Add Certora specs

.github/workflows/certora.yml

@@ -0,0 +1,47 @@
+name: Certora
+
+on: [push, pull_request]
+
+jobs:
+  certora:
+    name: Certora
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        pas:
+          - state
+          - configurator
+          - timelock
+          - mom
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+
+      - uses: actions/setup-java@v2
+        with:
+          distribution: 'zulu'
+          java-version: '11'
+          java-package: jre
+
+      - name: Set up Python 3.13
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
+
+      - name: Install solc-select
+        run: pip3 install solc-select
+
+      - name: Solc Select 0.8.24
+        run: solc-select install 0.8.24
+
+      - name: Install Certora
+        run: pip3 install certora-cli-beta
+
+      - name: Verify ${{ matrix.pas }}
+        run: make certora-${{ matrix.pas }} results=1
+        env:
+          CERTORAKEY: ${{ secrets.CERTORAKEY }}

.gitignore

@@ -12,3 +12,6 @@ docs/
 
 # Dotenv file
 .env
+
+# Certora
+.certora_internal

Makefile

@@ -0,0 +1,5 @@
+PATH := ~/.solc-select/artifacts/solc-0.8.24:$(PATH)
+certora-state        :; PATH=${PATH} certoraRun certora/BeamState.conf$(if $(rule), --rule $(rule),)$(if $(results), --wait_for_results all,)
+certora-configurator :; PATH=${PATH} certoraRun certora/Configurator.conf$(if $(rule), --rule $(rule),)$(if $(results), --wait_for_results all,)
+certora-timelock     :; PATH=${PATH} certoraRun certora/Timelock.conf$(if $(rule), --rule $(rule),)$(if $(results), --wait_for_results all,)
+certora-mom          :; PATH=${PATH} certoraRun certora/PASMom.conf$(if $(rule), --rule $(rule),)$(if $(results), --wait_for_results all,)

certora/BeamState.conf

@@ -0,0 +1,14 @@
+{
+    "files": [
+        "src/BeamState.sol"
+    ],
+    "verify": "BeamState:certora/BeamState.spec",
+    "solc": "solc-0.8.24",
+    "solc_optimize": "200",
+    "solc_evm_version": "cancun",
+    "optimistic_loop": true,
+    "rule_sanity": "basic",
+    "multi_assert_check": true,
+    "optimistic_hashing": true,
+    "msg": "BeamState"
+}