wai: on-chip counters and calibrated instruments are separate energy classes, and every joule-carrying receipt can say which #109

Merged

dcharlot merged 3 commits from wai/land-08-energy-classes into main 2026-09-30 19:52:23 -04:00

Conversation 0 Commits 3 Files changed 62 +7169 -899

2026-09-30

Transaction Science

wai: square the deviations in the energy statistics without powi ...

The linux-arm64 leg of wai-conformance failed from this link on: the JPEG AI
decoder's symbol guard (tests/jpegai_decode_symbols.rs) found __powidf2, the
compiler builtin behind f64::powi, defined in its executable. Nothing calls
it there: in the executable built in the runner's own image, no instruction
branches to it, no relocation refers to it and no address is formed for it.
It is the case the test's documentation describes for floor on x86_64 Linux:
GNU ld keeps a compiler-builtin definition that a removed section referred
to. The references were the two sample-variance loops this link added,
energy_class::bracket_relative_uncertainty and energy_burst::sample_sd,
which squared with powi(2).

They now multiply the deviation by itself. For an exponent of 2, __powidf2
returns exactly d * d, so every figure is unchanged. In the runner's image
(catthehacker/ubuntu:act-22.04, arm64, rustc 1.98.0) the guard fails before
this change and passes after it, with no __powidf2 in the executable. On macOS
arm64: the guard, and wai-energy-receipts' three suites with --locked, pass.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

e709627da3

• View at this point in history

2026-09-30 07:39:05 -04:00

2026-09-29

Transaction Science

Merge wai/land-07-int-decode-kernels into wai/land-08-energy-classes ...

Brings in, through the refreshed previous link, main's OER differential fuzzer (54e89b56) and its audit of the OER extension against both verifiers (860ead8c, documentation only), so this link is checked against current main.

The OER extension now carries both main's audit and this link's statement that an OER/2 receipt carries an evidential grade and no acquisition class; the two edits touch different sections.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

16e6bde20c

• View at this point in history

2026-09-29 10:21:34 -04:00

Transaction Science

wai: on-chip counters and calibrated instruments are separate energy classes, and every joule-carrying receipt can say which ...

The single `HwShunt` acquisition class covered both an on-chip vendor
counter (RAPL, NVML, SMC, IOReport) and an external calibrated shunt. They
are different evidence: a calibrated instrument's uncertainty is traceable to
a calibration, while a counter is a vendor's reading whose error the vendor
states (RAPL readings are deliberately noised when SGX or TDX is enabled,
per security advisory INTEL-SA-00389).

- extensions/energy-measurement.md §2 splits hardware evidence into
  `OnChipCounter` and `CalibratedInstrument`, each with a required declared
  uncertainty (relative error and integration window). IOReport is an
  on-chip counter, like RAPL and NVML. `HwShunt` stays readable as the legacy
  class, ranked below both, and is not sealed into a new WAI receipt.
- Every receipt family that carries joules — video, world, film, reel,
  haptic, score, splat4d, audio scene, ternary, provenance and the wai-quantum
  receipts — can carry its class. The label is additive: every committed
  signed vector still verifies, and the signed bytes of unlabelled and
  legacy-labelled receipts are pinned by tests. A sealed figure declares its
  1 µJ resolution, and the floor is stated as the rule verified (0.5/√3 µJ).
- The acquisition rules are scoped to the receipt profiles WAI defines, and
  the text says what enforces each one.
- Meters open their window from rest, report an all-zero power reader as
  unusable rather than clean, and state the running-window count model as
  conservative.
- oer-receipts.md maps OER's evidential grade onto the refined classes. The
  rule that a producer must not grade `measured` a figure whose class is
  `Estimator` is kept as settled on main.
- wai-quantum verifies a receipt in either form on every in-tree verify
  path, including wai-quantum-serve's POST /verify.
- CI: wai-energy-receipts.yml runs the energy-class, label and legacy-pin
  tests for wai-rs, wai-quantum and wai-quantum-serve, which no workflow
  enabled before.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

d009db9087

• View at this point in history

2026-09-29 01:27:37 -04:00