[rushikeshgarad2024-dev]

Summary

Closes the ZK-065 acceptance criteria by introducing a CI workflow that runs the full ZK validation stack from a clean checkout, with no frontend or contract-deployment dependencies.

Wave Issue Key: ZK-065

---

What was implemented

.github/workflows/zk-full-validation.yml

A four-job workflow that triggers on push to main and on any PR touching circuits/, sdk/, artifacts/zk/, scripts/, or the workflow file itself.

Job	What it does
zk-nargo-tests	Installs Nargo via noirup, validates manifest.json exists, runs nargo test for commitment, merkle, and withdraw circuits
zk-sdk-tests	Sets up Node 20, npm ci in sdk/, runs full Jest suite (npm test), runs scripts/zk/zk-proof-smoke.mjs
zk-artifact-drift	Recompiles all circuits with nargo compile, copies outputs back to artifacts/zk/, runs git diff; a non-empty diff fails the build
zk-manifest-validation	Validates manifest.json schema (version, backend, circuit entries with sha256 + path), asserts commitment_vectors.json is present

A final zk-validation-summary gate job aggregates results and prints a human-readable status table.

scripts/zk-full-validation-local.sh

Shell script for local reproduction with flags mirroring each CI job:

# Run all checks (mirrors full CI pipeline)
bash scripts/zk-full-validation-local.sh

# Rebuild artifacts then validate
bash scripts/zk-full-validation-local.sh --rebuild

# Individual checks
bash scripts/zk-full-validation-local.sh --nargo
bash scripts/zk-full-validation-local.sh --sdk
bash scripts/zk-full-validation-local.sh --drift
bash scripts/zk-full-validation-local.sh --manifest

---

Acceptance criteria checklist

• CI runs the full ZK validation stack from a clean checkout
• Runs Nargo tests, SDK ZK tests, artifact rebuild checks, and manifest validation
• Artifact drift is detected automatically (dirty artifact diff fails the build)
• A contributor can reproduce the same checks locally with scripted commands (scripts/zk-full-validation-local.sh)
• Keeps ZK tasks scoped without depending on frontend or contract deployment