@moltium/world-core 0.1.2 → 0.1.4

package/lib/openzeppelin-contracts/certora/specs/AccessManaged.spec

@@ -0,0 +1,49 @@
+import "helpers/helpers.spec";
+import "methods/IAccessManaged.spec";
+
+methods {
+    // FV
+    function someFunction()                       external;
+    function authority_canCall_immediate(address) external returns (bool);
+    function authority_canCall_delay(address)     external returns (uint32);
+    function authority_getSchedule(address)       external returns (uint48);
+
+    // Summarization for external calls (cause havoc in isConsumingScheduledOpClean invariant):
+
+    // Called by AccessManager.updateAuthority() on target contracts. This modifies
+    // the target contract's authority but doesn't affect the AccessManager's _consumingSchedule state.
+    function _.setAuthority(address) external => NONDET;
+
+    // Called by AccessManaged._checkCanCall() to consume scheduled operations on the AccessManager.
+    // This function should complete successfully and only affect the AccessManager's internal state,
+    // not the _consumingSchedule state of the calling AccessManaged contract.
+    function _.consumeScheduledOp(address, bytes) external => NONDET;
+
+    // For unresolved external calls (like low-level target.call{value: value}(data))
+    // made via Address.functionCallWithValue in AccessManager.execute().
+    unresolved external in _._ => DISPATCH [] default NONDET;
+}
+
+invariant isConsumingScheduledOpClean()
+    isConsumingScheduledOp() == to_bytes4(0);
+
+rule callRestrictedFunction(env e) {
+    bool   immediate      = authority_canCall_immediate(e, e.msg.sender);
+    uint32 delay          = authority_canCall_delay(e, e.msg.sender);
+    uint48 scheduleBefore = authority_getSchedule(e, e.msg.sender);
+
+    someFunction@withrevert(e);
+    bool success = !lastReverted;
+
+    uint48 scheduleAfter  = authority_getSchedule(e, e.msg.sender);
+
+    // can only call if immediate, or (with delay) by consuming a scheduled op
+    assert success => (
+        immediate ||
+        (
+            delay > 0 &&
+            isSetAndPast(e, scheduleBefore) &&
+            scheduleAfter == 0
+        )
+    );
+}

package/lib/openzeppelin-contracts/certora/specs/AccessManager.conf

@@ -0,0 +1,10 @@
+{
+    "files": [
+        "certora/harnesses/AccessManagerHarness.sol"
+    ],
+    "optimistic_hashing": true,
+    "optimistic_loop": true,
+    "process": "emv",
+    "url_visibility": "public",
+    "verify": "AccessManagerHarness:certora/specs/AccessManager.spec"
+}