriching.
+    const canonical = checkConsensusEnvOverrides(generatedConfig, process.env, msg => log.warn(msg));
+    Object.assign(process.env, canonical);
+    enrichEnvironmentWithNetworkConfig(generatedConfig);
   }
 
-  if (config.autoUpdateUrl) {
-    enrichVar('AUTO_UPDATE_URL', config.autoUpdateUrl);
+  // Set DATA_DIRECTORY if not already set
+  if (process.env['DATA_DIRECTORY'] === undefined) {
+    process.env['DATA_DIRECTORY'] = getDefaultDataDir(networkName);
   }
-
-  if (config.publicIncludeMetrics) {
-    enrichVar('PUBLIC_OTEL_INCLUDE_METRICS', config.publicIncludeMetrics.join(','));
-  }
-
-  if (config.publicMetricsCollectorUrl) {
-    enrichVar('PUBLIC_OTEL_EXPORTER_OTLP_METRICS_ENDPOINT', config.publicMetricsCollectorUrl);
-  }
-
-  if (config.publicMetricsCollectFrom) {
-    enrichVar('PUBLIC_OTEL_COLLECT_FROM', config.publicMetricsCollectFrom.join(','));
-  }
-
-  enrichVar('PUBLIC_OTEL_OPT_OUT', config.publicMetricsOptOut.toString());
-
-  // Deployment stuff
-  enrichVar('ETHEREUM_SLOT_DURATION', config.ethereumSlotDuration.toString());
-  enrichVar('AZTEC_SLOT_DURATION', config.aztecSlotDuration.toString());
-  enrichVar('AZTEC_EPOCH_DURATION', config.aztecEpochDuration.toString());
-  enrichVar('AZTEC_TARGET_COMMITTEE_SIZE', config.aztecTargetCommitteeSize.toString());
-  enrichVar('AZTEC_LAG_IN_EPOCHS_FOR_VALIDATOR_SET', config.lagInEpochsForValidatorSet.toString());
-  enrichVar('AZTEC_LAG_IN_EPOCHS_FOR_RANDAO', config.lagInEpochsForRandao.toString());
-  enrichVar('AZTEC_PROOF_SUBMISSION_EPOCHS', config.aztecProofSubmissionEpochs.toString());
-  enrichVar('AZTEC_ACTIVATION_THRESHOLD', config.activationThreshold.toString());
-  enrichVar('AZTEC_EJECTION_THRESHOLD', config.ejectionThreshold.toString());
-  enrichVar('AZTEC_LOCAL_EJECTION_THRESHOLD', config.localEjectionThreshold.toString());
-  enrichVar('AZTEC_SLASHING_QUORUM', config.slashingQuorum?.toString());
-  enrichVar('AZTEC_SLASHING_ROUND_SIZE_IN_EPOCHS', config.slashingRoundSizeInEpochs.toString());
-  enrichVar('AZTEC_GOVERNANCE_PROPOSER_QUORUM', config.governanceProposerQuorum?.toString());
-  enrichVar('AZTEC_GOVERNANCE_PROPOSER_ROUND_SIZE', config.governanceProposerRoundSize.toString());
-  enrichVar('AZTEC_MANA_TARGET', config.manaTarget.toString());
-  enrichVar('AZTEC_PROVING_COST_PER_MANA', config.provingCostPerMana.toString());
-  enrichVar('AZTEC_SLASH_AMOUNT_SMALL', config.slashAmountSmall.toString());
-  enrichVar('AZTEC_SLASH_AMOUNT_MEDIUM', config.slashAmountMedium.toString());
-  enrichVar('AZTEC_SLASH_AMOUNT_LARGE', config.slashAmountLarge.toString());
-  enrichVar('AZTEC_SLASHING_LIFETIME_IN_ROUNDS', config.slashingLifetimeInRounds.toString());
-  enrichVar('AZTEC_SLASHING_EXECUTION_DELAY_IN_ROUNDS', config.slashingExecutionDelayInRounds.toString());
-  enrichVar('AZTEC_SLASHING_OFFSET_IN_ROUNDS', config.slashingOffsetInRounds.toString());
-  enrichVar('AZTEC_SLASHER_FLAVOR', config.slasherFlavor);
-  enrichVar('AZTEC_SLASHING_DISABLE_DURATION', config.slashingDisableDuration.toString());
-  enrichVar('AZTEC_EXIT_DELAY_SECONDS', config.exitDelaySeconds.toString());
-  enrichEthAddressVar('AZTEC_SLASHING_VETOER', config.slashingVetoer.toString());
-
-  // Slashing
-  enrichVar('SLASH_MIN_PENALTY_PERCENTAGE', config.slashMinPenaltyPercentage.toString());
-  enrichVar('SLASH_MAX_PENALTY_PERCENTAGE', config.slashMaxPenaltyPercentage.toString());
-  enrichVar('SLASH_PRUNE_PENALTY', config.slashPrunePenalty.toString());
-  enrichVar('SLASH_DATA_WITHHOLDING_PENALTY', config.slashDataWithholdingPenalty.toString());
-  enrichVar('SLASH_INACTIVITY_TARGET_PERCENTAGE', config.slashInactivityTargetPercentage.toString());
-  enrichVar('SLASH_INACTIVITY_CONSECUTIVE_EPOCH_THRESHOLD', config.slashInactivityConsecutiveEpochThreshold.toString());
-  enrichVar('SLASH_INACTIVITY_PENALTY', config.slashInactivityPenalty.toString());
-  enrichVar('SLASH_PROPOSE_INVALID_ATTESTATIONS_PENALTY', config.slashProposeInvalidAttestationsPenalty.toString());
-  enrichVar('SLASH_ATTEST_DESCENDANT_OF_INVALID_PENALTY', config.slashAttestDescendantOfInvalidPenalty.toString());
-  enrichVar('SLASH_UNKNOWN_PENALTY', config.slashUnknownPenalty.toString());
-  enrichVar('SLASH_INVALID_BLOCK_PENALTY', config.slashBroadcastedInvalidBlockPenalty.toString());
-  enrichVar('SLASH_OFFENSE_EXPIRATION_ROUNDS', config.slashOffenseExpirationRounds.toString());
-  enrichVar('SLASH_MAX_PAYLOAD_SIZE', config.slashMaxPayloadSize.toString());
-  enrichVar('SLASH_GRACE_PERIOD_L2_SLOTS', config.slashGracePeriodL2Slots.toString());
-  enrichVar('SLASH_EXECUTE_ROUNDS_LOOK_BACK', config.slashExecuteRoundsLookBack.toString());
-
-  enrichVar('SENTINEL_ENABLED', config.sentinelEnabled.toString());
-  enrichVar('TRANSACTIONS_DISABLED', config.disableTransactions.toString());
 }