feat: Add RustChain Mining Simulator (Bounty #2301)

.env.example

@@ -53,3 +53,16 @@ LOG_LEVEL=INFO
 # === Security ===
 # Set to 'true' to run container as non-root user
 RUN_AS_NON_ROOT=true
+
+# === GitHub Tip Bot Configuration ===
+# Payout wallet address for bounty distributions
+TIP_BOT_WALLET=RTC1d48d848a5aa5ecf2c5f01aa5fb64837daaf2f35
+
+# Comma-separated list of admin usernames (optional)
+TIP_BOT_ADMINS=
+
+# Set to 'true' to enable dry-run mode (no actual payouts)
+TIP_BOT_DRY_RUN=false
+
+# GitHub token for API access (auto-provided in Actions)
+# GITHUB_TOKEN=

.env.miner.example

@@ -0,0 +1,3 @@
+WALLET_NAME=RTC_your_wallet_id_here
+NODE_URL=https://rustchain.org
+BLOCK_TIME=600

.gitattributes

@@ -0,0 +1,102 @@
+# =============================================================================
+# RustChain Git Attributes
+# =============================================================================
+# File size and diff settings for media assets
+# =============================================================================
+
+# Asciinema recordings (text-based, keep in repo)
+*.cast text
+docs/asciinema/*.cast text
+
+# SVG files (text-based, good for version control)
+*.svg text
+docs/assets/*.svg text
+docs/media/*.svg text
+
+# GIF files (binary, track but don't diff)
+*.gif binary
+docs/asciinema/*.gif -diff
+docs/assets/*.gif -diff
+docs/media/*.gif -diff
+
+# PNG files (binary, track but don't diff)
+*.png binary
+docs/assets/*.png -diff
+docs/media/*.png -diff
+docs/*.png -diff
+
+# Large media files (warn on commit)
+*.mp4 binary
+*.mov binary
+*.avi binary
+*.mkv binary
+
+# PDF documentation (binary)
+*.pdf binary
+docs/*.pdf -diff
+docs/whitepaper/*.pdf -diff
+
+# Audio files (binary)
+*.wav binary
+*.mp3 binary
+*.ogg binary
+docs/media/*.wav -diff
+docs/media/*.mp3 -diff
+
+# Font files (binary)
+*.woff binary
+*.woff2 binary
+*.ttf binary
+*.eot binary
+
+# Archive files (typically should be in .gitignore)
+*.zip binary
+*.tar binary
+*.gz binary
+*.7z binary
+*.rar binary
+
+# =============================================================================
+# Line ending normalization
+# =============================================================================
+
+# Set default behavior to automatically normalize text files
+* text=auto
+
+# Explicitly declare source code files as text
+*.sh text eol=lf
+*.py text eol=lf
+*.js text eol=lf
+*.ts text eol=lf
+*.jsx text eol=lf
+*.tsx text eol=lf
+*.html text eol=lf
+*.css text eol=lf
+*.scss text eol=lf
+*.md text eol=lf
+*.json text eol=lf
+*.yaml text eol=lf
+*.yml text eol=lf
+*.toml text eol=lf
+*.xml text eol=lf
+*.ini text eol=lf
+*.env text eol=lf
+*.txt text eol=lf
+*.rst text eol=lf
+
+# Shell scripts should always use LF
+*.sh text eol=lf
+
+# Windows batch files should use CRLF
+*.bat text eol=crlf
+*.cmd text eol=crlf
+
+# =============================================================================
+# Export settings (for git archive)
+# =============================================================================
+
+# Exclude development files from git archive
+.gitattributes export-ignore
+.gitignore export-ignore
+scripts/asciinema/ export-ignore
+docs/asciinema/*.cast export-ignore

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Bounty Claim or Proof Submission
+    url: https://github.com/Scottcjn/rustchain-bounties/issues/new?template=bounty-proof.yml
+    about: Use rustchain-bounties for completed work, marketing proof, install reports, merged PR payout requests, and other claim evidence.
+  - name: Wallet Registration or Payout Target
+    url: https://github.com/Scottcjn/rustchain-bounties/issues/new?template=wallet-registration.yml
+    about: Register your RTC wallet or payout target in rustchain-bounties, not in Rustchain issues.
+  - name: Create a New RTC Bounty
+    url: https://github.com/Scottcjn/rustchain-bounties/issues/new?template=bounty.yml
+    about: Open new bounty definitions in rustchain-bounties.

.github/ISSUE_TEMPLATE/security-report.yml

@@ -0,0 +1,84 @@
+name: Security Report
+description: Report a security, abuse, or payout-integrity issue in RustChain
+title: "[Security] "
+labels: [bug]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        ## Report a Security Issue
+        Use this form for security-sensitive bugs, abuse vectors, payout integrity problems, or consensus bypasses.
+
+        Do **not** use this form for bounty claims, wallet registration, or generic support.
+        Do **not** paste private keys, admin keys, tokens, or live secrets into this issue.
+
+  - type: dropdown
+    id: area
+    attributes:
+      label: Affected area
+      options:
+        - API / request validation
+        - Wallet / transfer / signing
+        - Miner enrollment / attestation
+        - Consensus / fleet detection
+        - Explorer / public data exposure
+        - Infrastructure / deployment
+        - Other
+    validations:
+      required: true
+
+  - type: dropdown
+    id: severity
+    attributes:
+      label: Severity
+      options:
+        - Low
+        - Medium
+        - High
+        - Critical
+    validations:
+      required: true
+
+  - type: textarea
+    id: impact
+    attributes:
+      label: Impact
+      description: What can an attacker, abusive miner, or malicious client accomplish?
+      placeholder: A malformed payload can trigger a 500 and leak internal behavior...
+    validations:
+      required: true
+
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Reproduction steps
+      description: Provide the smallest reproducible example you can.
+      placeholder: |
+        1. Send POST /attest/submit with ...
+        2. Observe ...
+        3. Expected ...
+    validations:
+      required: true
+
+  - type: textarea
+    id: affected_versions
+    attributes:
+      label: Affected versions / environments
+      description: Include commit, branch, deployed node, or release if known.
+      placeholder: main at commit abc123, node 50.28.86.131, v1.0.0-miner
+
+  - type: textarea
+    id: mitigation
+    attributes:
+      label: Suggested mitigation
+      description: Optional, but useful if you already know the likely fix.
+
+  - type: checkboxes
+    id: checklist
+    attributes:
+      label: Checklist
+      options:
+        - label: I did not include secrets, private keys, or unpublished credentials.
+          required: true
+        - label: This is not a bounty claim or wallet registration request.
+          required: true

.github/actions/mining-status-badge/action.yml

@@ -4,7 +4,6 @@ author: Scottcjn
 branding:
   icon: cpu
   color: blue
-
 inputs:
   wallet:
     description: RustChain wallet identifier for /api/badge/{wallet}
@@ -17,52 +16,13 @@ inputs:
     description: Shields.io badge style for the endpoint URL
     required: false
     default: flat-square
-
 runs:
   using: composite
   steps:
     - name: Update mining badge block
       shell: bash
       run: |
-        set -euo pipefail
-
-        WALLET="${{ inputs.wallet }}"
-        README="${{ inputs.readme-path }}"
-        STYLE="${{ inputs.badge-style }}"
-        BADGE_URL="https://img.shields.io/endpoint?url=https://rustchain.org/api/badge/${WALLET}&style=${STYLE}"
-        BLOCK_START="<!-- rustchain-mining-badge-start -->"
-        BLOCK_END="<!-- rustchain-mining-badge-end -->"
-        MARKDOWN="${BLOCK_START}\n![RustChain Mining Status](${BADGE_URL})${BLOCK_END}"
-
-        if [ ! -f "$README" ]; then
-          echo "README file not found: $README"
-          exit 1
-        fi
-
-        WALLET_ENV="$WALLET"
-        STYLE_ENV="$STYLE"
-        export WALLET="$WALLET_ENV"
-        export STYLE="$STYLE_ENV"
-        python3 - "$README" <<'PY'
-import sys
-from pathlib import Path
-readme = Path(sys.argv[1])
-text = readme.read_text(encoding="utf-8")
-start = "<!-- rustchain-mining-badge-start -->"
-end = "<!-- rustchain-mining-badge-end -->"
-wallet = __import__('os').environ['WALLET']
-style = __import__('os').environ.get('STYLE', 'flat-square')
-badge_url = f"https://img.shields.io/endpoint?url=https://rustchain.org/api/badge/{wallet}&style={style}"
-block = f"{start}\n![RustChain Mining Status]({badge_url}){end}"
-
-start_idx = text.find(start)
-end_idx = text.find(end)
-if start_idx != -1 and end_idx != -1 and end_idx > start_idx:
-    new = text[:start_idx] + block + text[end_idx + len(end):]
-else:
-    new = text.rstrip() + "\n\n## Mining Status\n" + block + "\n"
-
-readme.write_text(new, encoding="utf-8")
-PY
-
-        echo "Updated $README with mining badge for wallet: $WALLET"
+        export WALLET="${{ inputs.wallet }}"
+        export STYLE="${{ inputs.badge-style }}"
+        python3 "${{ github.action_path }}/update_badge.py" "${{ inputs.readme-path }}"
+        echo "Badge updated for wallet: $WALLET"

.github/actions/mining-status-badge/update_badge.py

@@ -0,0 +1,30 @@
+#!/usr/bin/env python3
+"""Update README mining status badge."""
+import os
+import sys
+from pathlib import Path
+
+def main():
+    readme_path = sys.argv[1] if len(sys.argv) > 1 else "README.md"
+    wallet = os.environ.get("WALLET", "frozen-factorio-ryan")
+    style = os.environ.get("STYLE", "flat-square")
+    readme = Path(readme_path)
+    if not readme.exists():
+        print(f"README not found: {readme_path}")
+        sys.exit(1)
+    text = readme.read_text(encoding="utf-8")
+    start = "<!-- rustchain-mining-badge-start -->"
+    end = "<!-- rustchain-mining-badge-end -->"
+    badge_url = f"https://img.shields.io/endpoint?url=https://rustchain.org/api/badge/{wallet}&style={style}"
+    block = f"{start}\n![RustChain Mining Status]({badge_url})\n{end}"
+    start_idx = text.find(start)
+    end_idx = text.find(end)
+    if start_idx != -1 and end_idx != -1 and end_idx > start_idx:
+        new = text[:start_idx] + block + text[end_idx + len(end):]
+    else:
+        new = text.rstrip() + "\n\n## Mining Status\n" + block + "\n"
+    readme.write_text(new, encoding="utf-8")
+    print(f"Updated {readme_path} with mining badge for wallet: {wallet}")
+
+if __name__ == "__main__":
+    main()

.github/dependabot.yml

@@ -0,0 +1,48 @@
+# SPDX-License-Identifier: MIT
+
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "daily"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 5
+    reviewers:
+      - "Scottcjn"
+    assignees:
+      - "Scottcjn"
+    commit-message:
+      prefix: "deps"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "security"
+    allow:
+      - dependency-type: "direct"
+      - dependency-type: "indirect"
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major"]
+    pull-request-branch-name:
+      separator: "/"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 3
+    reviewers:
+      - "Scottcjn"
+    assignees:
+      - "Scottcjn"
+    commit-message:
+      prefix: "ci"
+      include: "scope"
+    labels:
+      - "ci/cd"
+      - "github-actions"

.github/labeler.yml

@@ -68,4 +68,31 @@ api:
     - any-glob-to-any-file:
       - 'rustchain_v2_integrated*.py'
       - '**/api*'
-      - '**/endpoint*'
+      - '**/endpoint*'
+
+BCOS-L2:
+  - changed-files:
+    - any-glob-to-any-file:
+      - 'fingerprint_checks.py'
+      - 'hardware_fingerprint.py'
+      - 'rustchain_crypto.py'
+      - 'rustchain_wallet_*.py'
+      - 'rip_200_round_robin_1cpu1vote.py'
+      - 'rewards_implementation_rip200.py'
+      - '**/auth*'
+      - '**/crypto*'
+      - '**/security*'
+      - '**/consensus*'
+      - '**/wallet*'
+
+BCOS-L1:
+  - changed-files:
+    - any-glob-to-any-file:
+      - '**/*.py'
+      - '**/*.js'
+      - '**/*.ts'
+      - '**/*.rs'
+      - '**/*.sh'
+      - '**/*.c'
+      - '**/*.h'
+      - '**/*.go'