[gbolly122]

Summary

Adds a fail-closed budget gate for the canonical V2 operations: claim, commit, reveal, dispute, appeal, settlement, rewards, governance and pause.

• config/contract-budgets.json: reviewed per-operation gas ceiling, ABI calldata model, worst-case scenario, Optimism fee context (no price promises) and reviewed overrides.
• config/contract-budget-baseline.json: last reviewed values. Any increase needs a matching override with rationale and reviewer; stale overrides fail.
• scripts/check-contract-budgets.mjs: enforces gas ceilings against gas-budgets.json, derives worst-case calldata from the declared bounds (oversized-calldata boundary and policy cap), checks size budgets stay within EIP-170, and writes evidence (commit, input SHA-256, toolchain pins) to deployments/releases/contract-budget-evidence.json.
• CI step plus evidence artifact upload; docs/CONTRACT_BUDGETS.md documents the process.

No storage layout, role, pause, upgrade or economic behavior is changed.

Testing

node --test test/scripts/check-contract-budgets.test.mjs (11 tests: missing operation, gas over budget, oversized calldata, unknown bound, size over network limit, unexplained regression, explicit budget override, stale override, missing baseline) and node scripts/check-contract-budgets.mjs both pass locally.

Not covered

I did not run Foundry or Hardhat locally. Measured gas per operation still comes from the existing Foundry scenario snapshots (check:gas:sc064); this gate checks the reviewed budgets and derived bounds offline.

Closes #684

🤖 Generated with Claude Code

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Source mode: Auto
• Repository: DigiNodes/truthbounty-contract
• Branch: main
• File: .coderabbit.yaml
• Commit: b4d4f0d
• Layers: Repository YAML
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 1a9686b2-df2f-48e8-ab41-eb6865d27484

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}