feat: WASM-only architecture with sudo challenge management and P2P distribution

[echobt]

Summary

Removes all legacy Docker/container orchestration code and establishes a pure WASM-based challenge execution architecture. Adds sudo-controlled challenge management with hotkey-based consensus verification and P2P distribution of WASM modules with SHA-256 integrity checks.

Changes

Docker/Container Removal

• Delete crates/challenge-orchestrator/ (Docker-based challenge container orchestration)
• Delete crates/secure-container-runtime/ (Docker socket broker, container security)
• Remove container references from wasm-runtime-interface (container.rs gutted, container re-exports removed)
• Remove docker_image and endpoint fields from ChallengeEntry in challenge-registry
• Remove DockerRegistry variant from DiscoverySource enum
• Remove ContainerRunRequest/ContainerRunResponse re-exports from challenge-sdk-wasm
• Remove Docker-in-Docker config from docker-compose.yml (privileged: true, docker.sock mount, port 8090)
• Remove tests/docker/ directory
• Remove PLATFORM_TEST_DOCKER_MODE env var from CI
• Clean up workspace Cargo.toml members and validator-node dependencies

Sudo Challenge Management

• Add SudoAction variants: AddChallenge, RemoveChallenge, EditChallenge, StopNetwork
• Add state mutation methods (add_challenge_from_sudo, remove_challenge_from_sudo, etc.) to both core::ChainState and p2p-consensus::ChainState
• Handle NetworkMessage::SudoAction in validator-node with hotkey verification (is_sudo)
• StopNetwork routes all emissions to UID 0 (burn)

Challenge Weight System

• Per-challenge emission weights stored in blockchain state (ChallengeWeightAllocation)
• Weights applied during process_wasm_evaluations for Bittensor weight submission
• SetChallengeWeight sudo action updates weights with P2P propagation

WASM Module P2P Distribution

• Add WasmModuleRequest/WasmModuleResponse P2P message types
• Store WASM bytecode in distributed storage on AddChallenge
• Validators request missing modules via DataRequest on startup
• SHA-256 hash verification against WasmModuleMetadata.code_hash
• Verified modules saved to wasm_module_dir for executor loading

State Versioning

• Increment CURRENT_STATE_VERSION to V7
• Add V6→V7 migration path with new challenge management fields
• All new serialized fields use #[serde(default)] for backward compatibility

Documentation & CI

• Update AGENTS.md, challenge-integration.md, security.md, validator_wasm_audit.md
• Remove references to challenge-orchestrator and secure-container-runtime
• Add comprehensive sudo action test suite

Breaking Changes

• ChallengeEntry no longer has docker_image or endpoint fields
• DiscoverySource::DockerRegistry variant removed
• ContainerHostFunctions and related container types removed from wasm-runtime-interface
• State version bumped to V7 (automatic migration from V6)

[coderabbitai]

Important

Review skipped

Too many files!

This PR contains 207 files, which is 57 over the limit of 150.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch refactor/wasm-only-remove-docker-legacy

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}