#!/usr/bin/env bash
# Audit Firm Selection Helper
# Provides information and comparison of security audit firms

set -euo pipefail

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

echo "Security Audit Firm Selection Guide"
echo "===================================="
echo ""

cat <<EOF
## Recommended Audit Firms

### 1. Trail of Bits
- **Expertise**: DeFi, bridges, smart contracts
- **Cost**: \$30k-50k
- **Timeline**: 4-8 weeks
- **Strengths**: Comprehensive, experienced with bridges
- **Website**: https://www.trailofbits.com/

### 2. OpenZeppelin
- **Expertise**: Solidity, security, DeFi protocols
- **Cost**: \$25k-40k
- **Timeline**: 4-6 weeks
- **Strengths**: Deep Solidity expertise, bridge experience
- **Website**: https://www.openzeppelin.com/

### 3. Consensys Diligence
- **Expertise**: Enterprise-grade audits, bridges
- **Cost**: \$40k-60k
- **Timeline**: 6-10 weeks
- **Strengths**: Comprehensive, bridge specialization
- **Website**: https://consensys.io/diligence/

### 4. CertiK
- **Expertise**: Automated + manual review
- **Cost**: \$20k-35k
- **Timeline**: 3-6 weeks
- **Strengths**: Good value, comprehensive coverage
- **Website**: https://www.certik.com/

### 5. Halborn
- **Expertise**: Blockchain security, DeFi
- **Cost**: \$25k-45k
- **Timeline**: 4-8 weeks
- **Strengths**: Blockchain-focused, experienced team
- **Website**: https://halborn.com/

## Selection Criteria

1. **Experience with Bridges**: Prefer firms with bridge audit experience
2. **Economic Security Models**: Experience with economic security mechanisms
3. **Timeline**: Consider project timeline and urgency
4. **Budget**: Balance cost with quality and comprehensiveness
5. **Reputation**: Check past audit quality and client feedback

## Next Steps

1. **Request Quotes**: Contact 2-3 firms for quotes
2. **Review Proposals**: Compare scope, timeline, and cost
3. **Check References**: Speak with past clients
4. **Select Firm**: Choose based on best fit
5. **Schedule Audit**: Coordinate timeline and deliverables

## Audit Package

The audit package is ready in:
- Contracts: contracts/bridge/trustless/
- Tests: test/bridge/trustless/
- Documentation: docs/bridge/trustless/

See: docs/bridge/trustless/AUDIT_PREPARATION.md
EOF

echo ""
echo "For detailed audit preparation, see: docs/bridge/trustless/AUDIT_PREPARATION.md"