wai merge train: eleven slices (#402 #411 #421 #408 #409 #419 #410 #424 #420 #413 #401) #428

Merged

dcharlot merged 142 commits from train/wai-2026-10-22 into main 2026-10-22 11:19:59 -04:00

Conversation 0 Commits 142 Files changed 245 +95079 -530

2026-10-22

Transaction Science

wai-conformance: the age, direction and takedown steps get their own bodies back ...

Merging the train mixed three adjacent independent-verifier steps:
- age assurance also ran direction's tests;
- direction ran takedown's tests;
- takedown was left with a name and no run.

The runner refused the job as invalid ('Invalid run/uses syntax' for the
takedown step). Each step now has exactly the body its own PR gave it:
age #409, direction #411, takedown #420.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

9f63561baa

• View at this point in history

2026-10-22 07:26:45 -04:00

Transaction Science

takedown corpus: regenerated with the sink-samples claim ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

793bd478be

• View at this point in history

2026-10-22 04:46:17 -04:00

Transaction Science

train: a takedown claim over a sink's samples adds nothing to the closure ...

C3's synthesis subject `samples` (a picture a party presents and does not
publish) met takedown's exhaustive match once both slices were in one tree
(E0004). Such samples are no item a holder serves or keeps for others, so a
closure claim whose subject they are adds no subject and needs no purge:
takedown §4.2 rule 3, the reference and its second implementation say so, and
the corpus's shared world gains such a claim, so every case exercises it.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

3bbac2e2b1

• View at this point in history

2026-10-22 04:44:39 -04:00

Transaction Science

Merge train/live-room (#409 #419 #410 #424 #420 #413 #401) into the train ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2934b2eb1d

• View at this point in history

2026-10-22 04:31:22 -04:00

Transaction Science

co-performance: the commitment's magic is WPK1, not WPC1 (taken by ad-presentation) ...

ad-presentation (on main) registers WPC1 for a player's presentation claim, and
co-performance registered WPC1 again for its commitment, so the registry's
library test (wire_identifiers_are_in_their_documents) refuses the train:
"WPC1 (magic) is listed twice". The commitment takes WPK1, unused anywhere:
the extension's magic table and §7.5 layout, wai-rs's constant, the relay's
floor reader, the independent verifier, the SPEC §5 paragraph, the changelog
entry and two comments. The corpus is regenerated by its generator (only the
commitments' bytes and what signs or digests them change) and the registry
export with it.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

f191f2b95a

• View at this point in history

2026-10-22 04:11:30 -04:00

Transaction Science

Merge T1 #401 (MOQT drafts -18 and -16, interoperability) into train/live-room ...

By meaning: the relay keeps PP's rating functions (take_ratings, gate,
group_age) and T1's track_restarts side by side. A track restarted after
TRACK_ENDED drops its cache, owners and Largest Location as T1 has it; the
rating claims held for it stay, since a claim only raises an age and the
publisher carries its claims again on the new PUBLISH. CHANGELOG kept both.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

cd6d0dfdd8

• View at this point in history

2026-10-22 03:46:09 -04:00

Transaction Science

Merge B1 #413 (the browser sink and contentBinding) into train/live-room ...

By meaning:
- Page: app.js keeps the age parameters and paragraph and adds debug=binding;
  imports, state and roomTest hooks of age, co and binding side by side.
  index.html carries the co section and the binding table, each with its CSS.
- room.e2e.mjs carries scenarioBinding whole beside scenarioAge and
  scenarioCo; default list `...,age,co` with a room, `binding` always;
  run.sh's node unit tests are every page module's (capsule, media,
  presentation, privacy-pass, binding).
- wai-live-web: the wai dependency takes co_performance and browser_sink;
  the crate doc lists both.
- joule-moq-web README: one node-test bullet for capsule, media and binding,
  then privacy-pass and ad-presentation; scenarios age, co and binding.
- REGISTRY prose names exploration and browser-sink together; the shared
  lists keep both sides; export regenerated.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

1739817397

• View at this point in history

2026-10-22 03:45:27 -04:00

Transaction Science

Merge TKD #420 (wai.media.takedown) into train/live-room ...

Relay, by meaning: the DVR store's module text keeps both the minors' room
(AGE) and the takedown (TKD) paragraphs; a session's object loop keeps CO4b's
floor and audience-input filtering and TKD's takedown track feeding the store;
tests/dvr.rs lists both rules. Shared lists kept both sides (workflow step
and path, CHANGELOG, REGISTRY, SPEC §5, live-conformance index and
provenance line, features, registry constants, lib.rs); export regenerated.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

e3f79fa2be

• View at this point in history

2026-10-22 03:43:14 -04:00

Transaction Science

Merge CO4b #424 (co-performance in the live room) into train/live-room ...

By meaning:
- joule-moq GrantHead: one attribute reader (CO4b's grant_attrs, checked
  arithmetic, UTF-8 keys and values) in place of AGE's byte-slice reader;
  `minor` and `age` are read from the same attrs CO4b keeps, with AGE's rules.
- joule-moq-room: roles(co, audience_input) is CO4b's role set, fed to PP's
  descriptor(); grant(age) and grant_with(age, ai) keep both callers (the
  age-admitted grant and the AI participant's); PP's refuses_publisher check;
  attributes in key order age, ai, audience_input / latency_budget_ms, order.
  The HTTP proof challenge (live-rooms §10.5.3) is proof_challenge(), beside
  PP's Privacy Pass challenge(); both route tables and doc tables kept.
- Page: both imports; the grant request carries `ai` and, on a 401, the
  Privacy Pass token; snapshot keeps age and co. startRoomService takes both
  `co` and `extra`. room.e2e.mjs carries scenarioAge and scenarioCo whole,
  `age,co` in the default list.
- SPEC: CO4b's revised close of the co-performance paragraph, then AGE's
  and exploration's paragraphs as they were.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

c517bf1c85

• View at this point in history

2026-10-22 03:42:23 -04:00

Transaction Science

Merge CO4 #410 (wai.live.coperformance) into train/live-room ...

Room service, by meaning: Settings carries both [age] and [co]; the descriptor
builder (PP's) takes the room's roles, and roles() gives the viewer the
audience kinds when the room has the audience-input power (CO4); a grant
states `age` first, then CO4's `latency_budget_ms` / `audience_input`, then
`order` (live-rooms §4.4 ascending keys); GET /room carries both `age` and
`co`; CO4's tests call grant() with no age. Relay: ratings and the floor are
both fields of the relay. wai features: age_assurance and co_performance.
Shared lists kept both sides; registry export regenerated.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

43ba7aa40f

• View at this point in history

2026-10-22 03:39:12 -04:00

Transaction Science

Merge PP-ADMIT #419 (Privacy Pass admission end to end) into train/live-room ...

Shared lists kept both sides (CHANGELOG entry above AGE's; WAI_RATING wire
identifier beside the age-assurance ones). Code merged without conflict.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

b202b672ca

• View at this point in history

2026-10-22 03:37:37 -04:00

Transaction Science

Merge AGE #409 (wai.age.assurance) into train/live-room ...

Shared lists kept both sides (workflow step and path, CHANGELOG, REGISTRY,
SPEC §5, live-conformance index, Cargo features/bins/tests, registry
constants, lib.rs); registry export regenerated.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

1ec7a4c6a9

• View at this point in history

2026-10-22 03:30:49 -04:00

Transaction Science

registry export: regenerated for the train ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

834562140a

• View at this point in history

2026-10-22 03:27:40 -04:00

Transaction Science

Merge #408 (exact-upscale) into the train ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

99ee19c4c4

• View at this point in history

2026-10-22 03:16:07 -04:00

Transaction Science

Merge #421 (influence) into the train ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

0298bc81f6

• View at this point in history

2026-10-22 03:16:07 -04:00

Transaction Science

Merge #411 (direction) into the train ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

58bd259664

• View at this point in history

2026-10-22 03:16:06 -04:00

Transaction Science

Merge #402 (bearers) into the train ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

cadad704c5

• View at this point in history

2026-10-22 03:16:06 -04:00

Transaction Science

wai: regenerate the synthesis and exact-upscale corpora and the registry export after the merge ...

The synthesis corpus's cases carry both priors and unmarked frames; the exact-upscale corpus's
policies carry synthesis's second_layer member. Written by wai_synthesis_vectors gen,
wai_upscale_vectors gen and wai registry export.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

23c9c09ae7

• View at this point in history

2026-10-22 03:04:14 -04:00

Transaction Science

Merge origin/main into wai/exact-upscale (wai-mark:tent64, contribution, settlement, access, ad presentation, exploration, shared lists) ...

Resolved by meaning: synthesis::Case holds both the priors (exact-upscale) and the unmarked
frames (§7.6); synthesis §11.1 lists both inputs and the three policy members; the
synthesis-mark corpus's cases hold no prior; exact-upscale passes synthesis's second_layer
policy through; the live-conformance table gains the upscale row in its generator column; both
CI steps and both CHANGELOG entries are kept. Generated files are main's here and are
regenerated in the next commit.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

df1004f187

• View at this point in history

2026-10-22 03:02:57 -04:00

2026-10-21

Transaction Science

registry export: regenerated after merging main ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

4ee20e2a56

• View at this point in history

2026-10-21 22:36:49 -04:00

Transaction Science

Merge origin/main into wai/age-assurance ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

cc1f3dbda6

• View at this point in history

2026-10-21 22:29:13 -04:00

Transaction Science

Merge origin/main into wai/takedown (room e2e window wait) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

8ec43d5f95

• View at this point in history

2026-10-21 20:38:41 -04:00

Transaction Science

Merge origin/main into wai/influence (room e2e window wait) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

8bd7d62d94

• View at this point in history

2026-10-21 20:38:41 -04:00

Transaction Science

Merge origin/main into joule-moq/multi-draft (room e2e window wait) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

1450565b2e

• View at this point in history

2026-10-21 20:38:40 -04:00

Transaction Science

Merge origin/main into wai/browser-binding (room e2e window wait) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

5d2542256d

• View at this point in history

2026-10-21 20:38:40 -04:00

Transaction Science

Merge origin/main into wai/co-performance (room e2e window wait) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

7e1e7f23ac

• View at this point in history

2026-10-21 20:38:40 -04:00

Transaction Science

Merge origin/main into wai/direction (room e2e window wait) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

45e7769b2e

• View at this point in history

2026-10-21 20:38:40 -04:00

Transaction Science

Merge origin/main into wai/bearers (room e2e window wait) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

a97667a6c1

• View at this point in history

2026-10-21 20:38:40 -04:00

Transaction Science

registry export: regenerated after merging main ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

c61728d846

• View at this point in history

2026-10-21 20:38:31 -04:00

Transaction Science

joule-moq-relay, joule-moq-room: clippy's notes on this change ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

3f115a3da4

• View at this point in history

2026-10-21 20:37:19 -04:00

Transaction Science

Merge origin/main into wai/influence (shared lists name their tables) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

8b2bc0d738

• View at this point in history

2026-10-21 20:17:12 -04:00

Transaction Science

wai: influence — the report's checks in the order they run, and a reference with no terms checked against nothing ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

c10b93c8f7

• View at this point in history

2026-10-21 20:15:44 -04:00

Transaction Science

age_rising: the slow viewer reads until its receipts are whole, not to the bound ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

e093ae80d8

• View at this point in history

2026-10-21 20:15:10 -04:00

Transaction Science

joule-moq-web: lay the room out at the later of the page's instant and the lifecycle event's; take the service's clock only past the request's own uncertainty ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

1b1d1575cc

• View at this point in history

2026-10-21 20:13:35 -04:00

Transaction Science

wai: influence — type aliases for the attribution figures, arrays where clippy asks ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

db9a6adda4

• View at this point in history

2026-10-21 20:10:17 -04:00

Transaction Science

wai: influence corpus README, independent Python verifier, and settlement_verify reads attribution lines ...

influence_verify.py is the second implementation of extensions/influence.md: it verifies each
session with contribution_verify.py, regenerates every conditioned step, reads usage statements
with ai_usage_verify.py and statements with settlement_verify.py (now amended for kind 2 lines
and their bases), and computes every share, line and report itself. Registers
wai.media.influence (registry, wire identifiers, SPEC §5, CHANGELOG, CI step, export); the
settlement corpus's reserved-line vector becomes a line whose basis is not given.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

82fa790c77

• View at this point in history

2026-10-21 20:04:39 -04:00

Transaction Science

wai: takedown — settlement acknowledgements show who served or received a covered object ...

With wai.delivery.settlement on main, the reserved 'served' slot is filled: the upstream
of an acknowledgement or declaration whose item lists name a covered object is a holder
(role served), and the downstream of a hop's acknowledgement is one too (role received);
a sink is never held to purge. Acknowledgements read under settlement §3.6 with their
item lists recomputed (evidence_invalid otherwise), and count for the matched class too.
The corpus gains two acknowledgements (a viewer's from a cache outside the stores, and
that cache's from the relay), a case whose cache never purged (purge_missing) and one
whose item list does not recompute; the Python verifier reads them with
settlement_verify.py and gains two mutations and two droppable checks.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

e96da2f6d7

• View at this point in history

2026-10-21 20:03:26 -04:00

Transaction Science

Log nothing that links a threshold to a visit: no admission line at the service, no session or threshold in the relay's refusal; age_rising: a rise ends what waits at the relay ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

1f0641bc97

• View at this point in history

2026-10-21 19:59:48 -04:00

Transaction Science

Merge origin/main into wai/takedown (delivery settlement, shared lists) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2b504fbbfb

• View at this point in history

2026-10-21 19:54:58 -04:00

Transaction Science

wai: influence attribution — conditioning, shares, attribution lines and reports (spec text, reference module and corpus, in progress) ...

The extension text (extensions/influence.md), the influence module of wai-rs behind the
feature influence, its corpus generator and committed corpus; settlement gains attribution
lines (kind 2) recomputed from a basis, and contribution notes the sibling record.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

58fcff3a04

• View at this point in history

2026-10-21 19:52:19 -04:00

Transaction Science

age_serving: groups after the claim's object are sent once the relay holds it (each group is read by a task of its own); the corpus paragraph of §12 states each scope case's reason ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

94444cfbf6

• View at this point in history

2026-10-21 19:46:46 -04:00

Transaction Science

wai: register wai.media.takedown — registry, wire identifiers, SPEC §5, CHANGELOG, the CI step, the corpus index ...

The record and its seven document kinds (wai-takedown, -clocks, -policy, -notice,
-match, -purge, -counts) in codecs/registry.rs, the export regenerated
(capabilities.json, vocab/v2.ttl, REGISTRY.md's table); SPEC §5's record list and a
paragraph; the CHANGELOG entry; the wai-conformance step (the module's unit tests,
tests/takedown.rs, takedown_verify.py) and its path; live-conformance/README.md; and a
pointer from live-moderation §1 to the sibling record.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

909f634a2e

• View at this point in history

2026-10-21 19:46:20 -04:00

Transaction Science

joule-moq-room: a budget marks an object only while its publisher's grant is in effect (co-performance §9.1) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

813d867abe

• View at this point in history

2026-10-21 19:39:11 -04:00

Transaction Science

joule-moq-room: a mark leaves the queue once signed, and the clock's state names its instant; the co scenario verifies the objects before it ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

df12be4363

• View at this point in history

2026-10-21 19:38:44 -04:00

Transaction Science

joule-moq-relay: the DVR store honours a signed takedown — forgets what it covers, signs a purge, holds across a restart ...

A takedown (WAI takedown §10.1) rides the track [K, takedown], 0, signed by K, a key in
dvr.takedown_keys or auth.authorities. The store erases every object whose content
hash its exact or matched set names, and every object of a track its exact set names
from a group on (erased reason 3), in every room; never stores one again (an identical
copy on another track included); withholds them from every FETCH, from the store and
the cache, to moderators too; logs the takedown in takedowns.wdl, verified again on
start; and signs a purge with the relay's key under purges/<link>.json, once.

Also: the takedown module's clippy notes (type aliases, slice::from_ref), and the
Python verifier memoises its signature checks.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

769b83d059

• View at this point in history

2026-10-21 19:37:50 -04:00

Transaction Science

joule-moq-web README: the room page's co-performance and the co scenario ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

ea0d1ca754

• View at this point in history

2026-10-21 19:34:00 -04:00

Transaction Science

clippy: is_multiple_of in the date check, too_many_arguments allowed on the page's claim writer ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

711ff7825c

• View at this point in history

2026-10-21 19:33:55 -04:00

Transaction Science

joule-moq-web: an audio object's due instant read from the inputs its encoder took; the co scenario waits for every mark before it verifies ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

60f52f1b75

• View at this point in history

2026-10-21 19:33:32 -04:00

Transaction Science

The registry export: WAI_RATING ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

3f25397d4c

• View at this point in history

2026-10-21 19:27:47 -04:00

Transaction Science

WAI_RATING as a wire identifier, the CHANGELOG, SPEC §5, the READMEs, the example configuration and CI's path filters ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

987ac68a16

• View at this point in history

2026-10-21 19:27:22 -04:00

Transaction Science

wai: takedown — the derivation closure, purges against a regime's clock, and counts (spec, reference module, corpus, independent verifier) ...

extensions/takedown.md registers wai.media.takedown: a service's signed takedown of a
source (object, group, track or take) under a policy that pins a registry of regime
clocks (registry/takedown-clocks.json, read from Public Law 119-12 s3(a)(3), the IT
Rules 2021 rule 3(1)(d) and 3(2)(b) as amended by G.S.R. 120(E), Regulation (EU)
2024/1083 Art. 18(4) and Regulation (EU) 2022/2065 Art. 16(6)). The closure is
computed from deriving-edge records, synthesis origin claims and group receipts and
held to the takedown's stated set; perceptual matches are a class apart; holders sign
purges and the time to removal is held to the clock (purge_missing, deadline_missed,
window_not_observed); counts per clock, ground, category and source recompute.

The wai-rs module (feature takedown), its corpus (live-conformance/takedown, 31 cases
and 2 counts) and live-conformance/takedown_verify.py agree on every case.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

07f7a459dc

• View at this point in history

2026-10-21 19:26:19 -04:00

Transaction Science

joule-moq-room: read an events stream to its end; a window that fails to commit is tried again after five seconds; one warning for objects past a refusing floor ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

133ebcb2c5

• View at this point in history

2026-10-21 19:26:09 -04:00

Transaction Science

joule-moq-web CI: wai-live-web's own tests, the co scenario, the co-performance corpus among its paths ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

b1fd22fc95

• View at this point in history

2026-10-21 19:24:53 -04:00

Transaction Science

Merge origin/main into wai/browser-binding (settlement, contribution, shared lists) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

8771e88222

• View at this point in history

2026-10-21 19:24:47 -04:00

Transaction Science

Merge origin/main into wai/co-performance (settlement, contribution, shared lists) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

a4c850558c

• View at this point in history

2026-10-21 19:24:47 -04:00

Transaction Science

Merge origin/main into wai/direction (settlement, contribution, shared lists) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

c569967c36

• View at this point in history

2026-10-21 19:24:47 -04:00

Transaction Science

Merge origin/main into wai/bearers (settlement, contribution, shared lists) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

cf86ff7453

• View at this point in history

2026-10-21 19:24:46 -04:00

Transaction Science

Merge origin/main into joule-moq/multi-draft (settlement, contribution, shared lists) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

814c557b89

• View at this point in history

2026-10-21 19:24:38 -04:00

Transaction Science

co-performance: what the relay and a room clock of its own do in a live room; SPEC §5 and the changelog ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

be45e7f038

• View at this point in history

2026-10-21 19:23:28 -04:00

Transaction Science

joule-moq-web: the room page's co-performance (the floor, what's next, the audience, fidelity, a scripted AI participant) and its end-to-end scenario ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

651ca16ec9

• View at this point in history

2026-10-21 19:21:14 -04:00

Transaction Science

joule-moq-web e2e: the age scenario, a test issuer over the corpus's published keys ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

d877c6525c

• View at this point in history

2026-10-21 19:18:09 -04:00

Transaction Science

The room page's Privacy Pass client (RFC 9577, RFC 9578 §6) and ratings on its tracks; every grant request in a room that admits by age carries a token ...

web/room/privacy-pass.js reads RFC 9577's challenges, checks them (§2.1.3), and obtains a
token by blind issuance (RFC 9474 §4.2 to §4.4) from the issuer's directory (RFC 9578 §4); it
reproduces RFC 9578 A.2's TokenRequest and token from the corpus's vector. The page asks
again with the token on a 401, carries the room's rating (and, with rate=, its own rating of
its video, signed in wasm) on every PUBLISH, and records a relay's below_threshold refusal
as withheld. The service now challenges publishers as it does viewers: every track of a rated
room is held to its rating, the room's events among them.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

c93aa4f7a9

• View at this point in history

2026-10-21 19:15:49 -04:00

Transaction Science

joule-moq-room: its co-performance configuration, relay lines and README ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

38a89bf5ac

• View at this point in history

2026-10-21 19:12:56 -04:00

Transaction Science

joule-moq-room test: a span is a u32

dc78433256

• View at this point in history

2026-10-21 19:12:15 -04:00

Transaction Science

joule-moq-room: a room with co-performance end to end against a relay that holds the floor ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

f3568b4675

• View at this point in history

2026-10-21 19:11:36 -04:00

Transaction Science

joule-moq-room: admission by age (age-assurance §5.6), a Privacy Pass origin over HTTP ...

With [age], each room has a policy and a room rating signed by its authority. A viewer's grant
request without a token is answered 401 with a PrivateToken challenge per key (RFC 9577
§2.1.2), its redemption context HMAC-SHA-256 over the room and a window under a key drawn at
start, its origin_info the service's server name; a token is checked by wai-rs's §5.2 against
the room's age and the grant states its threshold in age (§5.4). Nonces are kept for the two
windows accepted and bounded per window (503 past it, nothing forgotten). Admissions are
counted by window, issuer and threshold alone; GET /age/receipt and receipts_out give the
clock-signed wai-age-admissions receipts, suppressed under 50. The room's rating rides the
clock's events track and the grant's room view, for publishers to carry.

The lock gains wai-quantum (a path crate of the monorepo), by additions only.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

cad1c59d00

• View at this point in history

2026-10-21 19:10:44 -04:00

Transaction Science

joule-moq-room: the clock's co-performance: its replica, its log of objects, marks, commitments, selections, fidelity, and what a page asks it to state ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

c00466752f

• View at this point in history

2026-10-21 19:08:25 -04:00

Transaction Science

Merge origin/main into joule-moq/multi-draft ...

wai/CHANGELOG.md: both entries kept, this branch's above main's.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

1fa6a0ba8a

• View at this point in history

2026-10-21 19:04:02 -04:00

Transaction Science

Merge origin/main into wai/browser-binding ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2a610f5535

• View at this point in history

2026-10-21 19:03:50 -04:00

Transaction Science

joule-moq rating claims over MOQT (WAI_RATING 0x3A4D) and the relay's serving rule (age-assurance §5.5, §5.7) ...

joule-moq reads a rating claim as wai-rs does (strict JSON, exactly its members, JCS,
Ed25519 under WAI's strict rule), writes one, and agrees with the age corpus on every claim
and every serving request. A grant head reads its age attribute (§5.4).

The relay takes claims from PUBLISH and SUBSCRIBE_OK track properties and from object
properties, holds what §3.6 lets it honour, bounded per room and track and in all, and serves
each session by its proven grants' threshold: a live object of a group above it is not
forwarded, the streams of groups a newly held claim raises are ended, and a SUBSCRIBE, FETCH
or fill is refused below_threshold at its start or answered up to the first refused group.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

cb793b61da

• View at this point in history

2026-10-21 19:03:43 -04:00

Transaction Science

http falsify: session-accepted re-cut against step6 with the bearer classes beside it ...

The transmission and reconciliation arms now follow the reconstruct-session arm
in receipts::step6, so the patch's context no longer matched and the falsify
shard refused it. Same one-line mutation, same case it must fail.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

de88226c00

• View at this point in history

2026-10-21 19:03:23 -04:00

Transaction Science

browser-sink §13: state what a report reveals, with no consent rule ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

d571d54f24

• View at this point in history

2026-10-21 19:02:56 -04:00

Transaction Science

joule-moq: a grant head's usize cursor ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

14a44dce67

• View at this point in history

2026-10-21 16:29:35 -04:00

Transaction Science

joule-moq-relay: hold a room's audience inputs to co-performance §7.3 before forwarding them, and count each refusal ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

e0d7341207

• View at this point in history

2026-10-21 16:26:16 -04:00

Transaction Science

co_performance tests: the clock's statements recomputed from the room before each; wai-live-web builds with let-else only ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

acd33d1cc9

• View at this point in history

2026-10-21 16:20:55 -04:00

Transaction Science

co_performance: the room as a room clock replays it, and what it signs; wai-live-web reads and verifies co-performance ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

659cfff631

• View at this point in history

2026-10-21 16:17:15 -04:00

Transaction Science

age assurance: one scope per room (live-rooms §10.4) refused by name otherwise, window redemption contexts, admission by the room's service over HTTP, ratings over MOQT ...

live-rooms §10.4's subscribing scopes did not fit the 255 bytes draft-ietf-moq-privacy-pass-auth-03
gives one MoQAuthorizationInfo: the room's scope is now one MoQAuthScope, the subscribing
actions on MATCH_PREFIX of [R] and on every track name, 78 bytes. A challenge's origin_info is
read by its binding: over MOQT the room's scope byte for byte (scope_malformed, scope_mismatch,
the previous revision's scopes among them); over HTTP RFC 9577's list of server names holding
the service's own. The corpus gains the scope and HTTP cases and RFC 9578 A.2's issuance, which
both verifiers check.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

1a8c1a5ead

• View at this point in history

2026-10-21 16:15:15 -04:00

Transaction Science

direction.md: the exploration record's pictures as layers and references ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

8e64d7484f

• View at this point in history

2026-10-21 16:12:23 -04:00

Transaction Science

direction.md: a replicate clip's plate is not null; a rect's bounds are checked where its picture is known ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

7ad9a00674

• View at this point in history

2026-10-21 16:08:53 -04:00

Transaction Science

Merge remote-tracking branch 'origin/main' into wai/direction ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

6ab011c0ee

• View at this point in history

2026-10-21 16:08:04 -04:00

Transaction Science

direction: measure probes exactly at each row and column bound ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

82e65996c7

• View at this point in history

2026-10-21 16:07:53 -04:00

Transaction Science

room: a tile whose chain this page anchored says from which group it holds it (browser-sink §10) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

ba4e7c5334

• View at this point in history

2026-10-21 16:04:32 -04:00

Transaction Science

direction: the framing measure and the interpolations as corpus sections of their own ...

Boxes at both sides of every size bound and every column and row bound, past
the edges and at the limits of a signed integer; each interpolation mode rising
and falling, with floors below zero. The size control now keeps its position,
so it fails on the size bound alone.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

c9cfbe3d08

• View at this point in history

2026-10-21 16:04:21 -04:00

Transaction Science

browser-sink §12: the corpus's families as the corpus holds them ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

a9db1a9077

• View at this point in history

2026-10-21 16:02:40 -04:00

Transaction Science

docs: the browser sink in joule-moq-web's README and the live-conformance index ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

96229487fb

• View at this point in history

2026-10-21 16:02:15 -04:00

Transaction Science

wai.media.direction: registry, SPEC §5, CHANGELOG, CI step, corpus README ...

The record's row and its four document kinds in the registry and its export,
the CI step that runs the reference's tests and direction_verify.py, and the
live-conformance listing; int_kernels_vectors' exclusion names the corpus's
generated layers and rendered frames by their SHA-256.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

ebd2b0c167

• View at this point in history

2026-10-21 15:51:23 -04:00

Transaction Science

direction: clippy's notes (length for an event, let chains, div_ceil) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

c395a2307d

• View at this point in history

2026-10-21 15:48:47 -04:00

Transaction Science

wai.media.direction: storyboard, keyframes and sequence records bound to a directed output ...

The extension text (extensions/direction.md), the wai-rs module behind the
feature direction (records, the framing measure, interpolation, the pinned
render, governance, verification), its corpus generator and test, the corpus
live-conformance/direction/vectors.json and its second implementation,
direction_verify.py.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

726f8f448a

• View at this point in history

2026-10-21 15:45:37 -04:00

Transaction Science

joule-moq-relay: the floor of WAI rooms (co-performance §6) ...

With [floor] in its configuration, the relay reads each room's turn
schedules (WPT1) and handovers (WPH1) from the events tracks it already
forwards, as it reads moderation decisions, and holds the floor: a media
object a performer publishes out of turn under a schedule that refuses is
not forwarded and is counted. A schedule is honoured from a room key (the
authorities' and the configured ones) or a principal whose session proved
a grant with the direct power, when it reads, verifies and changes no past;
a handover from the turn's holder, a director or a room key, to a holder
of its segment. Unit tests of the reading and the floor, and
tests/floor.rs through a relay on loopback: the object in turn reaches the
subscriber, the other does not, and a handover passes the floor.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

c6b3c09944

• View at this point in history

2026-10-21 15:43:40 -04:00

Transaction Science

browser_sink_verify.py: a forged signature whose derived bytes all agree is a mutation only the signature check catches ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

7dea3ca7f7

• View at this point in history

2026-10-21 15:41:23 -04:00

Transaction Science

joule-moq-room: co-performance: the audience-input power, latency budgets and the room's policy ...

A [co] section of the service's configuration: with audience_input above
0, every viewer's grant carries the attribute audience_input and may send
meta events and reactions, and the viewers' grants are served with the
room (co.audience) so a page verifies their inputs; with
latency_budget_ms above 0, every publisher's grant carries it. Either
gives each room a WPP1 policy the authority signs (co.policy). A unit
test checks the grants and the policy, and that two viewers' votes in a
window the clock opens, commits and selects verify as co-performance §9
verifies a room.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

d396dad166

• View at this point in history

2026-10-21 15:38:20 -04:00

Transaction Science

browser sink: clippy's notes on the new code ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

176f1462db

• View at this point in history

2026-10-21 15:38:14 -04:00

Transaction Science

age_assurance: a track claim's authorisation as one match guard (clippy collapsible_match) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

101d31ee01

• View at this point in history

2026-10-21 15:35:20 -04:00

Transaction Science

ci: the browser sink's step in wai-conformance, and the binding scenario's inputs in joule-moq-web's paths ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

d234d2989f

• View at this point in history

2026-10-21 15:35:08 -04:00

Transaction Science

wai: contentBinding a proposed wire identifier (frame-metadata), SPEC §4 for a sink in a web page, the CHANGELOG, and the draft WebCodecs proposal (not filed) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

1c8dc7a47b

• View at this point in history

2026-10-21 15:34:04 -04:00

Transaction Science

co_performance: name the fidelity entries and the scores, and pass an object's Location and instants as pairs ...

Clippy's type_complexity and too_many_arguments notes, cleared without an
allow.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

b2bca37efb

• View at this point in history

2026-10-21 15:33:37 -04:00

Transaction Science

browser sink: the corpus's fractional bound survives a page's numbers; an unbound tile shows no chain ...

A page whose numbers do not keep 1920.0 apart from 1920 writes it as an integer, so the
malformed-bound case is a true fraction; §5 says so.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

b74702cb68

• View at this point in history

2026-10-21 15:31:51 -04:00

Transaction Science

wai.live.coperformance: registry, SPEC §5, CHANGELOG, corpus README and the CI step ...

The capability and its ten magics in the reference registry, and the
export regenerated (registry/capabilities.json, vocab/v2.ttl and
REGISTRY.md's table); SPEC §5's paragraph and record list; the corpus's
README with its provenance; the live-conformance index; the sidecar
exclusion's reason for live-conformance; and a step in the independent
verifiers job that runs the module's unit tests, tests/co_performance.rs
and co_performance_verify.py, with the extension in the workflow's paths.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

0977db7a64

• View at this point in history

2026-10-21 15:31:04 -04:00

Transaction Science

age assurance: the minors' profile over grants, live-recording refuses a room never recorded, the relay keeps no DVR window of a minors' room, the second implementation, registry and CI ...

The independent verifier's reading of the text found that a grant may narrow a
publishing role to publish nothing and keep its chat: §8.1 gains rule 4 over
grants, held at the first record that puts a minor's publishing grant into
effect. §2, §3.4, §3.6, §5.2, §6.2, §7.3 and §9.1 now pin the reading orders
and the attribution of claims, and the corpus covers the rules it did not
reach.

live-recording §4.4 step 5 refuses a package of a room whose recording policy
has mode 0 (recording_not_permitted); its corpus gains room_never_recorded and
live_record_verify.py the check. joule-moq's grant head reads the minor
attribute, and joule-moq-relay's DVR store keeps nothing of a room once a
session proves a minor's publishing grant of it, as it does for a sealed room,
across a restart; tests/dvr.rs shows it.

live-conformance/age_assurance_verify.py is the second implementation, written
from the text: it shares no code with wai-rs, verifies every RSASSA-PSS in its
own arithmetic, and catches every mutated copy and each of its own dropped
checks. The registry export, SPEC §5, the CHANGELOG, the corpus exclusion
reason and the wai-conformance step follow.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

b9f27de9ad

• View at this point in history

2026-10-21 15:29:49 -04:00

Transaction Science

co_performance_verify.py drops each of its checks in turn; the text names every malformed rule ...

The verifier is weakened on purpose, one check at a time, and the corpus
must catch each weakened copy. Room verifications are cached by their
inputs, since they do not depend on the checks dropped. The extension
names the window's, the fidelity statement's and the credit's malformed
values explicitly.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

4b0426d02d

• View at this point in history

2026-10-21 15:28:15 -04:00

Transaction Science

co_performance_verify.py: the co-performance corpus's second implementation ...

Written from extensions/co-performance.md alone: the policy, statements,
intents and their pinned rules, the fidelity statement, schedules,
handovers, the floor, budgets and marks, windows, inputs, commitments,
the three rules and the credits. Each room through live_rooms_verify.py;
mutated copies of the corpus must each fail.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

6f97816e5c

• View at this point in history

2026-10-21 15:25:35 -04:00

Transaction Science

joule-moq-web: frames bound to the objects they came from, routes before decode, and the binding page ...

web/room/binding.js: the side table a page carries contentBinding in until a registry
lists the member (decoder and timestamp, clone, transfer, reset, a bound; ambiguity
refused), the capability report built in two passes so that only codec strings the
WebCodecs Codec Registry lists are put to the user agent, and the state of the frame on
screen. The room routes each track before it decodes it, binds every frame its video
decoders output to the verified object and group receipt, and shows the state of each
tile's frame with ?debug=binding. web/binding/ runs live-conformance/browser in the page,
the wasm route's verified decode, the binding through clone, transfer, copyTo and
re-encode, the metadata probe and a capability report from the user agent's answers.
e2e: scenario binding, energy.py for the host's per-process counter, and the decode wasm
built by run.sh.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

a196743340

• View at this point in history

2026-10-21 15:21:58 -04:00

Transaction Science

wai.live.coperformance: intents, turns and audience co-creation in rooms ...

The extension text (extensions/co-performance.md), the reference module
(wai-rs feature co_performance) and its corpus generator: the room
authority's WPP1 policy; intents compared with what played under pinned
rules and the clock's fidelity statement recomputed; turn schedules in
microseconds or bars, call-and-response pairs, handovers, the floor,
latency budgets and marks; audience inputs to selection windows, the
commitment, three selection rules and their credits.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

df8fc8d665

• View at this point in history

2026-10-21 15:19:14 -04:00

Transaction Science

browser sink for the page: wai-live-web's routing, constraint, binding and frame-state functions, a bound wasm decoder, and the verifier's hashes ...

wai-live-web exports the browser_sink functions (routeReport, evaluateConstraints,
readBinding, makeBinding, frameTier, frameState) and, behind its feature int_video,
decodeBound: a wai.video.int_motion envelope verified against its group and object
receipts, decoded by the integer decoder and every frame bound; an object that does not
verify is not decoded, and one decoded without receipts is unbound. joule-moq-web's
verifier now returns a verified object's content hash and its group receipt's link hash,
which a frame decoded from it names. Reason's list is a function, so nothing of the module
reaches include/wai.h.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

9cc849ae19

• View at this point in history

2026-10-21 15:14:57 -04:00

Transaction Science

wai: exact upscale — the entry's size bound and §3.3's limits at step 4.3, stated ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

aa47120215

• View at this point in history

2026-10-21 15:03:30 -04:00

Transaction Science

wai: exact upscale — clippy: as_chunks, is_multiple_of ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

6b6c310e16

• View at this point in history

2026-10-21 14:59:44 -04:00

Transaction Science

wai: browser_sink_verify.py, the browser-sink corpus's second implementation ...

Written from extensions/browser-sink.md: it reads §4.1's decoders, §4.2's registry rows,
§11's reasons and capability-constraints §3.1's register from the texts, each
capability's class from the registry export, and recomputes every route, constraint
evaluation, energy entry, binding, chain signature and link hash, frame state and side
table. Answers for codec strings no registry row lists are changed every way and never
read; every mutated copy of the corpus fails.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

5e6542db60

• View at this point in history

2026-10-21 14:51:41 -04:00

Transaction Science

wai: registry export with wai.media.upscale ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

df055101d4

• View at this point in history

2026-10-21 14:49:19 -04:00

Transaction Science

wai: exact upscale — GPU equality test, CI steps, integer-operators §13.7, determinism-tiers, CHANGELOG ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

edc7b81fd4

• View at this point in history

2026-10-21 14:49:03 -04:00

Transaction Science

wai: the browser sink — routing, constraint sets in the page, energy beside powerEfficient, and the content binding a decoded frame carries ...

extensions/browser-sink.md: a page routes each object to the user agent's decoder, a
native host's or WAI's wasm decoder; the user agent is asked only about codec strings the
WebCodecs Codec Registry lists, and its decoder is taken only where it is exact for the
tier the object needs. capability-constraints gains its register (§3.1) and its
evaluation in a page. A measured figure is reported beside the user agent's
powerEfficient, which stays its word. Every decoded frame carries contentBinding: the
content hash of the receipted object, the link hash of its group receipt, and the tier.

wai-rs: the browser_sink module (feature browser_sink), its corpus generator
wai_browser_sink_vectors, and tests/browser_sink.rs. The corpus is
live-conformance/browser/.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2a76a887e0

• View at this point in history

2026-10-21 14:48:03 -04:00

Transaction Science

wai: exact upscale — corpora generated, the corpus README, registry rows and SPEC §5 ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

399e3b7ea9

• View at this point in history

2026-10-21 14:45:53 -04:00

Transaction Science

wai.age.assurance: ratings carried through derivations, threshold-token admission, a sink's predicate, suppressed admission counts and the minors' profile ...

extensions/age-assurance.md registers the record: wai-rating claims for an
object, a track, a span or a room under named schemes, each stating the
minimum age its value means, carried through every derivation (a scheme an
input is rated under is never dropped or lowered); a room's wai-age-policy of
Privacy Pass issuers with one key per threshold; admission by a token of RFC
9578's publicly verifiable type, the relay learning only the issuer and the
threshold; the serving rule, a span's rise holding from its first group; the
sink's age state and predicate with no return path; wai-age-admissions
receipts, every count under 50 suppressed and no member a session could ride
in; and the minors' profile over a descriptor's role bitmaps.

wai-rs gains the age_assurance module (feature age_assurance), reusing the
ad-presentation module's RSASSA-PSS and token reader, and the corpus
live-conformance/age/ written by wai_age_assurance_vectors from fixed seeds,
its issuer keys the published test keys of RFC 9578 A.2, RFC 9500 and RFC
7517.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

9d1809ac43

• View at this point in history

2026-10-21 14:43:00 -04:00

Transaction Science

Merge remote-tracking branch 'origin/main' into wai/exact-upscale

10aabebb75

• View at this point in history

2026-10-21 14:41:56 -04:00

Transaction Science

wai: exact upscale — integer super-resolution derivations, the upscale record, the presentation statement (work in progress) ...

The int_sr module (WSR1 prior, wai-upscale:sr2/sr4 lowered to one wai-ops/1 graph), the
exact_upscale module (upscale record with residual and target, presentation statement),
synthesis's samples subject and SR evidence, the corpus generator, the second implementation,
the training tool and its trained priors.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2c5bd84c10

• View at this point in history

2026-10-21 14:41:56 -04:00

Transaction Science

bearer-receipts §12: no consent rule of its own; a lawful basis is the distributor's ...

Reconciling is part of the delivery service a distributor operates over WAI.
The section still says what a reconciliation discloses and to whom, keeps the
fresh-key option, and points a distributor that a regime asks for a lawful
basis to the lawful-basis claim (jwp-receipts §2.4.6).

Co-Authored-By: Claude Opus 5.5 <[email protected]>

330eef204a

• View at this point in history

2026-10-21 13:27:46 -04:00

Transaction Science

Merge origin/main into wai/bearers ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

f03eda72bc

• View at this point in history

2026-10-21 13:14:59 -04:00

Transaction Science

bearer-receipts: claims on a track, unread bearer logs, DVB-I identifiers, the bound's wording ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

6c23f14185

• View at this point in history

2026-10-21 13:14:54 -04:00

Transaction Science

Merge origin/main into joule-moq/multi-draft ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

f52a0c70e8

• View at this point in history

2026-10-21 13:12:54 -04:00

Transaction Science

http-delivery §8.2: transmission and reconciliation claims in a receipt index are checked against the item's group (test) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

0e2a693d09

• View at this point in history

2026-10-21 13:12:48 -04:00

Transaction Science

bearer_receipts corpus: name the declared line's type ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

df840a85f1

• View at this point in history

2026-10-21 13:11:54 -04:00

Transaction Science

joule-moq: the interoperability matrix of 2026-10-21 ...

The runner's test cases and WAI receipts end to end against each relay the
interoperability runner's registry lists, at each draft both speak, over QUIC
and WebTransport; and other implementations' test clients against
joule-moq-relay. Relays and clients are named by what they offer; each result
that is not a pass names its cause.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

529f0824b5

• View at this point in history

2026-10-21 13:08:09 -04:00

Transaction Science

joule-moq-interop: local.sh waits for its relay to exit ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

219f785544

• View at this point in history

2026-10-21 13:02:45 -04:00

Transaction Science

joule-moq-relay: two doc comments say no session, plainly ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

fb0645fdc5

• View at this point in history

2026-10-21 13:01:56 -04:00

Transaction Science

joule-moq, joule-moq-relay, joule-moq-interop: clippy's notes on this branch's code ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

1a43b058a9

• View at this point in history

2026-10-21 12:57:39 -04:00

Transaction Science

registry export: wai.bearer.receipts ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

30411237e2

• View at this point in history

2026-10-21 12:56:19 -04:00

Transaction Science

wai: bearer receipts corpus, second implementation, HTTP index step 6, registry, SPEC §5, CHANGELOG, CI step ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

70cc5ee033

• View at this point in history

2026-10-21 12:56:01 -04:00

Transaction Science

joule-moq: docs and CI for three drafts; CHANGELOGs ...

The -18 table gains a requester's FIN on namespace requests, the -16 notes the
Request IDs admitted across streams; the relay README states how it ends a
publisher's tracks and treats a closed control stream; -14 is listed as not
implemented. The conformance workflow runs the -18 and -16 independent
decoders beside -22's. Crate docs and descriptions name the three drafts.
joule-code and wai CHANGELOG entries.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

f4a880b48e

• View at this point in history

2026-10-21 12:50:35 -04:00

Transaction Science

Merge origin/main into joule-moq/multi-draft ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

834459299e

• View at this point in history

2026-10-21 12:47:34 -04:00

Transaction Science

joule-moq-relay: a -16 Request ID ahead of one in flight on another stream is admitted ...

-16 §9.1 asks for each new Request ID to be "the next in sequence", but its
SUBSCRIBE_NAMESPACE rides a bidirectional stream of its own while the other
requests ride the control stream, and QUIC does not order one stream against
another. A public relay network's -16 endpoint opened a SUBSCRIBE_NAMESPACE
(ID 1) and sent a PUBLISH_NAMESPACE (ID 3) on the control stream; the 3 came
first and the bridge closed the session. The bridge now admits a new ID of the
peer's parity within the grant and leaves the gap for the one in flight; an ID
seen before still closes the session with INVALID_REQUEST_ID, and one past the
grant with TOO_MANY_REQUESTS. a_raw_16_session sends 4 before 2 and then 4
again.

wai-receipts collects until every object has arrived (by alias, group and
object), not a count of streams: a relay may carry a subgroup on more streams
than its publisher opened, and the count stopped the subscriber before the last
group.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

d2c5dbd483

• View at this point in history

2026-10-21 12:45:13 -04:00

Transaction Science

wai-rs: bearer_receipts — transmission and reconciliation classes, the verdict over a group, the per-receiver bound, offline confirmation (WIP) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

f518786987

• View at this point in history

2026-10-21 12:45:01 -04:00

Transaction Science

joule-moq-relay: the close-after-PUBLISH_DONE test bounds the end well inside the wait ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

632a7d62e2

• View at this point in history

2026-10-21 12:41:11 -04:00

Transaction Science

joule-moq-relay: a publisher's last streams and PUBLISH_DONE survive its leaving ...

Two races met when an interop test client finishes publishing: it sends
PUBLISH_DONE and its last data streams, then closes its control stream (an -18
§3.3 protocol violation) and its session. The relay closed the session on the
control stream's FIN at once, cutting streams still arriving, and its session
clean-up ended the publisher's tracks with GOING_AWAY, racing the PUBLISH_DONE
that had just come in, so subscribers saw GOING_AWAY and a reset stream.

Now a closed control stream closes the session once nothing of the peer's
publishing is left (every track it published ended, every data stream of its
read), or after PUBLISH_DONE_STREAM_WAIT. Session clean-up leaves each track to
its own request stream, which ends it with the PUBLISH_DONE status it read, or
GOING_AWAY; and a PUBLISH_DONE waiting on streams stops waiting once the
publisher's session is gone. Tested at -18 with a session written from -18's
messages, and over -22, -18 and -16 with a close after PUBLISH_DONE.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

d3840db88b

• View at this point in history

2026-10-21 12:40:25 -04:00

Transaction Science

wai: bearer-receipts — one receipt on every bearer; transmission and reconciliation claim classes (spec text) ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

e111604c92

• View at this point in history

2026-10-21 12:34:28 -04:00

Transaction Science

joule-moq-relay: an -18 requester's FIN on a namespace request is its cancellation ...

-18 cancels SUBSCRIBE_NAMESPACE and SUBSCRIBE_TRACKS by "closing the stream
with either a FIN or RESET_STREAM" (§6.1) and withdraws PUBLISH_NAMESPACE by
cancelling the request (§6.2); it has no FIN that leaves a request standing.
-22 has one (§6.4.2.2). An -18 test client that withdraws its namespace with a
FIN saw no NAMESPACE_DONE through the relay. The -18 bridge now reads an -18
requester's FIN on those three requests as a cancellation, and withholds a -22
requester's FIN on them from an -18 peer, which would read it as one. Tested
with an -18 session written from -18's messages, a -22 publisher and a -22
client over -18.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

4becd19bb2

• View at this point in history

2026-10-21 12:26:52 -04:00

Transaction Science

joule-moq-relay: a track published again after TRACK_ENDED is a new instance ...

A publisher that ends its track (PUBLISH_DONE TRACK_ENDED) and a second that
publishes the same track afresh from group 0: the relay kept the first
instance's cache, its Largest Location and which upstream each subgroup came
from, so the second's group 0 was dropped as a duplicate and the subscriber was
told the first's Largest Location. An interop test client that runs a
publish-only test and then a publish-and-subscribe test on the same track met
exactly this. When nobody publishes a track its publisher ended, a new upstream
now starts it clean; a track the DVR store keeps is kept whole, and a track
whose publisher's session dropped (no TRACK_ENDED) keeps its cache.

An upstream's PUBLISH_DONE status is kept while the relay waits for its last
streams, so a session that closes in that wait ends the track with what the
publisher said; and upstream_gone ends a track only for a session that
published it, so the second call for one session is a no-op.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

c6acbd558d

• View at this point in history

2026-10-21 12:19:13 -04:00

Transaction Science

joule-moq-relay: an upstream PUBLISH_DONE waits for the streams its Stream Count names ...

A publisher's PUBLISH_DONE and its data streams are not ordered with each other
(draft-ietf-moq-transport-22 §9.9). The relay ended the track downstream on the
message and dropped the alias, so a stream still in flight was lost: an -18
test client over WebTransport saw PUBLISH_DONE and no object. The relay now
counts each upstream data stream as its reading ends and, after PUBLISH_DONE,
waits until it has read the count, or three seconds; 0 and the unknown count
end at once. publish_done_streams tests the order at -22, -18 (QUIC and
WebTransport) and -16, a count no stream meets, and 0 and 2^64-1.

The -18 and -16 bridges log each message in and out at debug level, and the
interop client answers requests a namespace-only publisher is sent (a
TRACK_STATUS probe) with DOES_NOT_EXIST. scripts/clients.sh runs other
implementations' interop test clients against the relay on loopback;
public.py keeps each run's debug log.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

7f0e2d61f6

• View at this point in history

2026-10-21 07:53:57 -04:00

Transaction Science

joule-moq: -18 and -16 vector corpora with independent decoders; docs for three drafts ...

tests/draft18_vectors.rs and tests/draft16_vectors.rs generate each draft's
corpus (every control message, filters, FETCH types, streams, datagrams,
the drafts' own examples, and negative vectors for what each draft
refuses that a later one reads). moqt18_check.py and moqt16_check.py
decode them from the drafts' text alone. The READMEs table every
difference; moq-streaming-format says which drafts the reference speaks.
joule-moq-interop: the PUBLISH flow, WebTransport without verification,
and inclusion and property survival reported apart.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

c8406197b5

• View at this point in history

2026-10-21 05:48:23 -04:00

Transaction Science

joule-moq-interop: the interop runner's test cases and a WAI receipts scenario ...

A client for any MOQT relay at -22, -18 or -16, with the runner's
test-client interface (TAP 14) and its draft-18 test cases, and
wai-receipts: a WAI track, its receipts track and a catalog through the
relay, every object verified at the subscriber against the publisher's
signed receipts, with --tamper payload|receipt|in-flight to show the check
fails. scripts/local.sh runs it against joule-moq-relay on loopback.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

8d6eaddddd

• View at this point in history

2026-10-21 05:35:54 -04:00

Transaction Science

joule-moq: drafts chosen by this crate's preference; relay tests and client take the draft ...

Draft::select takes the most preferred draft a client offers (-22 first),
as the relay's TLS does. The relay client takes extra Setup Options
(AUTHORITY and PATH for a moqt:// URI), and the relay tests can run any
session at -18 or -16.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

32cffa4086

• View at this point in history

2026-10-21 05:33:13 -04:00

Transaction Science

joule-moq-relay: sessions at -18 and -16 beside -22 ...

The relay offers moqt-22, moqt-18 and moqt-16 by ALPN and by
WT-Available-Protocols, and transport::bridge puts a session of another
draft behind its -22 interface: -18 stream by stream, -16 by routing
each request of its one control stream to a stream of its own (Request ID
renumbering, MAX_REQUEST_ID credit, cancel messages). The client side is
the same wrap. tests/drafts.rs runs the two-publisher scenario with WAI
receipts at -18, at -16 and across mixed drafts, FETCH from the cache at
-18 and -16, a refusal by name, and raw -18 and -16 sessions.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

b1635ebed4

• View at this point in history

2026-10-21 05:26:55 -04:00

Transaction Science

joule-moq: draft-16 codec and its bridge to -22 ...

-16 writes every field with QUIC's integer (RFC 9000 §16), carries every
request and response on one bidirectional control stream by Request ID,
encodes Message Parameters as Key-Value-Pairs, and numbers some codes
differently (PUBLISH_DONE EXPIRED/TOO_FAR_BEHIND, stream reset
UNKNOWN_OBJECT_STATUS). Its module is its own; draft16::bridge maps each
message and object to and from -22, re-encoding the pairs inside
Immutable Extensions.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

fd2047e2f4

• View at this point in history

2026-10-21 05:12:39 -04:00

Transaction Science

joule-moq: draft-18 codec beside -22, and the bridge between them ...

The Draft enum speaks -22 (default), -18 and -16 by ALPN. -18 is a module of
its own: its Setup Options, Message Parameters (SUBSCRIPTION_FILTER),
control messages (GOAWAY's Request ID, FETCH types with an exclusive end,
PUBLISH_BLOCKED, Table 5's PUBLISH_OK), codes, and the data plane, which is
-22's but for End of Timed-Out Range. draft18::bridge maps each message to
and from -22's model and names what one draft cannot say.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

0801396244

• View at this point in history

2026-10-21 05:00:55 -04:00