feat: add ASM STF guest code and prover perf tooling (#9)

* feat: add ASM STF guest code

* refactor(proof-impl): create a separate module for test utils

* feat(prover-perf): create a new binary for guest code performance

* ci(prover-perf): add prover workflow and just recipes for profiling

* fix lints

* fix: avoid running tests and docs for prover-perf

* fix(ci): post report on CI

* doc: add comment to fix the hardcoded spec

Author: prajwolrg

.cargo/audit.toml

@@ -1,9 +1,9 @@
 [advisories]
 ignore = [
-    # NOTE: cargo-audit reads config from .cargo/audit.toml.
-    # RUSTSEC-2025-0055 (tracing-subscriber 0.2.25)
-    # Pulled in via ark-relations.
-    # Upgrade blocked until upstream bumps tracing-subscriber >= 0.3.20.
-    # Low risk: affects ANSI escape sequences in logs only.
-    "RUSTSEC-2025-0055",
+  # NOTE: cargo-audit reads config from .cargo/audit.toml.
+  # RUSTSEC-2025-0055 (tracing-subscriber 0.2.25)
+  # Pulled in via ark-relations.
+  # Upgrade blocked until upstream bumps tracing-subscriber >= 0.3.20.
+  # Low risk: affects ANSI escape sequences in logs only.
+  "RUSTSEC-2025-0055",
 ]

.github/workflows/prover.yml

@@ -0,0 +1,71 @@
+name: Prover
+
+on:
+  pull_request:
+  merge_group:
+  push:
+    branches: [main]
+
+env:
+  CARGO_TERM_COLOR: always
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+permissions: {}
+
+jobs:
+  prover-perf:
+    name: Run prover-perf (SP1)
+    runs-on: ubuntu-latest
+    timeout-minutes: 120
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
+        with:
+          persist-credentials: false
+
+      - name: Install Rust toolchain
+        run: |
+          RUST_TOOLCHAIN="$(sed -n 's/^channel = "\(.*\)"/\1/p' rust-toolchain.toml)"
+          rustup toolchain install "$RUST_TOOLCHAIN" --profile minimal
+          rustup default "$RUST_TOOLCHAIN"
+
+      - name: Rust cache
+        uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
+        with:
+          cache-on-failure: true
+
+      - name: Install SP1 Toolchain
+        run: |
+          curl -fsSL --proto '=https' --tlsv1.2 https://sp1.succinct.xyz | bash
+          ~/.sp1/bin/sp1up
+          echo "$HOME/.sp1/bin" >> "$GITHUB_PATH"
+
+      - name: Check SP1 toolchain
+        run: cargo prove --version
+
+      - name: Run prover-perf and post PR comment
+        if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork == false
+        env:
+          ZKVM_MOCK: "1"
+          ZKVM_PROFILING: "1"
+        run: |
+          cargo run --release -p strata-asm-prover-perf -- \
+            --post-to-gh \
+            --github-token "${{ secrets.GITHUB_TOKEN }}" \
+            --pr-number "${{ github.event.pull_request.number }}" \
+            --commit-hash "${{ github.sha }}" \
+            --github-repo "${{ github.repository }}" \
+            --programs asm-stf
+
+      - name: Run prover-perf
+        if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.fork == true
+        env:
+          ZKVM_MOCK: "1"
+          ZKVM_PROFILING: "1"
+        run: cargo run --release -p strata-asm-prover-perf -- --programs asm-stf

.justfile

@@ -1,3 +1,7 @@
+# Prover perf variables
+prover_perf_eval_dir := "bin/prover-perf"
+prover_programs := "asm-stf"
+
 # List all the available commands
 default:
   just --list
@@ -63,3 +67,11 @@ audit:
 # Check GitHub Actions security analysis with `zizmor`
 check-github-actions-security:
   zizmor .
+
+# Generate reports and profiling data for proofs
+prover-eval: prover-clean
+  cd {{prover_perf_eval_dir}} && RUST_LOG=info ZKVM_MOCK=1 ZKVM_PROFILING=1 cargo run --release -- --programs {{prover_programs}}
+
+# Cleans up profiling data generated by prover eval
+prover-clean:
+  rm -rf {{prover_perf_eval_dir}}/*.trace