@aztec/stdlib 0.0.1-commit.2f68f620 → 0.0.1-commit.3100065

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aztec/stdlib",
-  "version": "0.0.1-commit.2f68f620",
+  "version": "0.0.1-commit.3100065",
   "type": "module",
   "inherits": [
     "../package.common.json",
@@ -92,13 +92,13 @@
   },
   "dependencies": {
     "@aws-sdk/client-s3": "^3.892.0",
-    "@aztec/bb.js": "0.0.1-commit.2f68f620",
-    "@aztec/blob-lib": "0.0.1-commit.2f68f620",
-    "@aztec/constants": "0.0.1-commit.2f68f620",
-    "@aztec/ethereum": "0.0.1-commit.2f68f620",
-    "@aztec/foundation": "0.0.1-commit.2f68f620",
-    "@aztec/l1-artifacts": "0.0.1-commit.2f68f620",
-    "@aztec/noir-noirc_abi": "0.0.1-commit.2f68f620",
+    "@aztec/bb.js": "0.0.1-commit.3100065",
+    "@aztec/blob-lib": "0.0.1-commit.3100065",
+    "@aztec/constants": "0.0.1-commit.3100065",
+    "@aztec/ethereum": "0.0.1-commit.3100065",
+    "@aztec/foundation": "0.0.1-commit.3100065",
+    "@aztec/l1-artifacts": "0.0.1-commit.3100065",
+    "@aztec/noir-noirc_abi": "0.0.1-commit.3100065",
     "@google-cloud/storage": "^7.15.0",
     "axios": "^1.15.1",
     "json-stringify-deterministic": "1.0.12",

package/src/abi/buffer.ts

@@ -38,11 +38,23 @@ export function bufferAsFields(input: Buffer, targetLength: number): Fr[] {
  * bytecode commitment computations to diverge from what the circuit produced.
  *
  * @param fields - An output from bufferAsFields: [byteLength, ...payloadFields].
+ * @param maxByteLength - Optional upper bound on the declared byte length. When the field array comes
+ *   from untrusted input (e.g. a gossiped contract-class log), pass the payload capacity so an
+ *   attacker-declared length cannot force a large `Buffer.alloc` before the value is otherwise
+ *   rejected. Throws if the declared length exceeds it, before allocating.
  * @returns A buffer of exactly `byteLength` bytes.
  */
-export function bufferFromFields(fields: Fr[]): Buffer {
+export function bufferFromFields(fields: Fr[], maxByteLength?: number): Buffer {
+  // A valid bufferAsFields output always has at least the leading byte-length field, so an empty
+  // input encodes no data. Guard so `length` (the destructured head) is never undefined.
+  if (fields.length === 0) {
+    return Buffer.alloc(0);
+  }
   const [length, ...payload] = fields;
   const byteLength = length.toNumber();
+  if (maxByteLength !== undefined && byteLength > maxByteLength) {
+    throw new Error(`Declared byte length ${byteLength} exceeds maximum ${maxByteLength}`);
+  }
   const raw = Buffer.concat(payload.map(f => f.toBuffer().subarray(1)));
   if (raw.length >= byteLength) {
     return raw.subarray(0, byteLength);

package/src/abi/contract_artifact.ts

@@ -61,6 +61,25 @@ export function loadContractArtifact(input: NoirCompiledContract): ContractArtif
   return generateContractArtifact(input);
 }
 
+/**
+ * Like {@link loadContractArtifact}, but fully validates an already-processed artifact against the
+ * contract artifact schema before returning it. Use when loading an artifact from untrusted or
+ * external JSON (e.g. a file path passed to the CLI), so a malformed artifact is rejected up-front
+ * with a clear schema error instead of surfacing as an opaque failure later during deployment.
+ *
+ * `loadContractArtifact` only runs the shallow `isContractArtifact` shape check on already-processed
+ * artifacts; raw nargo output is validated via `generateContractArtifact` regardless. The returned
+ * object is identical to `loadContractArtifact`'s; the schema parse is used purely for validation.
+ * @param input - Input object as generated by nargo compile, or an already-processed artifact.
+ * @returns A valid contract artifact instance.
+ */
+export function loadContractArtifactWithValidation(input: NoirCompiledContract): ContractArtifact {
+  if (isContractArtifact(input)) {
+    ContractArtifactSchema.parse(input);
+  }
+  return loadContractArtifact(input);
+}
+
 /**
  * Gets nargo build output and returns a valid contract artifact instance.
  * Differs from loadContractArtifact() by retaining all bytecode.

package/src/avm/avm.ts

@@ -1152,7 +1152,7 @@ export class CallStackMetadata {
 
     const { stack, leaf } = failingCall;
     const aztecCallStack = stack.map(call => ({
-      contractAddress: AztecAddress.fromField(call.contractAddress),
+      contractAddress: AztecAddress.fromFieldUnsafe(call.contractAddress),
       functionSelector: call.calldata.length > 0 ? FunctionSelector.fromFieldOrUndefined(call.calldata[0]) : undefined,
     }));
 

package/src/avm/contract_storage_read.ts

@@ -0,0 +1,77 @@
+import { CONTRACT_STORAGE_READ_LENGTH } from '@aztec/constants';
+import { Fr } from '@aztec/foundation/curves/bn254';
+import { BufferReader, FieldReader, serializeToBuffer } from '@aztec/foundation/serialize';
+
+import type { AztecAddress } from '../aztec-address/index.js';
+
+/**
+ * Contract storage read operation on a specific contract.
+ *
+ * Note: Similar to `PublicDataRead` but it's from the POV of contract storage so we are not working with public data
+ * tree leaf index but storage slot index.
+ */
+export class ContractStorageRead {
+  constructor(
+    /**
+     * Storage slot we are reading from.
+     */
+    public readonly storageSlot: Fr,
+    /**
+     * Value read from the storage slot.
+     */
+    public readonly currentValue: Fr,
+    /**
+     * Side effect counter tracking position of this event in tx execution.
+     */
+    public readonly counter: number,
+    /**
+     * Contract address whose storage is being read.
+     */
+    public contractAddress?: AztecAddress, // TODO: Should not be optional. This is a temporary hack to silo the storage slot with the correct address for nested executions.
+  ) {}
+
+  static from(args: { storageSlot: Fr; currentValue: Fr; counter: number; contractAddress?: AztecAddress }) {
+    return new ContractStorageRead(args.storageSlot, args.currentValue, args.counter, args.contractAddress);
+  }
+
+  toBuffer() {
+    return serializeToBuffer(this.storageSlot, this.currentValue, new Fr(this.counter));
+  }
+
+  static fromBuffer(buffer: Buffer | BufferReader) {
+    const reader = BufferReader.asReader(buffer);
+    return new ContractStorageRead(Fr.fromBuffer(reader), Fr.fromBuffer(reader), Fr.fromBuffer(reader).toNumber());
+  }
+
+  static empty() {
+    return new ContractStorageRead(Fr.ZERO, Fr.ZERO, 0);
+  }
+
+  isEmpty() {
+    return this.storageSlot.isZero() && this.currentValue.isZero() && this.counter == 0;
+  }
+
+  toFriendlyJSON() {
+    return `Slot=${this.storageSlot.toFriendlyJSON()}: ${this.currentValue.toFriendlyJSON()}`;
+  }
+
+  toFields(): Fr[] {
+    const fields = [this.storageSlot, this.currentValue, new Fr(this.counter)];
+    if (fields.length !== CONTRACT_STORAGE_READ_LENGTH) {
+      throw new Error(
+        `Invalid number of fields for ContractStorageRead. Expected ${CONTRACT_STORAGE_READ_LENGTH}, got ${fields.length}`,
+      );
+    }
+    return fields;
+  }
+
+  static fromFields(fields: Fr[] | FieldReader): ContractStorageRead {
+    const reader = FieldReader.asReader(fields);
+
+    const storageSlot = reader.readField();
+    const currentValue = reader.readField();
+    const counter = reader.readField().toNumber();
+
+    return new ContractStorageRead(storageSlot, currentValue, counter);
+  }
+}

package/src/avm/contract_storage_update_request.ts

@@ -0,0 +1,93 @@
+import { CONTRACT_STORAGE_UPDATE_REQUEST_LENGTH } from '@aztec/constants';
+import { Fr } from '@aztec/foundation/curves/bn254';
+import { BufferReader, FieldReader, serializeToBuffer } from '@aztec/foundation/serialize';
+import type { FieldsOf } from '@aztec/foundation/types';
+
+import type { AztecAddress } from '../aztec-address/index.js';
+
+/**
+ * Contract storage update request for a slot on a specific contract.
+ *
+ * Note: Similar to `PublicDataUpdateRequest` but it's from the POV of contract storage so we are not working with
+ * public data tree leaf index but storage slot index.
+ */
+export class ContractStorageUpdateRequest {
+  constructor(
+    /**
+     * Storage slot we are updating.
+     */
+    public readonly storageSlot: Fr,
+    /**
+     * New value of the storage slot.
+     */
+    public readonly newValue: Fr,
+    /**
+     * Side effect counter tracking position of this event in tx execution.
+     */
+    public readonly counter: number,
+    /**
+     * Contract address whose storage is being read.
+     */
+    public contractAddress?: AztecAddress, // TODO: Should not be optional. This is a temporary hack to silo the storage slot with the correct address for nested executions.
+  ) {}
+
+  toBuffer() {
+    return serializeToBuffer(this.storageSlot, this.newValue, this.counter);
+  }
+
+  static fromBuffer(buffer: Buffer | BufferReader) {
+    const reader = BufferReader.asReader(buffer);
+    return new ContractStorageUpdateRequest(Fr.fromBuffer(reader), Fr.fromBuffer(reader), reader.readNumber());
+  }
+
+  /**
+   * Create ContractStorageUpdateRequest from a fields dictionary.
+   * @param fields - The dictionary.
+   * @returns A ContractStorageUpdateRequest object.
+   */
+  static from(fields: FieldsOf<ContractStorageUpdateRequest>): ContractStorageUpdateRequest {
+    return new ContractStorageUpdateRequest(...ContractStorageUpdateRequest.getFields(fields));
+  }
+
+  /**
+   * Serialize into a field array. Low-level utility.
+   * @param fields - Object with fields.
+   * @returns The array.
+   */
+  static getFields(fields: FieldsOf<ContractStorageUpdateRequest>) {
+    return [fields.storageSlot, fields.newValue, fields.counter, fields.contractAddress] as const;
+  }
+
+  static empty() {
+    return new ContractStorageUpdateRequest(Fr.ZERO, Fr.ZERO, 0);
+  }
+
+  isEmpty() {
+    return this.storageSlot.isZero() && this.newValue.isZero();
+  }
+
+  toFriendlyJSON() {
+    return `Slot=${this.storageSlot.toFriendlyJSON()}: ${this.newValue.toFriendlyJSON()}, sideEffectCounter=${
+      this.counter
+    }`;
+  }
+
+  toFields(): Fr[] {
+    const fields = [this.storageSlot, this.newValue, new Fr(this.counter)];
+    if (fields.length !== CONTRACT_STORAGE_UPDATE_REQUEST_LENGTH) {
+      throw new Error(
+        `Invalid number of fields for ContractStorageUpdateRequest. Expected ${CONTRACT_STORAGE_UPDATE_REQUEST_LENGTH}, got ${fields.length}`,
+      );
+    }
+    return fields;
+  }
+
+  static fromFields(fields: Fr[] | FieldReader): ContractStorageUpdateRequest {
+    const reader = FieldReader.asReader(fields);
+
+    const storageSlot = reader.readField();
+    const newValue = reader.readField();
+
+    return new ContractStorageUpdateRequest(storageSlot, newValue, reader.readU32());
+  }
+}

package/src/avm/index.ts

@@ -3,5 +3,10 @@ export * from './avm_accumulated_data.js';
 export * from './avm_circuit_public_inputs.js';
 export * from './revert_code.js';
 export * from './public_data_write.js';
+export * from './public_data_update_request.js';
+export * from './contract_storage_update_request.js';
+export * from './contract_storage_read.js';
+export * from './public_inner_call_request.js';
+export * from './public_call_stack_item_compressed.js';
 export * from './avm_proving_request.js';
 export * from './message_pack.js';

package/src/avm/public_call_stack_item_compressed.ts

@@ -0,0 +1,113 @@
+import { PUBLIC_CALL_STACK_ITEM_COMPRESSED_LENGTH } from '@aztec/constants';
+import { Fr } from '@aztec/foundation/curves/bn254';
+import { BufferReader, FieldReader, serializeToBuffer, serializeToFields } from '@aztec/foundation/serialize';
+import type { FieldsOf } from '@aztec/foundation/types';
+
+import { AztecAddress } from '../aztec-address/index.js';
+import { Gas } from '../gas/gas.js';
+import { CallContext } from '../tx/call_context.js';
+import { RevertCode } from './revert_code.js';
+
+// TO BE REMOVED
+/**
+ * Compressed call stack item on a public call.
+ */
+export class PublicCallStackItemCompressed {
+  constructor(
+    public contractAddress: AztecAddress,
+    public callContext: CallContext,
+    public argsHash: Fr,
+    public returnsHash: Fr,
+    public revertCode: RevertCode,
+    /** How much gas was available for execution. */
+    public startGasLeft: Gas,
+    /** How much gas was left after execution. */
+    public endGasLeft: Gas,
+  ) {}
+
+  static getFields(fields: FieldsOf<PublicCallStackItemCompressed>) {
+    return [
+      fields.contractAddress,
+      fields.callContext,
+      fields.argsHash,
+      fields.returnsHash,
+      fields.revertCode,
+      fields.startGasLeft,
+      fields.endGasLeft,
+    ] as const;
+  }
+
+  toFields(): Fr[] {
+    const fields = serializeToFields(...PublicCallStackItemCompressed.getFields(this));
+    if (fields.length !== PUBLIC_CALL_STACK_ITEM_COMPRESSED_LENGTH) {
+      throw new Error(
+        `Invalid number of fields for PublicCallStackItemCompressed. Expected ${PUBLIC_CALL_STACK_ITEM_COMPRESSED_LENGTH}, got ${fields.length}`,
+      );
+    }
+    return fields;
+  }
+
+  toBuffer() {
+    return serializeToBuffer(...PublicCallStackItemCompressed.getFields(this));
+  }
+
+  /**
+   * Deserializes from a buffer or reader.
+   * @param buffer - Buffer or reader to read from.
+   * @returns The deserialized instance.
+   */
+  static fromBuffer(buffer: Buffer | BufferReader): PublicCallStackItemCompressed {
+    const reader = BufferReader.asReader(buffer);
+    return new PublicCallStackItemCompressed(
+      reader.readObject(AztecAddress),
+      reader.readObject(CallContext),
+      reader.readObject(Fr),
+      reader.readObject(Fr),
+      reader.readObject(RevertCode),
+      reader.readObject(Gas),
+      reader.readObject(Gas),
+    );
+  }
+
+  static fromFields(fields: Fr[] | FieldReader): PublicCallStackItemCompressed {
+    const reader = FieldReader.asReader(fields);
+
+    return new PublicCallStackItemCompressed(
+      AztecAddress.fromFields(reader),
+      CallContext.fromFields(reader),
+      reader.readField(),
+      reader.readField(),
+      RevertCode.fromFields(reader),
+      Gas.fromFields(reader),
+      Gas.fromFields(reader),
+    );
+  }
+
+  /**
+   * Returns a new instance of PublicCallStackItem with zero contract address, function data and public inputs.
+   * @returns A new instance of PublicCallStackItem with zero contract address, function data and public inputs.
+   */
+  public static empty(): PublicCallStackItemCompressed {
+    return new PublicCallStackItemCompressed(
+      AztecAddress.ZERO,
+      CallContext.empty(),
+      Fr.ZERO,
+      Fr.ZERO,
+      RevertCode.OK,
+      Gas.empty(),
+      Gas.empty(),
+    );
+  }
+
+  isEmpty() {
+    return (
+      this.contractAddress.isZero() &&
+      this.callContext.isEmpty() &&
+      this.argsHash.isEmpty() &&
+      this.returnsHash.isEmpty() &&
+      this.revertCode.equals(RevertCode.OK) &&
+      this.startGasLeft.isEmpty() &&
+      this.endGasLeft.isEmpty()
+    );
+  }
+}

package/src/avm/public_data_update_request.ts

@@ -0,0 +1,106 @@
+import { Fr } from '@aztec/foundation/curves/bn254';
+import { BufferReader, FieldReader, serializeToBuffer } from '@aztec/foundation/serialize';
+
+import { inspect } from 'util';
+
+import type { AztecAddress } from '../aztec-address/index.js';
+import { computePublicDataTreeLeafSlot } from '../hash/hash.js';
+import type { ContractStorageUpdateRequest } from './contract_storage_update_request.js';
+
+// TO BE REMOVED.
+/**
+ * Write operations on the public data tree including the previous value.
+ */
+export class PublicDataUpdateRequest {
+  constructor(
+    /**
+     * Index of the leaf in the public data tree which is to be updated.
+     */
+    public readonly leafSlot: Fr,
+    /**
+     * New value of the leaf.
+     */
+    public readonly newValue: Fr,
+    /**
+     * Side effect counter tracking position of this event in tx execution.
+     */
+    public readonly sideEffectCounter: number,
+  ) {}
+
+  static from(args: {
+    /**
+     * Index of the leaf in the public data tree which is to be updated.
+     */
+    leafIndex: Fr;
+    /**
+     * New value of the leaf.
+     */
+    newValue: Fr;
+
+    /**
+     * Side effect counter tracking position of this event in tx execution.
+     */
+    sideEffectCounter: number;
+  }) {
+    return new PublicDataUpdateRequest(args.leafIndex, args.newValue, args.sideEffectCounter);
+  }
+
+  get counter() {
+    return this.sideEffectCounter;
+  }
+
+  get position() {
+    return this.leafSlot;
+  }
+
+  toBuffer() {
+    return serializeToBuffer(this.leafSlot, this.newValue, this.sideEffectCounter);
+  }
+
+  isEmpty() {
+    return this.leafSlot.isZero() && this.newValue.isZero();
+  }
+
+  static fromFields(fields: Fr[] | FieldReader) {
+    const reader = FieldReader.asReader(fields);
+    return new PublicDataUpdateRequest(reader.readField(), reader.readField(), reader.readU32());
+  }
+
+  static isEmpty(x: PublicDataUpdateRequest) {
+    return x.isEmpty();
+  }
+
+  equals(other: PublicDataUpdateRequest) {
+    return this.leafSlot.equals(other.leafSlot) && this.newValue.equals(other.newValue);
+  }
+
+  static fromBuffer(buffer: Buffer | BufferReader) {
+    const reader = BufferReader.asReader(buffer);
+    return new PublicDataUpdateRequest(Fr.fromBuffer(reader), Fr.fromBuffer(reader), reader.readNumber());
+  }
+
+  static async fromContractStorageUpdateRequest(
+    contractAddress: AztecAddress,
+    updateRequest: ContractStorageUpdateRequest,
+  ) {
+    const leafSlot = await computePublicDataTreeLeafSlot(contractAddress, updateRequest.storageSlot);
+
+    return new PublicDataUpdateRequest(leafSlot, updateRequest.newValue, updateRequest.counter);
+  }
+
+  static empty() {
+    return new PublicDataUpdateRequest(Fr.ZERO, Fr.ZERO, 0);
+  }
+
+  toFriendlyJSON() {
+    return `Leaf=${this.leafSlot.toFriendlyJSON()}: ${this.newValue.toFriendlyJSON()}, SideEffectCounter=${
+      this.sideEffectCounter
+    }`;
+  }
+
+  [inspect.custom]() {
+    return `PublicDataUpdateRequest { leafSlot: ${this.leafSlot.toFriendlyJSON()}, newValue: ${this.newValue.toFriendlyJSON()}, sideEffectCounter: ${
+      this.sideEffectCounter
+    } }`;
+  }
+}

package/src/avm/public_inner_call_request.ts

@@ -0,0 +1,85 @@
+import type { Fr } from '@aztec/foundation/curves/bn254';
+import { BufferReader, FieldReader, serializeToBuffer, serializeToFields } from '@aztec/foundation/serialize';
+import type { FieldsOf } from '@aztec/foundation/types';
+
+import { inspect } from 'util';
+
+import { PublicCallStackItemCompressed } from './public_call_stack_item_compressed.js';
+
+// TO BE REMOVED
+/**
+ * Represents a request to call a public function.
+ */
+export class PublicInnerCallRequest {
+  constructor(
+    public item: PublicCallStackItemCompressed,
+    /**
+     * The counter for this call request.
+     */
+    public counter: number,
+  ) {}
+
+  getSize() {
+    return this.isEmpty() ? 0 : this.toBuffer().length;
+  }
+
+  /**
+   * Serialize this as a buffer.
+   * @returns The buffer.
+   */
+  toBuffer() {
+    return serializeToBuffer(this.item, this.counter);
+  }
+
+  /**
+   * Deserialize this from a buffer.
+   * @param buffer - The bufferable type from which to deserialize.
+   * @returns The deserialized instance of PublicInnerCallRequest.
+   */
+  static fromBuffer(buffer: Buffer | BufferReader) {
+    const reader = BufferReader.asReader(buffer);
+    return new PublicInnerCallRequest(PublicCallStackItemCompressed.fromBuffer(reader), reader.readNumber());
+  }
+
+  /**
+   * Create PublicInnerCallRequest from a fields dictionary.
+   * @param fields - The dictionary.
+   * @returns A PublicInnerCallRequest object.
+   */
+  static from(fields: FieldsOf<PublicInnerCallRequest>): PublicInnerCallRequest {
+    return new PublicInnerCallRequest(...PublicInnerCallRequest.getFields(fields));
+  }
+
+  /**
+   * Serialize into a field array. Low-level utility.
+   * @param fields - Object with fields.
+   * @returns The array.
+   */
+  static getFields(fields: FieldsOf<PublicInnerCallRequest>) {
+    return [fields.item, fields.counter] as const;
+  }
+
+  toFields(): Fr[] {
+    return serializeToFields([this.item, this.counter]);
+  }
+
+  static fromFields(fields: Fr[] | FieldReader): PublicInnerCallRequest {
+    const reader = FieldReader.asReader(fields);
+    return new PublicInnerCallRequest(PublicCallStackItemCompressed.fromFields(reader), reader.readU32());
+  }
+
+  static empty() {
+    return new PublicInnerCallRequest(PublicCallStackItemCompressed.empty(), 0);
+  }
+
+  isEmpty(): boolean {
+    return this.item.isEmpty() && this.counter == 0;
+  }
+
+  [inspect.custom]() {
+    return `PublicInnerCallRequest {
+      item: ${this.item.toFields()}
+      counter: ${this.counter}
+    }`;
+  }
+}

package/src/aztec-address/index.ts

@@ -43,34 +43,64 @@ export class AztecAddress {
   static ZERO = new AztecAddress(Buffer.alloc(32, 0));
 
   /** Null msg sender address. Not part of the protocol contracts tree. */
-  static NULL_MSG_SENDER = AztecAddress.fromBigInt(NULL_MSG_SENDER_CONTRACT_ADDRESS);
+  static NULL_MSG_SENDER = AztecAddress.fromBigIntUnsafe(NULL_MSG_SENDER_CONTRACT_ADDRESS);
 
   static zero(): AztecAddress {
     return AztecAddress.ZERO;
   }
 
-  static fromField(fr: Fr) {
+  /**
+   * Builds an `AztecAddress` from a field **without checking it is a valid address** (the x-coordinate of a point on
+   * the Grumpkin curve, which is what lets it be encrypted to). Use {@link AztecAddress.isValid} to validate an
+   * untrusted one, or {@link AztecAddress.random} for valid test addresses.
+   */
+  static fromFieldUnsafe(fr: Fr) {
     return new AztecAddress(fr);
   }
 
+  /**
+   * Deserializes an `AztecAddress` from a buffer. It does **not** check the value is a valid Grumpkin-curve address
+   * (see {@link AztecAddress.isValid}); it is meant for reading addresses from already-validated serialized data. Use
+   * {@link AztecAddress.random} for valid test addresses.
+   */
   static fromBuffer(buffer: Buffer | BufferReader) {
     return new AztecAddress(fromBuffer(buffer, Fr));
   }
 
+  /**
+   * Deserializes an `AztecAddress` from a field reader. It does **not** check the value is a valid Grumpkin-curve
+   * address (see {@link AztecAddress.isValid}); it is meant for reading addresses from already-validated serialized
+   * data. Use {@link AztecAddress.random} for valid test addresses.
+   */
   static fromFields(fields: Fr[] | FieldReader) {
     const reader = FieldReader.asReader(fields);
     return new AztecAddress(reader.readField());
   }
 
-  static fromBigInt(value: bigint) {
+  /**
+   * Builds an `AztecAddress` from a bigint **without checking it is a valid address** (the x-coordinate of a point on
+   * the Grumpkin curve, which is what lets it be encrypted to). Use {@link AztecAddress.isValid} to validate an
+   * untrusted one, or {@link AztecAddress.random} for valid test addresses.
+   */
+  static fromBigIntUnsafe(value: bigint) {
     return new AztecAddress(new Fr(value));
   }
 
-  static fromNumber(value: number) {
+  /**
+   * Builds an `AztecAddress` from a number **without checking it is a valid address** (the x-coordinate of a point on
+   * the Grumpkin curve, which is what lets it be encrypted to). Use {@link AztecAddress.isValid} to validate an
+   * untrusted one, or {@link AztecAddress.random} for valid test addresses.
+   */
+  static fromNumberUnsafe(value: number) {
     return new AztecAddress(new Fr(value));
   }
 
-  static fromString(buf: string) {
+  /**
+   * Builds an `AztecAddress` from a hex string **without checking it is a valid address** (the x-coordinate of a
+   * point on the Grumpkin curve, which is what lets it be encrypted to). Use {@link AztecAddress.isValid} to
+   * validate an untrusted one, or {@link AztecAddress.random} for valid test addresses.
+   */
+  static fromStringUnsafe(buf: string) {
     return new AztecAddress(hexToBuffer(buf));
   }
 
@@ -89,7 +119,7 @@ export class AztecAddress {
     if (obj instanceof Buffer || Buffer.isBuffer(obj)) {
       return new AztecAddress(obj);
     }
-    return AztecAddress.fromString(obj);
+    return AztecAddress.fromStringUnsafe(obj);
   }
 
   /**

package/src/block/attestation_info.ts

@@ -60,9 +60,14 @@ export function getAttestationInfoFromPayload(
       return { address: attestation.address, status: 'provided-as-address' as const };
     }
 
-    // Try to recover address from signature
+    // Try to recover address from signature. Recover with default opts (no allowYParityAsV): a slot
+    // whose recovery byte is in yParity form (v ∈ {0, 1}) is judged invalid here, matching L1 proving
+    // (ValidatorSelectionLib.verifyAttestations → ECDSA.recover only accepts v ∈ {27, 28}). A malicious
+    // proposer that lands such a slot cannot have it silently treated as valid off-chain; it is routed to
+    // invalid-attestation and invalidated. The gossip receipt path (recoverCoordinationSigner) stays
+    // lenient with allowYParityAsV; A-1351 normalizes on pool ingress and before the L1 bundle.
     try {
-      const recoveredAddress = recoverAddress(hashedPayload, attestation.signature, { allowYParityAsV: true });
+      const recoveredAddress = recoverAddress(hashedPayload, attestation.signature);
       return { address: recoveredAddress, status: 'recovered-from-signature' as const };
     } catch {
       // Signature present but recovery failed