route-record: version 3 states what a hop delivered by its count and root, so a hop may deliver any number of objects #563

Merged

dcharlot merged 4 commits from wai/route-outputs into main 2026-11-02 03:22:10 -05:00

Conversation 0 Commits 4 Files changed 15 +2047 -85

2026-11-01

Transaction Science

joule-moq-ingest: the 20 Mbit/s SRT test gives its link a window of two seconds ...

`contribution_at_twenty_megabits_passes_the_door` is about the relay's door holding
groups of megabytes, but it ran its link at a 300 ms window. On the loaded linux-arm64
runner (#563's head) two of 120 access units went missing mid-stream (the first at 29):
a stall longer than the window has the gateway drop a packet as too late (§4.6), which
corrupts the access unit it carried.

The test now calls with a 2 s window, closes once the gateway has acknowledged every
packet (as the neighbouring test does) rather than after a fixed linger, and checks the
link record before comparing frames: the window is the caller's, and no packet was dropped
as too late, so a recurrence names its cause instead of a missing frame.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

189b9a92f7

• View at this point in history

2026-11-01 20:53:47 -05:00

Transaction Science

joule-contrib: the SRT encryption test checks the whole payload, not its first byte ...

`a_wrapped_key_unwraps_under_the_passphrase_only` encrypted 1316 bytes of 0x47 under
a fresh random key and asserted only that the first byte changed: AES-CTR's keystream
byte is 0 one time in 256, so the test failed that often (linux-arm64, on #563's head).
It now asserts the ciphertext differs from the plaintext as a whole.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

5c4759516c

• View at this point in history

2026-11-01 13:31:28 -05:00

Transaction Science

CHANGELOG: route_record::Accepted::delivered, acknowledged as breaking ...

The accepted outcome of a record of version 3 carries what its served hop
delivered, by its count and root; a struct literal or exhaustive pattern of
Accepted outside the crate adds the field.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

5d8e2f378c

• View at this point in history

2026-11-01 09:18:53 -05:00

Transaction Science

route-record: version 3 states what a hop delivered by its count and root ...

A record of version 2 lists the served attempt's outputs, at most 1024, and a
package of a long title holds an object per piece and rung, thousands of them:
its record could not be stated, and seal_delivered sealed one WAI's verifier
refuses.

Version 3, on a price book of version 2, states `delivered`: the count of the
objects and their commitment, the root the hop's receipt already names. The
record is the same size whatever was delivered, and the receipt is held to the
root. An object is shown to be one of them by its inclusion proof (§6.1),
held as jwp-receipts holds an object's: the index below the count, exactly
ceil(log2 count) siblings, the walk from its leaf ending at the root.

The receipt ledger reads a job source under a record of version 3: each output
gives `proof`, and is one its hop delivered when the proof holds; a decode of
version 5 is held to its places and its count. Versions 1 and 2 of the record
read and verify as before. Routes 109 to 126 vectors, ledger 108 to 120; both
second implementations read version 3, the ledger's checking every proof with
the route verifier's inclusion_proof.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

11267b7b4b

• View at this point in history

2026-11-01 09:03:18 -05:00