feat: native Zig verifier foundation #64

Workflow file for this run

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	workflow_dispatch:
	inputs:
	run_extended_proofs:
	description: "Run extended proof jobs (sha256_128)"
	required: false
	type: boolean
	default: false
	run_csp_benchmarks:
	description: "Run CSP benchmarks (SHA-256)"
	required: false
	type: boolean
	default: false

	# Cancel in-progress runs for the same PR/branch
	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	env:
	ZIG_VERSION: "0.15.2"

	jobs:
	# ─── Zig: format check ───────────────────────────────────────────
	zig-fmt:
	name: Zig Format Check
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: mlugg/setup-zig@v2
	with:
	version: ${{ env.ZIG_VERSION }}
	- name: Check formatting
	run: zig build fmt -- --check

	# ─── Zig: tests (Linux) ─────────────────────────────────────────
	# ReleaseSafe because x86 LLVM carry/borrow intrinsics don't link in Debug
	zig-test-linux:
	name: Zig Tests (Linux x86_64)
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: mlugg/setup-zig@v2
	with:
	version: ${{ env.ZIG_VERSION }}
	- name: Run tests
	run: zig build test -Doptimize=ReleaseSafe

	# ─── Zig: tests (macOS ARM) ─────────────────────────────────────
	zig-test-macos:
	name: Zig Tests (macOS ARM64)
	runs-on: macos-15
	steps:
	- uses: actions/checkout@v4
	- name: Verify ARM64
	run: test "$(uname -m)" = "arm64"
	- uses: mlugg/setup-zig@v2
	with:
	version: ${{ env.ZIG_VERSION }}
	- name: Run tests
	run: zig build test

	# ─── Zig: release build ─────────────────────────────────────────
	zig-release-build:
	name: Zig Release Build
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: mlugg/setup-zig@v2
	with:
	version: ${{ env.ZIG_VERSION }}
	- name: Build in ReleaseFast mode
	run: zig build -Doptimize=ReleaseFast

	# ─── Metal shaders (macOS only) ─────────────────────────────────
	metal-shaders:
	name: Metal Shaders (macOS ARM64)
	runs-on: macos-15
	steps:
	- uses: actions/checkout@v4
	- name: Verify ARM64
	run: test "$(uname -m)" = "arm64"
	- uses: mlugg/setup-zig@v2
	with:
	version: ${{ env.ZIG_VERSION }}
	- name: Build Metal shaders
	run: zig build metal-shaders

	# ─── Rust: verifier build ───────────────────────────────────────
	rust-verifier:
	name: Rust Verifier (build check)
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: dtolnay/rust-toolchain@stable
	- uses: Swatinem/rust-cache@v2
	with:
	workspaces: jolt-verifier
	- name: Build
	run: cargo build --manifest-path jolt-verifier/Cargo.toml

	# ─── Rust: bench build ─────────────────────────────────────────
	rust-bench:
	name: Rust Bench (build check)
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: dtolnay/rust-toolchain@stable
	- uses: Swatinem/rust-cache@v2
	with:
	workspaces: jolt-bench
	- name: Build
	run: cargo build --manifest-path jolt-bench/Cargo.toml

	# ─── CLI smoke test ──────────────────────────────────────────────
	cli-smoke:
	name: CLI Smoke Test
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: mlugg/setup-zig@v2
	with:
	version: ${{ env.ZIG_VERSION }}
	- name: Build CLI
	run: zig build -Doptimize=ReleaseFast
	- name: zolt run fibonacci
	run: ./zig-out/bin/zolt run examples/fibonacci.elf
	- name: zolt run factorial
	run: ./zig-out/bin/zolt run examples/factorial.elf

	# ─── Prove + Verify (Linux) ─────────────────────────────────────
	prove-verify-linux:
	name: Prove + Verify (Linux x86_64)
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: mlugg/setup-zig@v2
	with:
	version: ${{ env.ZIG_VERSION }}
	- uses: dtolnay/rust-toolchain@stable
	- uses: Swatinem/rust-cache@v2
	with:
	workspaces: jolt-verifier
	- name: Build Zolt
	run: zig build -Doptimize=ReleaseFast
	- name: Build Rust verifier
	run: cargo build --release --manifest-path jolt-verifier/Cargo.toml
	- name: Prove (sum.elf)
	run: ./zig-out/bin/zolt prove -o proof.bin --export-preprocessing preprocessing.bin examples/sum.elf
	- name: Verify with Jolt verifier
	run: ./jolt-verifier/target/release/jolt-verifier --proof proof.bin --preprocessing preprocessing.bin

	# ─── Prove + Verify (macOS ARM) ─────────────────────────────────
	prove-verify-macos:
	name: Prove + Verify (macOS ARM64)
	runs-on: macos-15
	steps:
	- uses: actions/checkout@v4
	- name: Verify ARM64
	run: test "$(uname -m)" = "arm64"
	- uses: mlugg/setup-zig@v2
	with:
	version: ${{ env.ZIG_VERSION }}
	- uses: dtolnay/rust-toolchain@stable
	- uses: Swatinem/rust-cache@v2
	with:
	workspaces: jolt-verifier
	- name: Build Zolt
	run: zig build -Doptimize=ReleaseFast
	- name: Build Rust verifier
	run: cargo build --release --manifest-path jolt-verifier/Cargo.toml
	- name: Prove (sum.elf)
	run: ./zig-out/bin/zolt prove -o proof.bin --export-preprocessing preprocessing.bin examples/sum.elf
	- name: Verify with Jolt verifier
	run: ./jolt-verifier/target/release/jolt-verifier --proof proof.bin --preprocessing preprocessing.bin

	# ─── Extended: Prove + Verify sha256_128 (Linux) ─────────────────
	prove-sha256-linux:
	name: "Extended: Prove sha256_128 (Linux)"
	if: github.event_name == 'workflow_dispatch' && inputs.run_extended_proofs
	runs-on: ubuntu-latest
	timeout-minutes: 30
	steps:
	- uses: actions/checkout@v4
	- uses: mlugg/setup-zig@v2
	with:
	version: ${{ env.ZIG_VERSION }}
	- uses: dtolnay/rust-toolchain@stable
	- uses: Swatinem/rust-cache@v2
	with:
	workspaces: jolt-verifier
	- name: Build Zolt
	run: zig build -Doptimize=ReleaseFast
	- name: Build Rust verifier
	run: cargo build --release --manifest-path jolt-verifier/Cargo.toml
	- name: Prove (sha256_128.elf)
	run: ./zig-out/bin/zolt prove -o proof.bin --export-preprocessing preprocessing.bin examples/sha256_128.elf
	- name: Verify with Jolt verifier
	run: ./jolt-verifier/target/release/jolt-verifier --proof proof.bin --preprocessing preprocessing.bin

	# ─── Extended: Prove + Verify sha256_128 (macOS) ─────────────────
	prove-sha256-macos:
	name: "Extended: Prove sha256_128 (macOS ARM64)"
	if: github.event_name == 'workflow_dispatch' && inputs.run_extended_proofs
	runs-on: macos-15
	timeout-minutes: 30
	steps:
	- uses: actions/checkout@v4
	- name: Verify ARM64
	run: test "$(uname -m)" = "arm64"
	- uses: mlugg/setup-zig@v2
	with:
	version: ${{ env.ZIG_VERSION }}
	- uses: dtolnay/rust-toolchain@stable
	- uses: Swatinem/rust-cache@v2
	with:
	workspaces: jolt-verifier
	- name: Build Zolt
	run: zig build -Doptimize=ReleaseFast
	- name: Build Rust verifier
	run: cargo build --release --manifest-path jolt-verifier/Cargo.toml
	- name: Prove (sha256_128.elf)
	run: ./zig-out/bin/zolt prove -o proof.bin --export-preprocessing preprocessing.bin examples/sha256_128.elf
	- name: Verify with Jolt verifier
	run: ./jolt-verifier/target/release/jolt-verifier --proof proof.bin --preprocessing preprocessing.bin

	# ─── zolt-arith: differential fixture tests ────────────────────
	zolt-arith-diff:
	name: Differential Fixture Tests
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: mlugg/setup-zig@v2
	with:
	version: ${{ env.ZIG_VERSION }}
	- uses: dtolnay/rust-toolchain@stable
	- uses: Swatinem/rust-cache@v2
	with:
	workspaces: tools/zolt-arith-diff/arkworks-fixtures
	- name: Run differential tests
	run: zig build test-zolt-arith-diff -Doptimize=ReleaseSafe

	# ─── zolt-arith: fixture freshness check ──────────────────────
	zolt-arith-fixture-freshness:
	name: Fixture Freshness Check
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: dtolnay/rust-toolchain@stable
	- uses: Swatinem/rust-cache@v2
	with:
	workspaces: tools/zolt-arith-diff/arkworks-fixtures
	- name: Regenerate fixtures
	run: cargo run --release --manifest-path tools/zolt-arith-diff/arkworks-fixtures/Cargo.toml -- --out-dir testdata/zolt-arith-diff
	- name: Check for drift
	run: git diff --exit-code testdata/zolt-arith-diff/

	# ─── zolt-arith: benchmark reporting (non-blocking) ───────────
	zolt-arith-bench:
	name: Arithmetic Benchmarks
	runs-on: macos-15
	steps:
	- uses: actions/checkout@v4
	- name: Verify ARM64
	run: test "$(uname -m)" = "arm64"
	- uses: mlugg/setup-zig@v2
	with:
	version: ${{ env.ZIG_VERSION }}
	- name: Field microbench
	run: zig build bench-zolt-arith-field 2>&1 \| tee field_bench.txt
	- name: Pairing microbench
	run: zig build bench-zolt-arith-pairing 2>&1 \| tee pairing_bench.txt
	- name: Post benchmark summary
	run: \|
	echo "## Benchmark Results" >> $GITHUB_STEP_SUMMARY
	echo '```' >> $GITHUB_STEP_SUMMARY
	grep '\[BENCH\]' field_bench.txt pairing_bench.txt >> $GITHUB_STEP_SUMMARY \|\| true
	echo '```' >> $GITHUB_STEP_SUMMARY

	# ─── CSP Benchmarks: SHA-256 (non-blocking) ─────────────────────
	csp-benchmarks:
	name: CSP Benchmarks (SHA-256)
	if: github.event_name == 'workflow_dispatch' && inputs.run_csp_benchmarks
	runs-on: macos-15
	timeout-minutes: 30
	steps:
	- uses: actions/checkout@v4
	with:
	path: zolt
	- name: Verify ARM64
	run: test "$(uname -m)" = "arm64"
	- uses: actions/checkout@v4
	with:
	repository: MatteoMer/csp-benchmarks
	ref: feat/add-zolt-bench
	path: csp-benchmarks
	- uses: mlugg/setup-zig@v2
	with:
	version: ${{ env.ZIG_VERSION }}
	- uses: dtolnay/rust-toolchain@stable
	- uses: Swatinem/rust-cache@v2
	with:
	workspaces: csp-benchmarks
	- name: Run SHA-256 benchmarks (test mode)
	env:
	ZOLT_DIR: ${{ github.workspace }}/zolt
	BENCH_INPUT_PROFILE: reduced
	working-directory: csp-benchmarks/zolt-bench
	run: cargo bench --bench sha256 -- --test
	- name: Post benchmark summary
	if: always()
	run: \|
	echo "## CSP Benchmark Metrics (SHA-256)" >> $GITHUB_STEP_SUMMARY
	for f in csp-benchmarks/zolt-bench/sha256_*_zolt_metrics.json; do
	if [ -f "$f" ]; then
	echo "### $(basename "$f" .json)" >> $GITHUB_STEP_SUMMARY
	echo '```json' >> $GITHUB_STEP_SUMMARY
	cat "$f" >> $GITHUB_STEP_SUMMARY
	echo '```' >> $GITHUB_STEP_SUMMARY
	fi
	done
	- uses: actions/upload-artifact@v4
	if: always()
	with:
	name: csp-benchmark-metrics
	path: csp-benchmarks/zolt-bench/sha256__zolt_.json
	if-no-files-found: ignore

	# ─── Gate: all required checks must pass ─────────────────────────
	ci-pass:
	name: CI Pass
	if: always()
	needs:
	- zig-fmt
	- zig-test-linux
	- zig-test-macos
	- zig-release-build
	- metal-shaders
	- rust-verifier
	- rust-bench
	- cli-smoke
	- prove-verify-linux
	- prove-verify-macos
	- zolt-arith-diff
	- zolt-arith-fixture-freshness
	runs-on: ubuntu-latest
	steps:
	- name: Check all jobs
	run: \|
	results=(
	"${{ needs.zig-fmt.result }}"
	"${{ needs.zig-test-linux.result }}"
	"${{ needs.zig-test-macos.result }}"
	"${{ needs.zig-release-build.result }}"
	"${{ needs.metal-shaders.result }}"
	"${{ needs.rust-verifier.result }}"
	"${{ needs.rust-bench.result }}"
	"${{ needs.cli-smoke.result }}"
	"${{ needs.prove-verify-linux.result }}"
	"${{ needs.prove-verify-macos.result }}"
	"${{ needs.zolt-arith-diff.result }}"
	"${{ needs.zolt-arith-fixture-freshness.result }}"
	)
	for r in "${results[@]}"; do
	if [[ "$r" != "success" ]]; then
	echo "One or more CI jobs failed"
	exit 1
	fi
	done
	echo "All CI checks passed"

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: native Zig verifier foundation #64

Workflow file

feat: native Zig verifier foundation #64

Uh oh!

Workflow file for this run