@aztec/slasher 0.0.1-commit.f504929 → 0.0.1-commit.f5a9928

package/dest/watchers/attested_invalid_proposal_watcher.d.ts

@@ -0,0 +1,42 @@
+import type { EpochCacheInterface } from '@aztec/epoch-cache';
+import { SlotNumber } from '@aztec/foundation/branded-types';
+import { type Logger } from '@aztec/foundation/log';
+import type { L2BlockSource } from '@aztec/stdlib/block';
+import type { P2PClient, SlasherConfig } from '@aztec/stdlib/interfaces/server';
+import { type Watcher, type WatcherEmitter } from '../watcher.js';
+declare const AttestedInvalidProposalWatcherConfigKeys: readonly ["slashAttestInvalidCheckpointProposalPenalty"];
+type AttestedInvalidProposalWatcherConfig = Pick<SlasherConfig, (typeof AttestedInvalidProposalWatcherConfigKeys)[number]>;
+type P2PCheckpointAttestationSource = Pick<P2PClient, 'getCheckpointAttestationsForSlot'>;
+type AttestedInvalidProposalWatcherOptions = {
+    scanSlotLookback?: number;
+    log?: Logger;
+};
+export type InvalidProposalSlotSource = {
+    hasInvalidProposals(slot: SlotNumber): boolean;
+    hasProposalEquivocation(slot: SlotNumber): boolean;
+};
+declare const AttestedInvalidProposalWatcher_base: new () => WatcherEmitter;
+export declare class AttestedInvalidProposalWatcher extends AttestedInvalidProposalWatcher_base implements Watcher {
+    private readonly p2pClient;
+    private readonly invalidProposalSlotSource;
+    private readonly l2BlockSource;
+    private readonly epochCache;
+    private readonly log;
+    private readonly runningPromise;
+    private readonly emittedOffenses;
+    private readonly scanSlotLookback;
+    private config;
+    private lastScannedSlot;
+    constructor(p2pClient: P2PCheckpointAttestationSource, invalidProposalSlotSource: InvalidProposalSlotSource, l2BlockSource: Pick<L2BlockSource, 'getSyncedL2SlotNumber'>, epochCache: Pick<EpochCacheInterface, 'getSlotNow' | 'getL1Constants'>, config: AttestedInvalidProposalWatcherConfig, options?: AttestedInvalidProposalWatcherOptions);
+    updateConfig(config: Partial<SlasherConfig>): void;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    scan(): Promise<void>;
+    /** Scans a single invalid-proposal slot. */
+    scanSlot(slot: SlotNumber): Promise<void>;
+    private getSlashArgs;
+    private getSlashArgsForAttester;
+    private markAsNewOffense;
+}
+export {};
+//# sourceMappingURL=data:application/json;base64,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

package/dest/watchers/attested_invalid_proposal_watcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attested_invalid_proposal_watcher.d.ts","sourceRoot":"","sources":["../../src/watchers/attested_invalid_proposal_watcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAI7D,OAAO,EAAE,KAAK,MAAM,EAAgB,MAAM,uBAAuB,CAAC;AAElE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAMhF,OAAO,EAA6C,KAAK,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAE7G,QAAA,MAAM,wCAAwC,0DAA2D,CAAC;AAM1G,KAAK,oCAAoC,GAAG,IAAI,CAC9C,aAAa,EACb,CAAC,OAAO,wCAAwC,CAAC,CAAC,MAAM,CAAC,CAC1D,CAAC;AAEF,KAAK,8BAA8B,GAAG,IAAI,CAAC,SAAS,EAAE,kCAAkC,CAAC,CAAC;AAE1F,KAAK,qCAAqC,GAAG;IAC3C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,mBAAmB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAC/C,uBAAuB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;CACpD,CAAC;;AAEF,qBAAa,8BAA+B,SAAQ,mCAA2C,YAAW,OAAO;IAS7G,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAX7B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA2D;IAC3F,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,MAAM,CAAuC;IACrD,OAAO,CAAC,eAAe,CAAyB;IAEhD,YACmB,SAAS,EAAE,8BAA8B,EACzC,yBAAyB,EAAE,yBAAyB,EACpD,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,uBAAuB,CAAC,EAC3D,UAAU,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,GAAG,gBAAgB,CAAC,EACvF,MAAM,EAAE,oCAAoC,EAC5C,OAAO,GAAE,qCAA0C,EAWpD;IAEM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAGxD;IAEM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAG5B;IAEM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3B;IAEY,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAqBjC;IAED,4CAA4C;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAmCrD;IAED,OAAO,CAAC,YAAY;IAapB,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,gBAAgB;CAIzB"}

package/dest/watchers/attested_invalid_proposal_watcher.js

@@ -0,0 +1,117 @@
+import { SlotNumber } from '@aztec/foundation/branded-types';
+import { merge, pick } from '@aztec/foundation/collection';
+import { FifoSet } from '@aztec/foundation/fifo-set';
+import { createLogger } from '@aztec/foundation/log';
+import { RunningPromise } from '@aztec/foundation/running-promise';
+import { OffenseType, getOffenseTypeName } from '@aztec/stdlib/slashing';
+import EventEmitter from 'node:events';
+import { WANT_TO_SLASH_EVENT } from '../watcher.js';
+const AttestedInvalidProposalWatcherConfigKeys = [
+    'slashAttestInvalidCheckpointProposalPenalty'
+];
+const SCAN_SLOT_LAG = 1;
+const DEFAULT_SCAN_SLOT_LOOKBACK = 4;
+const MAX_TRACKED_BAD_ATTESTATIONS = 10_000;
+export class AttestedInvalidProposalWatcher extends EventEmitter {
+    p2pClient;
+    invalidProposalSlotSource;
+    l2BlockSource;
+    epochCache;
+    log;
+    runningPromise;
+    emittedOffenses;
+    scanSlotLookback;
+    config;
+    lastScannedSlot;
+    constructor(p2pClient, invalidProposalSlotSource, l2BlockSource, epochCache, config, options = {}){
+        super(), this.p2pClient = p2pClient, this.invalidProposalSlotSource = invalidProposalSlotSource, this.l2BlockSource = l2BlockSource, this.epochCache = epochCache, this.emittedOffenses = FifoSet.withLimit(MAX_TRACKED_BAD_ATTESTATIONS);
+        const constants = epochCache.getL1Constants();
+        this.log = options.log ?? createLogger('attested-invalid-proposal-watcher');
+        this.config = pick(config, ...AttestedInvalidProposalWatcherConfigKeys);
+        this.scanSlotLookback = Math.max(1, options.scanSlotLookback ?? DEFAULT_SCAN_SLOT_LOOKBACK);
+        const intervalMs = Math.max(1000, constants.ethereumSlotDuration * 1000 / 4);
+        this.runningPromise = new RunningPromise(()=>this.scan(), this.log, intervalMs);
+        this.log.info('AttestedInvalidProposalWatcher initialized', {
+            scanSlotLookback: this.scanSlotLookback
+        });
+    }
+    updateConfig(config) {
+        this.config = merge(this.config, pick(config, ...AttestedInvalidProposalWatcherConfigKeys));
+        this.log.verbose('AttestedInvalidProposalWatcher config updated', this.config);
+    }
+    start() {
+        this.runningPromise.start();
+        return Promise.resolve();
+    }
+    stop() {
+        return this.runningPromise.stop();
+    }
+    async scan() {
+        const currentSlot = await this.l2BlockSource.getSyncedL2SlotNumber() ?? this.epochCache.getSlotNow();
+        // genesis
+        if (currentSlot <= SlotNumber(SCAN_SLOT_LAG)) {
+            return;
+        }
+        const newestSlotToConsider = SlotNumber(currentSlot - SCAN_SLOT_LAG);
+        const oldestSlot = this.lastScannedSlot === undefined ? SlotNumber(Math.max(0, newestSlotToConsider - this.scanSlotLookback + 1)) : SlotNumber(this.lastScannedSlot + 1);
+        if (oldestSlot > newestSlotToConsider) {
+            return;
+        }
+        for(let slot = oldestSlot; slot <= newestSlotToConsider; slot++){
+            await this.scanSlot(slot);
+        }
+        this.lastScannedSlot = newestSlotToConsider;
+    }
+    /** Scans a single invalid-proposal slot. */ async scanSlot(slot) {
+        if (this.invalidProposalSlotSource.hasProposalEquivocation(slot) || !this.invalidProposalSlotSource.hasInvalidProposals(slot)) {
+            return;
+        }
+        let attestations;
+        try {
+            attestations = await this.p2pClient.getCheckpointAttestationsForSlot(slot);
+        } catch (err) {
+            this.log.warn('Error getting checkpoint attestations for invalid proposal slot', {
+                err,
+                slot
+            });
+            return;
+        }
+        const slashArgs = attestations.map((attestation)=>this.getSlashArgs(slot, attestation)).filter((args)=>args !== undefined).filter((args)=>this.markAsNewOffense(args));
+        if (slashArgs.length === 0) {
+            return;
+        }
+        this.log.info('Detected attestations to invalid checkpoint proposal', {
+            slot,
+            offenses: slashArgs.map((args)=>({
+                    validator: args.validator.toString(),
+                    amount: args.amount,
+                    offenseType: getOffenseTypeName(args.offenseType),
+                    epochOrSlot: args.epochOrSlot
+                }))
+        });
+        this.emit(WANT_TO_SLASH_EVENT, slashArgs);
+    }
+    getSlashArgs(slot, attestation) {
+        const attester = attestation.getSender();
+        if (!attester) {
+            this.log.warn('Cannot slash checkpoint attestation with invalid signature', {
+                slot,
+                archive: attestation.archive.toString()
+            });
+            return undefined;
+        }
+        return this.getSlashArgsForAttester(slot, attester);
+    }
+    getSlashArgsForAttester(slot, attester) {
+        return {
+            validator: attester,
+            amount: this.config.slashAttestInvalidCheckpointProposalPenalty,
+            offenseType: OffenseType.ATTESTED_TO_INVALID_CHECKPOINT_PROPOSAL,
+            epochOrSlot: BigInt(slot)
+        };
+    }
+    markAsNewOffense(args) {
+        const key = `${args.validator.toString()}-${args.offenseType}-${args.epochOrSlot}`;
+        return this.emittedOffenses.addIfAbsent(key);
+    }
+}

package/dest/watchers/broadcasted_invalid_checkpoint_proposal_watcher.d.ts

@@ -0,0 +1,38 @@
+import type { EpochCacheInterface } from '@aztec/epoch-cache';
+import { SlotNumber } from '@aztec/foundation/branded-types';
+import type { L2BlockSource } from '@aztec/stdlib/block';
+import type { P2PClient, SlasherConfig } from '@aztec/stdlib/interfaces/server';
+import { type Watcher, type WatcherEmitter } from '../watcher.js';
+declare const BroadcastedInvalidCheckpointProposalWatcherConfigKeys: readonly ["slashBroadcastedInvalidCheckpointProposalPenalty"];
+type BroadcastedInvalidCheckpointProposalWatcherConfig = Pick<SlasherConfig, (typeof BroadcastedInvalidCheckpointProposalWatcherConfigKeys)[number]>;
+type P2PProposalsForSlotSource = Pick<P2PClient, 'getProposalsForSlot'>;
+declare const BroadcastedInvalidCheckpointProposalWatcher_base: new () => WatcherEmitter;
+/** Detects truncated-checkpoint proposal offenses from retained signed P2P proposals. */
+export declare class BroadcastedInvalidCheckpointProposalWatcher extends BroadcastedInvalidCheckpointProposalWatcher_base implements Watcher {
+    private readonly p2pClient;
+    private readonly l2BlockSource;
+    private readonly epochCache;
+    private readonly log;
+    private readonly runningPromise;
+    private readonly emittedOffenses;
+    private readonly scanSlotLookback;
+    private config;
+    private lastScannedSlot;
+    constructor(p2pClient: P2PProposalsForSlotSource, l2BlockSource: Pick<L2BlockSource, 'getSyncedL2SlotNumber'>, epochCache: Pick<EpochCacheInterface, 'getSlotNow' | 'getL1Constants'>, config: BroadcastedInvalidCheckpointProposalWatcherConfig, scanSlotLookback?: number);
+    updateConfig(config: Partial<BroadcastedInvalidCheckpointProposalWatcherConfig>): void;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    /**
+     * Scans newly closed slots, plus a small lookback for late-arriving proposals. Anchors
+     * `currentSlot` at the archiver's last synced L2 slot.
+     */
+    scan(): Promise<void>;
+    /** Scans a single slot. Public for tests. */
+    scanSlot(slot: SlotNumber): Promise<void>;
+    private getSlashArgsForProposals;
+    private findOffenders;
+    private getSignedBlocksBySigner;
+    private markAsNewOffense;
+}
+export {};
+//# sourceMappingURL=data:application/json;base64,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

package/dest/watchers/broadcasted_invalid_checkpoint_proposal_watcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broadcasted_invalid_checkpoint_proposal_watcher.d.ts","sourceRoot":"","sources":["../../src/watchers/broadcasted_invalid_checkpoint_proposal_watcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAM7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAMhF,OAAO,EAA6C,KAAK,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAE7G,QAAA,MAAM,qDAAqD,+DAEjD,CAAC;AAKX,KAAK,iDAAiD,GAAG,IAAI,CAC3D,aAAa,EACb,CAAC,OAAO,qDAAqD,CAAC,CAAC,MAAM,CAAC,CACvE,CAAC;AAGF,KAAK,yBAAyB,GAAG,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;;AAOxE,yFAAyF;AACzF,qBAAa,2CACX,SAAQ,gDACR,YAAW,OAAO;IAUhB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAV7B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA2E;IAC/F,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,MAAM,CAAoD;IAClE,OAAO,CAAC,eAAe,CAAyB;IAEhD,YACmB,SAAS,EAAE,yBAAyB,EACpC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,uBAAuB,CAAC,EAC3D,UAAU,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,GAAG,gBAAgB,CAAC,EACvF,MAAM,EAAE,iDAAiD,EACzD,gBAAgB,SAA6B,EAiB9C;IAEM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,iDAAiD,CAAC,GAAG,IAAI,CAG5F;IAEM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAG5B;IAEM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3B;IAED;;;OAGG;IACU,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAejC;IAED,6CAA6C;IAChC,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBrD;IAED,OAAO,CAAC,wBAAwB;IAWhC,OAAO,CAAC,aAAa;IAkCrB,OAAO,CAAC,uBAAuB;IAe/B,OAAO,CAAC,gBAAgB;CAIzB"}

package/dest/watchers/broadcasted_invalid_checkpoint_proposal_watcher.js

@@ -0,0 +1,138 @@
+import { SlotNumber } from '@aztec/foundation/branded-types';
+import { merge, pick } from '@aztec/foundation/collection';
+import { FifoSet } from '@aztec/foundation/fifo-set';
+import { createLogger } from '@aztec/foundation/log';
+import { RunningPromise } from '@aztec/foundation/running-promise';
+import { OffenseType, getOffenseTypeName } from '@aztec/stdlib/slashing';
+import EventEmitter from 'node:events';
+import { WANT_TO_SLASH_EVENT } from '../watcher.js';
+const BroadcastedInvalidCheckpointProposalWatcherConfigKeys = [
+    'slashBroadcastedInvalidCheckpointProposalPenalty'
+];
+const SCAN_SLOT_LAG = 1;
+const DEFAULT_SCAN_SLOT_LOOKBACK = 4;
+/** Detects truncated-checkpoint proposal offenses from retained signed P2P proposals. */ export class BroadcastedInvalidCheckpointProposalWatcher extends EventEmitter {
+    p2pClient;
+    l2BlockSource;
+    epochCache;
+    log;
+    runningPromise;
+    emittedOffenses;
+    scanSlotLookback;
+    config;
+    lastScannedSlot;
+    constructor(p2pClient, l2BlockSource, epochCache, config, scanSlotLookback = DEFAULT_SCAN_SLOT_LOOKBACK){
+        super(), this.p2pClient = p2pClient, this.l2BlockSource = l2BlockSource, this.epochCache = epochCache, this.log = createLogger('broadcasted-invalid-checkpoint-proposal-watcher');
+        const constants = epochCache.getL1Constants();
+        this.config = pick(config, ...BroadcastedInvalidCheckpointProposalWatcherConfigKeys);
+        this.scanSlotLookback = Math.max(1, scanSlotLookback);
+        // Bound emitted offenses to the number of slots we rescan. This watcher currently tracks one offense type,
+        // and at most one offense of that type can be emitted per slot.
+        const offenseTypes = 1;
+        this.emittedOffenses = FifoSet.withLimit(offenseTypes * this.scanSlotLookback);
+        const intervalMs = Math.max(1000, constants.ethereumSlotDuration * 1000 / 4);
+        this.runningPromise = new RunningPromise(()=>this.scan(), this.log, intervalMs);
+        this.log.info('BroadcastedInvalidCheckpointProposalWatcher initialized', {
+            scanSlotLookback: this.scanSlotLookback
+        });
+    }
+    updateConfig(config) {
+        this.config = merge(this.config, pick(config, ...BroadcastedInvalidCheckpointProposalWatcherConfigKeys));
+        this.log.verbose('BroadcastedInvalidCheckpointProposalWatcher config updated', this.config);
+    }
+    start() {
+        this.runningPromise.start();
+        return Promise.resolve();
+    }
+    stop() {
+        return this.runningPromise.stop();
+    }
+    /**
+   * Scans newly closed slots, plus a small lookback for late-arriving proposals. Anchors
+   * `currentSlot` at the archiver's last synced L2 slot.
+   */ async scan() {
+        const currentSlot = await this.l2BlockSource.getSyncedL2SlotNumber() ?? this.epochCache.getSlotNow();
+        if (currentSlot <= SlotNumber(SCAN_SLOT_LAG)) {
+            return;
+        }
+        const newestSlotToConsider = SlotNumber(currentSlot - 1 - SCAN_SLOT_LAG);
+        const oldestLookbackSlot = SlotNumber(Math.max(0, newestSlotToConsider - this.scanSlotLookback + 1));
+        const oldestUnscannedSlot = this.lastScannedSlot === undefined ? oldestLookbackSlot : SlotNumber(this.lastScannedSlot + 1);
+        const oldestSlot = SlotNumber(Math.min(oldestLookbackSlot, oldestUnscannedSlot));
+        for(let slot = oldestSlot; slot <= newestSlotToConsider; slot++){
+            await this.scanSlot(SlotNumber(slot));
+        }
+        this.lastScannedSlot = newestSlotToConsider;
+    }
+    /** Scans a single slot. Public for tests. */ async scanSlot(slot) {
+        const proposals = await this.p2pClient.getProposalsForSlot(slot);
+        const slashArgs = this.getSlashArgsForProposals(slot, proposals).filter((args)=>this.markAsNewOffense(args));
+        if (slashArgs.length === 0) {
+            return;
+        }
+        this.log.info(`Detected broadcasted invalid checkpoint proposal offense`, {
+            slot,
+            offenses: slashArgs.map((args)=>({
+                    validator: args.validator.toString(),
+                    amount: args.amount,
+                    offenseType: getOffenseTypeName(args.offenseType),
+                    epochOrSlot: args.epochOrSlot
+                }))
+        });
+        this.emit(WANT_TO_SLASH_EVENT, slashArgs);
+    }
+    getSlashArgsForProposals(slot, proposals) {
+        const offenders = this.findOffenders(proposals.blockProposals, proposals.checkpointProposals);
+        // we expect one proposer per slot today.
+        return [
+            ...offenders.values()
+        ].map((validator)=>({
+                validator,
+                amount: this.config.slashBroadcastedInvalidCheckpointProposalPenalty,
+                offenseType: OffenseType.BROADCASTED_INVALID_CHECKPOINT_PROPOSAL,
+                epochOrSlot: BigInt(slot)
+            }));
+    }
+    findOffenders(blockProposals, checkpointProposals) {
+        const blocksBySigner = this.getSignedBlocksBySigner(blockProposals);
+        const offenders = new Map();
+        for (const checkpoint of checkpointProposals){
+            const checkpointSigner = checkpoint.getSender();
+            if (!checkpointSigner) {
+                continue;
+            }
+            const signerKey = checkpointSigner.toString();
+            const signerBlocks = blocksBySigner.get(signerKey) ?? [];
+            const terminalBlocks = signerBlocks.filter(({ proposal })=>proposal.slotNumber === checkpoint.slotNumber && proposal.archive.equals(checkpoint.archive));
+            if (terminalBlocks.length === 0) {
+                continue;
+            }
+            const hasTruncatedHigherBlock = terminalBlocks.some((terminalBlock)=>signerBlocks.some(({ proposal })=>proposal.slotNumber === checkpoint.slotNumber && proposal.indexWithinCheckpoint > terminalBlock.proposal.indexWithinCheckpoint));
+            if (hasTruncatedHigherBlock) {
+                offenders.set(signerKey, checkpointSigner);
+            }
+        }
+        return offenders;
+    }
+    getSignedBlocksBySigner(blockProposals) {
+        const blocksBySigner = new Map();
+        for (const proposal of blockProposals){
+            const signer = proposal.getSender();
+            if (!signer) {
+                continue;
+            }
+            const signerKey = signer.toString();
+            const signerBlocks = blocksBySigner.get(signerKey) ?? [];
+            signerBlocks.push({
+                proposal,
+                signer
+            });
+            blocksBySigner.set(signerKey, signerBlocks);
+        }
+        return blocksBySigner;
+    }
+    markAsNewOffense(args) {
+        const key = `${args.validator.toString()}-${args.offenseType}-${args.epochOrSlot}`;
+        return this.emittedOffenses.addIfAbsent(key);
+    }
+}

package/dest/watchers/checkpoint_equivocation_watcher.d.ts

@@ -0,0 +1,30 @@
+import type { EpochCacheInterface } from '@aztec/epoch-cache';
+import { type CheckpointEquivocationDetectedEvent, type L2BlockSourceEventEmitter } from '@aztec/stdlib/block';
+import type { SlasherConfig } from '@aztec/stdlib/interfaces/server';
+import { type Watcher, type WatcherEmitter } from '../watcher.js';
+declare const CheckpointEquivocationWatcherConfigKeys: readonly ["slashDuplicateProposalPenalty"];
+type CheckpointEquivocationWatcherConfig = Pick<SlasherConfig, (typeof CheckpointEquivocationWatcherConfigKeys)[number]>;
+type EquivocationEventSource = Pick<L2BlockSourceEventEmitter, 'events'>;
+type ProposerLookup = Pick<EpochCacheInterface, 'getProposerAttesterAddressInSlot'>;
+declare const CheckpointEquivocationWatcher_base: new () => WatcherEmitter;
+/**
+ * Slashes the slot proposer for DUPLICATE_PROPOSAL when the archiver detects that a
+ * locally-stored proposed checkpoint disagrees with the L1-confirmed checkpoint at the
+ * same slot. Both are signed by the slot proposer (the proposed one by accepting it via
+ * P2P or building it locally; the L1 one by submission), so the proposer equivocated.
+ */
+export declare class CheckpointEquivocationWatcher extends CheckpointEquivocationWatcher_base implements Watcher {
+    private readonly l2BlockSource;
+    private readonly epochCache;
+    private readonly log;
+    private readonly handler;
+    private config;
+    constructor(l2BlockSource: EquivocationEventSource, epochCache: ProposerLookup, config: CheckpointEquivocationWatcherConfig);
+    updateConfig(config: Partial<CheckpointEquivocationWatcherConfig>): void;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    /** Public for tests. */
+    onEquivocationDetected(event: CheckpointEquivocationDetectedEvent): Promise<void>;
+}
+export {};
+//# sourceMappingURL=data:application/json;base64,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

package/dest/watchers/checkpoint_equivocation_watcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint_equivocation_watcher.d.ts","sourceRoot":"","sources":["../../src/watchers/checkpoint_equivocation_watcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAG9D,OAAO,EACL,KAAK,mCAAmC,EACxC,KAAK,yBAAyB,EAE/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAKrE,OAAO,EAA6C,KAAK,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAE7G,QAAA,MAAM,uCAAuC,4CAA6C,CAAC;AAE3F,KAAK,mCAAmC,GAAG,IAAI,CAC7C,aAAa,EACb,CAAC,OAAO,uCAAuC,CAAC,CAAC,MAAM,CAAC,CACzD,CAAC;AAEF,KAAK,uBAAuB,GAAG,IAAI,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;AACzE,KAAK,cAAc,GAAG,IAAI,CAAC,mBAAmB,EAAE,kCAAkC,CAAC,CAAC;;AAEpF;;;;;GAKG;AACH,qBAAa,6BAA8B,SAAQ,kCAA2C,YAAW,OAAO;IAM5G,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAN7B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA2D;IAC/E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsD;IAC9E,OAAO,CAAC,MAAM,CAAsC;IAEpD,YACmB,aAAa,EAAE,uBAAuB,EACtC,UAAU,EAAE,cAAc,EAC3C,MAAM,EAAE,mCAAmC,EAU5C;IAEM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,mCAAmC,CAAC,GAAG,IAAI,CAG9E;IAEM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAG5B;IAEM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAG3B;IAED,wBAAwB;IACX,sBAAsB,CAAC,KAAK,EAAE,mCAAmC,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B7F;CACF"}

package/dest/watchers/checkpoint_equivocation_watcher.js

@@ -0,0 +1,69 @@
+import { merge, pick } from '@aztec/foundation/collection';
+import { createLogger } from '@aztec/foundation/log';
+import { L2BlockSourceEvents } from '@aztec/stdlib/block';
+import { OffenseType, getOffenseTypeName } from '@aztec/stdlib/slashing';
+import EventEmitter from 'node:events';
+import { WANT_TO_SLASH_EVENT } from '../watcher.js';
+const CheckpointEquivocationWatcherConfigKeys = [
+    'slashDuplicateProposalPenalty'
+];
+/**
+ * Slashes the slot proposer for DUPLICATE_PROPOSAL when the archiver detects that a
+ * locally-stored proposed checkpoint disagrees with the L1-confirmed checkpoint at the
+ * same slot. Both are signed by the slot proposer (the proposed one by accepting it via
+ * P2P or building it locally; the L1 one by submission), so the proposer equivocated.
+ */ export class CheckpointEquivocationWatcher extends EventEmitter {
+    l2BlockSource;
+    epochCache;
+    log;
+    handler;
+    config;
+    constructor(l2BlockSource, epochCache, config){
+        super(), this.l2BlockSource = l2BlockSource, this.epochCache = epochCache, this.log = createLogger('checkpoint-equivocation-watcher');
+        this.config = pick(config, ...CheckpointEquivocationWatcherConfigKeys);
+        this.handler = (event)=>{
+            this.onEquivocationDetected(event).catch((err)=>this.log.error('Failed to handle checkpoint equivocation event', err));
+        };
+        this.log.info('CheckpointEquivocationWatcher initialized');
+    }
+    updateConfig(config) {
+        this.config = merge(this.config, pick(config, ...CheckpointEquivocationWatcherConfigKeys));
+        this.log.verbose('CheckpointEquivocationWatcher config updated', this.config);
+    }
+    start() {
+        this.l2BlockSource.events.on(L2BlockSourceEvents.CheckpointEquivocationDetected, this.handler);
+        return Promise.resolve();
+    }
+    stop() {
+        this.l2BlockSource.events.off(L2BlockSourceEvents.CheckpointEquivocationDetected, this.handler);
+        return Promise.resolve();
+    }
+    /** Public for tests. */ async onEquivocationDetected(event) {
+        const proposer = await this.epochCache.getProposerAttesterAddressInSlot(event.slotNumber);
+        if (!proposer) {
+            this.log.warn(`Cannot attribute checkpoint equivocation: no proposer for slot ${event.slotNumber}`, {
+                slotNumber: event.slotNumber,
+                checkpointNumber: event.checkpointNumber
+            });
+            return;
+        }
+        const slashArgs = {
+            validator: proposer,
+            amount: this.config.slashDuplicateProposalPenalty,
+            offenseType: OffenseType.DUPLICATE_PROPOSAL,
+            epochOrSlot: BigInt(event.slotNumber)
+        };
+        this.log.info(`Detected checkpoint equivocation offense`, {
+            slotNumber: event.slotNumber,
+            checkpointNumber: event.checkpointNumber,
+            amount: slashArgs.amount,
+            offenseType: getOffenseTypeName(slashArgs.offenseType),
+            l1ArchiveRoot: event.l1ArchiveRoot.toString(),
+            proposedArchiveRoot: event.proposedArchiveRoot.toString(),
+            validator: proposer.toString()
+        });
+        this.emit(WANT_TO_SLASH_EVENT, [
+            slashArgs
+        ]);
+    }
+}

package/dest/watchers/data_withholding_watcher.d.ts

@@ -0,0 +1,69 @@
+import type { EpochCache } from '@aztec/epoch-cache';
+import type { EthAddress } from '@aztec/foundation/eth-address';
+import { type Logger } from '@aztec/foundation/log';
+import type { L2BlockSource } from '@aztec/stdlib/block';
+import type { CheckpointReexecutionTracker, PublishedCheckpoint } from '@aztec/stdlib/checkpoint';
+import type { ITxProvider, P2PApi, SlasherConfig } from '@aztec/stdlib/interfaces/server';
+import { type CoordinationSignatureContext } from '@aztec/stdlib/p2p';
+import { type Watcher, type WatcherEmitter } from '../watcher.js';
+declare const DataWithholdingWatcherConfigKeys: readonly ["slashDataWithholdingPenalty", "slashDataWithholdingToleranceSlots"];
+type DataWithholdingWatcherConfig = Pick<SlasherConfig, (typeof DataWithholdingWatcherConfigKeys)[number]>;
+declare const DataWithholdingWatcher_base: new () => WatcherEmitter;
+/**
+ * Detects data-withholding offenses by probing the local mempool for the txs in published
+ * checkpoints once they are old enough that an honest node should have collected them.
+ *
+ * Per AZIP-7: once `slashDataWithholdingToleranceSlots` full slots have elapsed after the
+ * checkpoint's slot — i.e. at `slotStart(checkpoint.slot + slashDataWithholdingToleranceSlots
+ * + 1)` — if any tx from the checkpoint's blocks is still missing locally, the checkpoint's
+ * attesters are considered at fault for not making the data available, and we emit a slash
+ * for them.
+ *
+ * The watcher ticks at quarter-eth-slot cadence (matching the Sentinel template). On boot it
+ * floors processing at the current slot — restart-time gaps are accepted and not back-filled,
+ * matching the Sentinel approach.
+ *
+ * Since the evidence for an offense is the absence of txs in the local pool, the probe is gated on
+ * p2p connectivity: while there are no connected peers, slots are skipped instead of probed, since
+ * missing txs then say nothing about the attesters. Nodes running with p2p disabled do not run this
+ * watcher at all.
+ */
+export declare class DataWithholdingWatcher extends DataWithholdingWatcher_base implements Watcher {
+    private readonly epochCache;
+    private readonly l2BlockSource;
+    private readonly txProvider;
+    private readonly p2p;
+    private readonly reexecutionTracker;
+    private readonly signatureContext;
+    private readonly log;
+    private runningPromise;
+    private initialSlot;
+    private lastCheckedSlot;
+    private config;
+    private gossipDegraded;
+    constructor(epochCache: EpochCache, l2BlockSource: Pick<L2BlockSource, 'getCheckpoint' | 'getSyncedL2SlotNumber'>, txProvider: Pick<ITxProvider, 'hasTxs'>, p2p: Pick<P2PApi, 'getCheckpointAttestationsForSlot' | 'getP2PConnectivity'>, reexecutionTracker: Pick<CheckpointReexecutionTracker, 'getTxsCollectedRecord'>, signatureContext: CoordinationSignatureContext, config: DataWithholdingWatcherConfig, log?: Logger);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    updateConfig(config: Partial<SlasherConfig>): void;
+    /**
+     * Runs every tick. Walks newly-eligible slots and probes their checkpoints for data
+     * availability; emits a DATA_WITHHOLDING slash for any checkpoint whose txs are missing.
+     */
+    work(): Promise<void>;
+    private processSlot;
+    /**
+     * Returns the union of:
+     *   1. attesters whose signatures landed in the published checkpoint on L1, and
+     *   2. attesters we observed signing the same proposal on p2p (the proposer publishes as
+     *      soon as it has hit committee quorum, so honest peer attestations that arrive after
+     *      that point are dropped — but they still vouched for the data and
+     *      should be slashed for withholding it).
+     *
+     *
+     * Exposed as protected so tests can substitute a deterministic recovery without having
+     * to construct real secp256k1 signatures.
+     */
+    protected extractAttesters(published: PublishedCheckpoint): Promise<EthAddress[]>;
+}
+export {};
+//# sourceMappingURL=data:application/json;base64,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

package/dest/watchers/data_withholding_watcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data_withholding_watcher.d.ts","sourceRoot":"","sources":["../../src/watchers/data_withholding_watcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,KAAK,MAAM,EAAgB,MAAM,uBAAuB,CAAC;AAElE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,KAAK,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAClG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAC1F,OAAO,EAAoB,KAAK,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAMxF,OAAO,EAA6C,KAAK,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAE7G,QAAA,MAAM,gCAAgC,gFAAiF,CAAC;AAExH,KAAK,4BAA4B,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;;AAE3G;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,sBAAuB,SAAQ,2BAA2C,YAAW,OAAO;IAQrG,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAEjC,OAAO,CAAC,QAAQ,CAAC,GAAG;IAdtB,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,MAAM,CAA+B;IAC7C,OAAO,CAAC,cAAc,CAAS;IAE/B,YACmB,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,eAAe,GAAG,uBAAuB,CAAC,EAC7E,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EACvC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,kCAAkC,GAAG,oBAAoB,CAAC,EAC5E,kBAAkB,EAAE,IAAI,CAAC,4BAA4B,EAAE,uBAAuB,CAAC,EAC/E,gBAAgB,EAAE,4BAA4B,EAC/D,MAAM,EAAE,4BAA4B,EACnB,GAAG,GAAE,MAAiD,EAOxE;IAEY,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAQlC;IAEM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3B;IAEM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAGxD;IAED;;;OAGG;IACU,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAwDjC;YAGa,WAAW;IA6EzB;;;;;;;;;;;OAWG;IACH,UAAgB,gBAAgB,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAmBtF;CACF"}