Command reference

All commands in the default sections avoid proof generation.

Build and test

cargo check --offline \
  -p settlement-program -p zkapp-script -p zeko_sp1_lib -p zeko-proof-api
cargo test --offline -p pickles-verifier
cargo test --offline -p settlement-program -p bridge-program \
  -p withdraw-program -p zeko_sp1_lib -p zeko-proof-api

(cd contracts && forge build --sizes && forge test -vv)
(cd docs && pnpm install --frozen-lockfile && pnpm build)

cargo fmt --all -- --check
git diff --check

Execute guests without proving

cargo run --release --bin zkapp -- --execute
cargo run --release --bin bridge -- --execute
cargo run --release --bin withdraw -- --execute

Use a genuine settlement fixture:

SETTLEMENT_VK_JSON="$PWD/fixtures/zeko-local-e2e/vk.serde.json" \
  cargo run --release --bin vkey

Local native bridge

tools/export-bridge-ocaml-fixtures.sh build/poc/bridge-fixtures
tools/run-live-sequencer-bridge-e2e.sh
tools/run-local-bridge-roundtrip.sh

The live-sequencer command uses real OCaml proving plus the Actions services and browser SDK, but performs no SP1 proving. The round-trip command adds local Ethereum custody, SP1 execution, settlement submission, and withdrawal claim.

Local ERC-20 bridge

tools/run-local-erc20-bridge-roundtrip.sh

This command creates two deterministic ERC-20 identities under one universal registry configuration, settles and activates their ordered record batch, deploys two unmodified Mina FungibleToken owner/admin pairs with a shared proof-authorized vault, and replays both deposits and withdrawals through Anvil custody. It uses the chain-ID-31337 mock verifier and does not request or generate an SP1 proof.

Run the standalone browser app:

cd bridge-ui
pnpm install --frozen-lockfile
pnpm dev

It listens on 127.0.0.1:5174 and reads public/runtime-config.json.

Quick contract-only checkpoint:

cd contracts
forge test --match-path test/NativeBridgePocE2E.t.sol -vv

Prepare deployment identity

Create the retained identities once:

tools/init-machine-testnet-identity.sh deploy/testnet

FORGE=$HOME/.foundry/bin/forge \
  tools/prepare-poc.sh \
    "$RPC_URL" "$ADMIN_ADDRESS" \
    build/poc/testnet-bridge-fixtures/deposit-sync build/poc-sepolia

This builds/derives program vkeys and writes the manifest. It does not prove.

Build and pin the machine-local runtime images:

tools/build-machine-images.sh \
  build/poc/testnet-bridge-fixtures/deposit-sync/vk.serde.json deploy/testnet

Read prover-network pricing

cargo run --release --bin network_quote -- --proof-system groth16
cargo run --release --bin network_quote -- \
  --proof-system groth16 --pgu "$MAX_PGU"

The command reads auction parameters and never creates a request. The current maximum quote is baseFee + maxPricePerPgu * PGU; obtain PGU from network simulation rather than substituting local executor cycles.

Testnet profile

tools/testnet-preflight.sh deploy/testnet
docker compose --env-file deploy/testnet/.env \
  -f deploy/testnet/compose.yaml up -d
docker compose --env-file deploy/testnet/.env \
  -f deploy/testnet/compose.yaml logs -f gateway sequencer prover

tools/machine-actions-services.sh start deploy/testnet
tools/machine-actions-services.sh status deploy/testnet

Inspect and approve a job

curl -H "x-api-key: $PROOF_API_KEY" \
  "$GATEWAY_URL/v1/proofs/$JOB_ID"

curl -H "x-api-key: $PROOF_API_KEY" \
  "$GATEWAY_URL/v1/proofs/$JOB_ID/quote?maxPgu=$MAX_PGU&maxPricePerPgu=$MAX_PRICE"

Approval is a paid-operation boundary. Use the reviewed command in proof jobs and approval, not an ad hoc request.