fix: port Shasta hotfix soundness checks to main

[smtmfft]

Summary

• Port the remaining Shasta hotfix soundness changes after fix: validate Shasta grandparent base fee #697 to main: fix: harden Shasta guest soundness checks #698, fix: bind stalled anchor checkpoint to parent state #699, and fix: bind chain spec name in guest validation #700.
• Harden Shasta guest execution by enforcing Shasta fork selection, manifest anchor binding, and stalled-anchor bypass constraints.
• Bind stalled-anchor checkpoint calldata to the parent L2 SignalService checkpoint included in parent state witnesses.
• Bind known chain specs by name/is_taiko and bump gaiko to fix: bind chain spec name in witness validation gaiko#33 for matching witness-side validation.

Test Plan

• cargo fmt -p raiko-lib -- --check
• cargo test -p raiko-lib --lib
• cargo check -p raiko-core
• go test ./internal/witness -count=1
• git diff --check origin/main...HEAD

[Copilot]

Pull request overview

Ports remaining Shasta hotfix “soundness” validations to main by tightening fork selection and binding additional Shasta-specific inputs (anchor tx calldata, parent SignalService checkpoint storage, and known chain spec identity) so the guest cannot be driven with inconsistent witnesses/config.

Changes:

• Harden Shasta execution/validation by binding manifest anchor block numbers to decoded anchor tx calldata and tightening stalled-anchor bypass constraints.
• Add parent SignalService checkpoint storage-slot derivation + loading path to bind stalled-anchor calldata to parent state witness data.
• Validate recognized chain specs more strictly (including name and is_taiko) and update devnet chain spec fork/verifier config.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
lib/src/utils/shasta.rs	Updates Shasta transaction generation validation to pass full GuestInput into manifest checks.
lib/src/utils/shasta_rules.rs	Extends input validation to require/validate Shasta anchor tx calldata and adds regression tests.
lib/src/protocol_instance.rs	Binds known chain-spec name/is_taiko and implements stalled-anchor bypass binding to parent SignalService checkpoint storage.
lib/src/builder.rs	Adds SHASTA-only Taiko fork guard during transaction execution and corresponding tests.
host/config/chain_spec_list_devnet.json	Simplifies devnet fork config to SHASTA and updates verifier addresses.
core/src/provider/db.rs	Adds helper to eagerly load initial account+storage slot values into the proof DB.
core/src/preflight/mod.rs	Loads parent SignalService checkpoint storage slots during Shasta batch preflight and wires anchor tx into guest inputs.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.