Add evidence command for monitoring and reporting misbehavior evidence to counterparty clients

.changelog/unreleased/features/ibc-relayer-cli/3456-evidence-command.md

@@ -0,0 +1,4 @@
+- Add a new `evidence` command for monitoring the blocks emitted
+  by a chain for the presence of a misbehaviour evidence, and
+  report that evidence to all counteparty clients of that chain.
+  ([\#3456](https://github.com/informalsystems/hermes/pull/3456))

.changelog/unreleased/improvements/ibc-relayer/3219-ics-consumer-misbehavior.md

@@ -0,0 +1,4 @@
+- When Hermes detects a misbehaviour on a chain that is CCV
+  consumer, it will now send the misbehaviour evidence to the
+  provider chain using the new `IcsConsumerMisbehaviour` message.
+  ([\#3219](https://github.com/informalsystems/hermes/issues/3219))

.changelog/unreleased/improvements/ibc-relayer/3223-submit-misbehavior-all-clients.md

@@ -0,0 +1,5 @@
+- When Hermes detects a misbehaviour from a on-chain client, eg. a light
+  client attack or a double-sign, it will now submit the misbehaviour
+  evidence to all counterparty clients of the misbehaving chain
+  instead of to the counterparty client of the misbehaving client only.
+  ([\#3223](https://github.com/informalsystems/hermes/issues/3223))

.github/workflows/misbehaviour.yml

@@ -36,7 +36,7 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  misbehaviour:
+  light-client-attack:
     runs-on: ubuntu-20.04
     timeout-minutes: 20
     strategy:
@@ -91,3 +91,166 @@ jobs:
         run: |
           nix shell .#${{ matrix.chain.package }} -c bash misbehaviour_test.sh
 
+  ics-light-client-attack:
+    runs-on: ubuntu-20.04
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        chain:
+          - package: interchain-security
+            account_prefix: cosmos
+    steps:
+      - uses: actions/checkout@v3
+      - name: Install Nix
+        uses: cachix/install-nix-action@v22
+        with:
+          extra_nix_config: |
+            experimental-features = nix-command flakes
+      - name: Use cachix cache
+        uses: cachix/cachix-action@v12
+        with:
+          name: cosmos
+      - name: Install sconfig
+        uses: jaxxstorm/[email protected]
+        with:
+          repo: freshautomations/sconfig
+          platform: linux
+          arch: amd64
+          extension-matching: disable
+          rename-to: sconfig
+          chmod: 0755
+      - name: Install stoml
+        uses: jaxxstorm/[email protected]
+        with:
+          repo: freshautomations/stoml
+          platform: linux
+          arch: amd64
+          extension-matching: disable
+          rename-to: stoml
+          chmod: 0755
+      - name: Install Rust
+        uses: actions-rs/toolchain@v1
+        with:
+          toolchain: stable
+          override: true
+      - name: Use Rust cache
+        uses: Swatinem/rust-cache@v1
+      - name: Build Hermes
+        uses: actions-rs/cargo@v1
+        with:
+          command: build
+      - name: Run test
+        working-directory: ci/misbehaviour-ics
+        run: |
+          nix shell .#cometbft .#${{ matrix.chain.package }} -c bash light_client_attack_test.sh
+
+  ics-light-client-attack-freeze:
+    runs-on: ubuntu-20.04
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        chain:
+          - package: interchain-security
+            account_prefix: cosmos
+    steps:
+      - uses: actions/checkout@v3
+      - name: Install Nix
+        uses: cachix/install-nix-action@v22
+        with:
+          extra_nix_config: |
+            experimental-features = nix-command flakes
+      - name: Use cachix cache
+        uses: cachix/cachix-action@v12
+        with:
+          name: cosmos
+      - name: Install sconfig
+        uses: jaxxstorm/[email protected]
+        with:
+          repo: freshautomations/sconfig
+          platform: linux
+          arch: amd64
+          extension-matching: disable
+          rename-to: sconfig
+          chmod: 0755
+      - name: Install stoml
+        uses: jaxxstorm/[email protected]
+        with:
+          repo: freshautomations/stoml
+          platform: linux
+          arch: amd64
+          extension-matching: disable
+          rename-to: stoml
+          chmod: 0755
+      - name: Install Rust
+        uses: actions-rs/toolchain@v1
+        with:
+          toolchain: stable
+          override: true
+      - name: Use Rust cache
+        uses: Swatinem/rust-cache@v1
+      - name: Build Hermes
+        uses: actions-rs/cargo@v1
+        with:
+          command: build
+      - name: Run test
+        working-directory: ci/misbehaviour-ics
+        run: |
+          nix shell .#${{ matrix.chain.package }} -c bash light_client_attack_freeze_test.sh
+
+
+  ics-double-sign:
+    runs-on: ubuntu-20.04
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        chain:
+          - package: interchain-security
+            account_prefix: cosmos
+    steps:
+      - uses: actions/checkout@v3
+      - name: Install Nix
+        uses: cachix/install-nix-action@v22
+        with:
+          extra_nix_config: |
+            experimental-features = nix-command flakes
+      - name: Use cachix cache
+        uses: cachix/cachix-action@v12
+        with:
+          name: cosmos
+      - name: Install sconfig
+        uses: jaxxstorm/[email protected]
+        with:
+          repo: freshautomations/sconfig
+          platform: linux
+          arch: amd64
+          extension-matching: disable
+          rename-to: sconfig
+          chmod: 0755
+      - name: Install stoml
+        uses: jaxxstorm/[email protected]
+        with:
+          repo: freshautomations/stoml
+          platform: linux
+          arch: amd64
+          extension-matching: disable
+          rename-to: stoml
+          chmod: 0755
+      - name: Install Rust
+        uses: actions-rs/toolchain@v1
+        with:
+          toolchain: stable
+          override: true
+      - name: Use Rust cache
+        uses: Swatinem/rust-cache@v1
+      - name: Build Hermes
+        uses: actions-rs/cargo@v1
+        with:
+          command: build
+      - name: Run test
+        working-directory: ci/misbehaviour-ics
+        run: |
+          nix shell .#${{ matrix.chain.package }} -c bash double_sign_test.sh
+