cartesi · GCdePaula · Sep 22, 2026 · Sep 9, 2026 · Sep 9, 2026 · Sep 11, 2026
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -24,6 +24,7 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y \
             faketime \
+            libclang-dev \
             libfaketime \
             lua5.4 \
             liblua5.4-dev \
@@ -62,6 +63,9 @@ jobs:
         timeout-minutes: 15
         run: cargo test --workspace --all-targets --all-features --locked
 
+      - name: C application archive and downstream consumer
+        run: bash scripts/ci-c-application-smoke.sh
+
   canonical-guest:
     runs-on: ubuntu-latest
     needs: rust
@@ -115,17 +119,17 @@ jobs:
           cartesi-machine-sha256-arm64: ${{ env.CARTESI_MACHINE_SHA256_ARM64 }}
           install-foundry: "true"
 
-      - name: Install faketime
+      - name: Install native test dependencies
         run: |
           sudo apt-get update
-          sudo apt-get install -y faketime libfaketime
+          sudo apt-get install -y faketime libfaketime libclang-dev
 
       - name: Build watchdog Lua deps
         run: |
           sudo apt-get install -y libcurl4-openssl-dev build-essential pkg-config
           just watchdog-lua-deps
 
-      - name: Run rollups E2E tests
+      - name: Run rollups E2E tests (Rust and C hosts)
         run: just test-rollups-e2e
 
       # Runs after the e2e step so the canonical machine image is already built;
@@ -134,6 +138,15 @@ jobs:
       - name: Watchdog Lua CM e2e
         run: just test-watchdog-e2e
 
+      - name: Upload E2E failure logs
+        if: ${{ failure() }}
+        uses: actions/upload-artifact@v6
+        with:
+          name: rollups-e2e-logs-${{ github.run_attempt }}
+          path: tests/e2e/results/*.log
+          retention-days: 7
+          if-no-files-found: ignore
+
   watchdog-docker:
     name: Watchdog Docker image smoke
     runs-on: ubuntu-latest

diff --git a/AGENTS.md b/AGENTS.md
diff --git a/CLAUDE.md b/CLAUDE.md
@@ -1,69 +1,7 @@
 # CLAUDE.md
 
-Quick reference for working in this repository. For the full guide — architecture, duality, recovery, invariants, threat model, and rules — read [`AGENTS.md`](AGENTS.md).
+Read [`AGENTS.md`](AGENTS.md) before working in this repository. It contains the
+shared mental model, safety constraints, and contribution rules for all agents.
 
-## Shell Environment
-
-This project uses Nix + direnv. Before running any command that needs project tools (Foundry, TLA+, etc.), activate the direnv environment:
-
-```bash
-eval "$(direnv export bash 2>/dev/null)"
-```
-
-This makes `anvil`, `forge`, `cast`, `tlc`, and other Nix-provided tools available. Cargo and rustc are available without direnv.
-
-## Commands
-
-```bash
-cargo check                                              # compile check
-cargo test --workspace --exclude canonical-test          # run tests (canonical-test needs libslirp)
-cargo fmt --all                                          # format
-cargo clippy --all-targets --all-features -- -D warnings # lint
-cargo test -p sequencer --lib                            # includes Anvil-backed tests (needs Foundry on PATH)
-```
-
-## What This Is
-
-Off-chain sequencer for an app-specific DeFi rollup. Accepts signed user operations, issues low-latency soft confirmations, and posts batches to L1. Currently backed by a placeholder wallet app (transfer, withdrawal). **Security-critical infrastructure** — handle every change accordingly.
-
-Rust edition 2024 / Axum API / SQLite (rusqlite, WAL) / EIP-712 signing / SSZ encoding.
-
-## Workspace Layout
-
-- `sequencer/` — sequencer library (no binary; app crates build the binary).
-- `sequencer-core/` — shared domain types consumed by both sequencer and scheduler.
-- `examples/app-core/` — placeholder wallet app implementing `Application`.
-- `examples/wallet-sequencer/` — binary crate: wallet app + sequencer library.
-- `examples/canonical-app/` — on-chain scheduler reference implementation.
-- `examples/canonical-test/` — e2e test harness for the canonical app.
-- `sdk/rust-client/` — Rust client library for the sequencer API.
-- `tests/{benchmarks,e2e,harness}/` — test infrastructure.
-
-## Sequencer Module Layout
-
-`sequencer/src/` is organized by writer role; `storage/<role>.rs` holds each role's storage half.
-
-- `commands/` — the operator command brackets (`run/` plus its worker
-  supervisor, `setup/`, `flush`) and their command-scoped `config` and
-  `error` taxonomy (incl. exit-code projection).
-- `runtime/` — the runtime authority capabilities, consumed crate-wide:
-  the exclusive process lock and the runtime scope/shutdown machinery.
-- `ingress/` — public-facing: `api.rs` (`POST /tx`, `GET /fee`) + `inclusion_lane/` (hot path).
-- `egress/` — internal read path: `api/` (WS subscribe + health) + `l2_tx_feed/`.
-- `l1/` — reader, submitter, fee oracle, provider, partition helper.
-- `recovery/` — startup preemptive-recovery procedure, runtime danger detector, mempool flusher.
-- `storage/` — SQLite persistence, split per writer role.
-- `http.rs` — shared HTTP error type + `axum::serve` orchestration; `clock.rs` — the crate-wide wall clock.
-
-## Before You Start Real Work
-
-- **[`AGENTS.md`](AGENTS.md)** — mission, requirements, invariants, duality, recovery, conventions, rules.
-- **[`docs/protocol/`](docs/protocol/)** — the authoritative protocol contracts: [`scheduler-semantics.md`](docs/protocol/scheduler-semantics.md) (canonical acceptance algorithm) and [`application-contract.md`](docs/protocol/application-contract.md) (the `Application` FFI trait). Read before touching the scheduler, the gold frontier, the fold, or an `Application` impl.
-- **[`docs/invariants.md`](docs/invariants.md)** — cross-module invariants register + the fail-loud check policy. Check it before changing anything it lists as load-bearing.
-- **[`docs/review/register.md`](docs/review/register.md)** — the review register: open findings, settled decisions, refuted proposals (do-not-re-propose). Check it for open findings in code you're about to touch, and before proposing a mechanism or simplification.
-- **[`docs/plans/`](docs/plans/)** — the [authority-boundary ADR](docs/plans/2026-08-authority-boundary-adr.md), active coordination tracks, and in-flight design handoffs. Check before starting work that might belong to a track.
-- **[`docs/threat-model/README.md`](docs/threat-model/README.md)** — trust boundaries and in-scope threats.
-- **[`docs/recovery/README.md`](docs/recovery/README.md)** — preemptive recovery design + TLA+ proofs.
-- **[`docs/snapshots/lifecycle.md`](docs/snapshots/lifecycle.md)** — snapshot lifecycle design + invariants (take/promote/GC, crash-safety). Read before touching the inclusion lane's safe-frontier/snapshot path.
-- **[`docs/watchdog/operator-deployment.md`](docs/watchdog/operator-deployment.md)** — watchdog on live L1 (Sepolia / mainnet, production-like).
-- **[`docs/watchdog/getting-started.md`](docs/watchdog/getting-started.md)** — local dev: watchdog + `sequencer-devnet` on Anvil.
+- [Shell and commands](AGENTS.md#shell-and-commands) — toolchain selection and validation commands.
+- [Reading routes](AGENTS.md#reading-routes) — the contracts to read for the work at hand.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -4,10 +4,14 @@ members = [
   "sequencer",
   "sequencer-core",
   "sdk/rust-client",
+  "bindings/c-app-engine",
+  "bindings/c-app-sequencer",
   "examples/app-core",
   "examples/canonical-app",
   "examples/canonical-test",
   "examples/wallet-sequencer",
+  "examples/c-wallet-engine",
+  "examples/c-wallet-sequencer",
   "tests/benchmarks",
   "tests/harness",
   "tests/e2e",