open-standards/map
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Transaction Science 2688e2b936
Some checks failed
wai cross-architecture byte-equality / windows-x86_64 (pull_request) Successful in 23s
wai cross-architecture byte-equality / linux-aarch64 (pull_request) Successful in 40s
joule-code conformance gate / Build + round-trip C1-C4 vectors (pull_request) Failing after 1m3s
WAI conformance / cargo-class corpora · windows (pull_request) Successful in 1m13s
WAI conformance / cargo-class corpora · linux-arm64 (pull_request) Successful in 1m8s
wai cross-architecture byte-equality / macos-arm64 (reference) (pull_request) Successful in 1m57s
WAI conformance / cross-arch byte-equality · windows (pull_request) Successful in 23s
jouleclaw public surface must stay documented / Public-surface audit (jouleclaw-rs) (pull_request) Successful in 58s
no-vanity-metrics / Scan committed Markdown for vanity metrics (pull_request) Successful in 3s
standards workspaces build + test / jcp-rs (pull_request) Failing after 12s
WAI conformance / cross-arch byte-equality · linux-arm64 (pull_request) Successful in 39s
standards workspaces build + test / sandbox-rs (pull_request) Successful in 2m1s
wai cross-architecture byte-equality / linux-x86_64 (pull_request) Has been cancelled
WAI conformance / cargo-class corpora · linux (pull_request) Has been cancelled
WAI conformance / cross-arch byte-equality · linux (pull_request) Has been cancelled
WAI conformance / cross-arch byte-equality · macos (pull_request) Has been cancelled
WAI neural decoders end-to-end / synthetic fixtures → Rust decode → reference (±4) (pull_request) Has been cancelled
WAI conformance / cargo-class corpora · macos (pull_request) Has been cancelled
standards workspaces build + test / smart-byte-rs (pull_request) Has been cancelled
deps: cargo update across 18 workspaces
Lockfiles only — newest versions WITHIN the semver ranges the manifests already
declare. No manifest constraint was widened by this commit.

That distinction is load-bearing here. `cargo upgrade`, which rewrites manifests
to the latest major, is precisely what killed smart-byte: rand was pinned to
"0.10" against source written for 0.8, and the crypto stack it sits on
(ed25519-dalek, curve25519-dalek, bls12_381, bulletproofs) all require
rand_core 0.6 — so 0.8 is a ceiling those crates impose, not a preference.
Moving past it means waiting for that ecosystem or migrating 41 call sites of
cryptographic code, and neither belongs in a routine update.

Largest moves: smart-byte 207 packages, openpay 189, jouleclaw 182, eoc 164.

Verified on 1.98.0 with the updated lockfiles — 12 workspaces green:

  smart-byte 616   openpay 1935   joule-code 278   jcp 258   map 220
  sandbox 186      aac 89         joulecontract 82  arl 58    sense 38
  proof 31         joulehook 24

One pre-existing failure is deliberately NOT addressed here: jouledesk's
`the_joule_budget_is_enforced_across_tags` seals two decisions where the budget
permits one. It fails identically on the original lockfile, so it is not a
dependency problem — it is a budget-enforcement defect in the Joule Desk
standard, and a ceiling that seals a receipt for work it refused deserves its
own fix and its own commit rather than burial in a dependency sweep.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
2026-08-26 08:34:28 -04:00
..
conformance Add aac, map, sandbox standards; catalog the standards family 2026-06-07 17:04:36 -04:00
map-rs deps: cargo update across 18 workspaces 2026-08-26 08:34:28 -04:00
spec Add aac, map, sandbox standards; catalog the standards family 2026-06-07 17:04:36 -04:00
vocab map: point at maps.transaction.science (the only site) everywhere 2026-06-07 19:40:49 -04:00
CHANGELOG.md Add aac, map, sandbox standards; catalog the standards family 2026-06-07 17:04:36 -04:00
CONTRIBUTING.md Add aac, map, sandbox standards; catalog the standards family 2026-06-07 17:04:36 -04:00
LICENSE Add aac, map, sandbox standards; catalog the standards family 2026-06-07 17:04:36 -04:00
LICENSE-SPEC Add aac, map, sandbox standards; catalog the standards family 2026-06-07 17:04:36 -04:00
README.md Add aac, map, sandbox standards; catalog the standards family 2026-06-07 17:04:36 -04:00
ROADMAP.md docs: drop vanity test-counts (no-vanity-metrics policy) 2026-06-07 19:00:28 -04:00
SPEC.md Add aac, map, sandbox standards; catalog the standards family 2026-06-07 17:04:36 -04:00

Map

A carrier for place. Range-requestable, signed, energy-attributed, owned by no one.

Map is the geospatial cargo class of the Transaction Science substrate. Where Smart Byte carries value, EOC carries compute, and Joule Code carries coding work, Map carries place — a region of the world at a position, an altitude, an instant, and a fidelity — as a content-addressed, signed tile with its energy cost intrinsic.

A tile is not an image and not an API response. It is a vesicle carrying exactly five things: identity (the BLAKE3 content address of its canonical serialization), a 4D cell key (where, how high, when, and how detailed), provenance (the signed tileset root it was published under, and the author key that signed it), cargo (the payload — terrain, a scalar/vector field, vector features, or 3D Gaussian splats), and a two-part joule cost (measured + estimated, with an honest provenance tag on every reading). Render requests resolve through an explicit energy-tiered fidelity cascade — cache, then a terrain base floor, then fields, then features, then photoreal splats — and return the highest tier present for the cell at or below the requested fidelity, falling back to the floor, which is defined everywhere. Graceful fallback is a property of the standard, not of an implementation.

The substrate is intentionally ownerless: no protocol-level token, permissive licensing on the spec text and reference code, and conformance vectors so any implementer can verify canonicity without a trust relationship with the authors. A conforming reader resolves a cell, verifies it against a signed manifest, renders it, and meters it — against static storage, with no contact with any single company's servers as a condition of operation. Transaction Science is one steward: it publishes the spec, ships a reference implementation, and operates commercial services (capture pipelines, hosted tilesets, a registry) around the substrate — not its proprietor.

The doctrine

The map is a file, not a service. The durable layer of a mapping platform is not tile serving or per-load billing — both are commoditized and both expire. It is the published, signed, dated file that renders forever from dumb storage, measured in joules per resolved cell.

Three consequences, normative in SPEC.md:

  1. The cascade. Every render request resolves through F0:Cache → F1:Base → F2:Field → F3:Feature → F4:Photoreal and returns the highest tier ≤ the requested fidelity that holds data for the cell, falling back to the F1 base floor — which is defined everywhere on the datum, so a covered region never fails to render.
  2. The receipt. Every resolve/decode reports a two-part energy cost in microjoules — measured + estimated — with a Provenance tag (HwShunt | ModelBased | Estimator), sealed as a JCR-1 envelope (canonical det-CBOR + COSE_Sign1/EdDSA — the family's shared signed-receipt format).
  3. No capture. No protocol token. A tileset is a single range-requestable file on dumb storage; reading it requires the bytes and a public key, nothing more. Revisions (a new forecast hour, a new AIRAC cycle) are signed, dated transitions over the manifest root — never in-place mutations.

The 4D cell key

Map's one genuinely new primitive is the address. A tile is keyed by four orthogonal axes — S2 cell (horizontal, Hilbert-ordered), altitude band (signed; band 0 = datum), time bucket (half-open TAI interval; bucket 0 = atemporal), and within-tier LOD. The horizontal axis is what makes a tileset range-requestable; the temporal axis is first-class, which is exactly what 3D Tiles lacks and what weather and flight navigation require. A "map of Tuesday at 14:00Z" is a different, equally addressable region from the same place on Wednesday.

Contents

  • SPEC.md — the normative specification (RFC 2119). The tile cargo, the 4D cell key, canonical serialization, the tileset + manifest, the cascade, and the receipt.
  • spec/ — sub-specifications: the cell key, the tileset container, the manifest + revision chain, and the receipt format.
  • vocab/ — the controlled vocabulary and stable IRIs (LEXICON.md).
  • conformance/ — signed wire vectors. An implementation is conformant if it round-trips these.
  • map-rs/ — the Rust reference library: the protocol crates (schema, cascade, receipt, conformance) plus the ported substrate (index, tiles, orbital, route). This is the lean library a third party implements against — not a renderer.

Reference implementation and consumers

The Rust reference lives in map-rs/. The demonstrator pillar is maps.transaction.science — a WebGPU globe (Rust → WASM + native, on wgpu) that consumes map-rs: a satellite/terrain/weather basemap with live orbital, ADS-B, and AIS entity layers and an AI-native query surface. The demonstrator is a demonstration of the standard, the way the pillars demonstrate the other standards — not the product.

Status

v0.1.0 draft. Specification core published (SPEC.md + spec/). Reference workspace map-rs/: map-schema (the 4D cell key, tile, tileset directory, manifest + revision, content addressing), map-cascade (the F0–F4 fidelity resolver with guaranteed F1 fallback), map-receipt (JCR-1 sealing, interoperable with the family's verifiers), and the map-conformance harness. The substrate crates (map-index from joule-s2 + joule-spatial3d, map-tiles from joule-tiles, map-orbital from joule-orbital, map-route from joule-maps) are being ported from the existing engine; see ROADMAP.md. Not certified for primary navigation (see SPEC §9).

Licence

  • Reference code (map-rs/): Apache-2.0 — see LICENSE.
  • Specification text (SPEC.md, spec/, vocab/): CC-BY-4.0 — see LICENSE-SPEC.