Update multisig bindings to support recursive aggregation (leanEthereum#496)

* cryptography: replace Poseidon2 by Poseidon1

* cleanup

* add zk friendly encoding

* fix constants

* small changes (data ordering + replacement sponge)

* update leanmultisig bindings

* update bindings commit hash

* update as per latest api

* update bindings

* fix ci

* set gossipsub to v1.2.0

* try ci fix

* address comments

* use log_inv_rate=1 in test mode

* tests: try to debug test fixtures

* update lean-multisig-py

* review: code quality fixes and compact aggregate refactor

- Remove duplicate TYPE_CHECKING import in state.py
- Add explicit parentheses for operator precedence in poseidon1 permutation
- Alias TEST_POSEIDON to PROD_POSEIDON (identical params, misleading docstring)
- Cache Poseidon1 engine in compress() consistently with sponge()
- Fix Mapping -> dict annotation for mutated variable in fork_choice.py
- Replace comments with docstrings for module constants (project convention)
- Remove stale Poseidon2 reference in permutation.py
- Add docstrings to PROD_CONFIG, TEST_CONFIG, PARAMS_16, PARAMS_24
- Refactor _extend_proofs_greedily -> _select_proofs_greedily:
  - Return values instead of mutating in place
  - Variadic *proof_sets for priority-ordered input
  - Remove attestation_data/attestations optional params
- Simplify aggregate() method:
  - Remove redundant double-sort
  - Phase 2 as filtered comprehension
  - Dict key views without set() wrapping
  - Early return []

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* cleanup: remove dead code after poseidon1 migration

- Delete hypercube.py (no longer imported by message_hash.py)
- Delete test_hypercube.py (tested only the deleted module)
- Inline _calculate_layer_size into test_security_levels.py (sole consumer)
- Update CONTRIBUTING.md: poseidon2 -> poseidon1 reference
- Update README.md: poseidon2/ -> poseidon1/ directory tree

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: correct comment about sort ordering in aggregate

The Rust aggregation bindings sort internally by public key,
not by validator index. The sort here is for deterministic output.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Thomas Coratger <thomas.coratger@gmail.com>
Co-authored-by: Tom Wambsgans <TomWambsgans@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: 4 people

.codespell-ignore-words.txt

@@ -4,7 +4,7 @@ subspecs
 crate
 crates
 ethereum
-poseidon2
+poseidon1
 keccak
 blake
 merkle

.github/workflows/ci.yml

@@ -119,10 +119,10 @@ jobs:
       - name: Checkout leanSpec
         uses: actions/checkout@v4
 
-      - name: Set up Python 3.12
+      - name: Set up Python 3.14
         uses: actions/setup-python@v5
         with:
-          python-version: "3.12"
+          python-version: "3.14"
 
       - name: Install uv
         uses: astral-sh/setup-uv@v4
@@ -134,6 +134,7 @@ jobs:
         run: |
           uv run pytest tests/interop/ \
             -v \
+            --no-cov \
             --timeout=120 \
             -x \
             --tb=short \

CONTRIBUTING.md

@@ -26,7 +26,7 @@
 
 ## Adding New Subspecifications
 
-New subspecs belong in `src/lean_spec/subspecs/`. Follow the pattern of existing subspecs like `poseidon2`:
+New subspecs belong in `src/lean_spec/subspecs/`. Follow the pattern of existing subspecs like `poseidon1`:
 
 ```bash
 mkdir -p src/lean_spec/subspecs/my_new_subspec

README.md

@@ -68,10 +68,10 @@ uv run pytest
 │   └── lean_spec/                      # Main specifications
 │      ├── __init__.py
 │      └── subspecs/                       # Sub-specifications
-│          ├── poseidon2/
+│          ├── poseidon1/
 │          │   ├── __init__.py
-│          │   ├── poseidon2.py
-│          │   └── ...
+│          │   ├── permutation.py
+│          │   └── constants.py
 │          ├── ...
 │          └── ...
 ├── tests/                              # Test suite

packages/testing/src/consensus_testing/test_fixtures/fork_choice.py

@@ -7,7 +7,7 @@
 
 from __future__ import annotations
 
-from typing import ClassVar, Mapping, Self
+from typing import ClassVar, Self
 
 from pydantic import model_validator
 
@@ -33,6 +33,7 @@
 )
 from lean_spec.subspecs.containers.block.types import (
     AggregatedAttestations,
+    AttestationSignatures,
 )
 from lean_spec.subspecs.containers.checkpoint import Checkpoint
 from lean_spec.subspecs.containers.slot import Slot
@@ -456,23 +457,14 @@ def _build_block_from_spec(
         #
         # block_payloads contains explicit spec attestations only.
         parent_state = store.states[parent_root]
-        final_block, post_state, _, _ = parent_state.build_block(
+        final_block, post_state, _, block_proofs = parent_state.build_block(
             slot=spec.slot,
             proposer_index=proposer_index,
             parent_root=parent_root,
             known_block_roots=set(store.blocks.keys()),
             aggregated_payloads=merged_store.latest_known_aggregated_payloads,
         )
 
-        # Sign everything
-        #
-        # Aggregate signatures for attestations in the block body.
-        # Sign the block root with the proposer's proposal key.
-        attestation_signatures_blob = key_manager.build_attestation_signatures(
-            final_block.body.attestations,
-            attestation_signatures,
-        )
-
         proposer_signature = key_manager.sign_block_root(
             proposer_index,
             spec.slot,
@@ -483,7 +475,7 @@ def _build_block_from_spec(
         return SignedBlock(
             block=final_block,
             signature=BlockSignatures(
-                attestation_signatures=attestation_signatures_blob,
+                attestation_signatures=AttestationSignatures(data=block_proofs),
                 proposer_signature=proposer_signature,
             ),
         )
@@ -552,7 +544,7 @@ def _build_attestations_from_spec(
         key_manager: XmssKeyManager,
     ) -> tuple[
         list[Attestation],
-        Mapping[AttestationData, Mapping[ValidatorIndex, Signature]],
+        dict[AttestationData, dict[ValidatorIndex, Signature]],
         set[Attestation],
     ]:
         """
@@ -578,7 +570,7 @@ def _build_attestations_from_spec(
 
         parent_state = store.states[parent_root]
         attestations = []
-        signature_lookup: Mapping[AttestationData, Mapping[ValidatorIndex, Signature]] = {}
+        signature_lookup: dict[AttestationData, dict[ValidatorIndex, Signature]] = {}
         valid_attestations: set[Attestation] = set()
 
         for aggregated_spec in spec.attestations: