open-standards/wai/extensions
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Transaction Science 161d147767
Some checks failed
wai-quantum WebGPU member / member · discrete GPU, Vulkan (jetson-hub) (pull_request) Successful in 9m59s
spec citations resolve / Code cites no section its SPEC lacks (pull_request) Successful in 4s
standards workspaces build + test / arl-rs (pull_request) Successful in 1m12s
standards workspaces build + test / eoc-rs (pull_request) Successful in 2m15s
standards workspaces build + test / jcp-rs (pull_request) Successful in 1m48s
standards workspaces build + test / joule-ui-rs (pull_request) Successful in 1m10s
standards workspaces build + test / joulehook-rs (pull_request) Successful in 1m13s
standards workspaces build + test / proof-rs (pull_request) Successful in 1m35s
standards workspaces build + test / sense-rs (pull_request) Successful in 1m14s
standards workspaces build + test / sandbox-rs (pull_request) Successful in 2m35s
no-vanity-metrics / Scan committed Markdown for vanity metrics (pull_request) Has been cancelled
no-vanity-metrics / WAI public text names no comparison (pull_request) Has been cancelled
no-vanity-metrics / WAI public text names no company or product (pull_request) Has been cancelled
no-vanity-metrics / No new orphan source files (pull_request) Has been cancelled
standards workspaces build + test / jouleclaw-rs (pull_request) Has been cancelled
standards workspaces build + test / aac-rs (pull_request) Has been cancelled
standards workspaces build + test / joule-code-rs (pull_request) Has been cancelled
standards workspaces build + test / joulecontract-rs (pull_request) Has been cancelled
standards workspaces build + test / jouledesk-rs (pull_request) Has been cancelled
standards workspaces build + test / map-rs (pull_request) Has been cancelled
standards workspaces build + test / mesh-rs (pull_request) Has been cancelled
standards workspaces build + test / openpay (pull_request) Has been cancelled
standards workspaces build + test / macOS energy backends (pull_request) Has been cancelled
tests in CI / every test file is run by a job or listed with its reason (pull_request) Has been cancelled
WAI conformance / cargo-class corpora · linux-arm64 (pull_request) Has been cancelled
WAI conformance / cargo-class corpora · macos (pull_request) Has been cancelled
WAI conformance / quantum core and corpus under wasm32-wasip2 (wasmtime) (pull_request) Has been cancelled
WAI conformance / v2 vocabulary · manifests validate as stated (pull_request) Has been cancelled
WAI conformance / independent verifiers · claims, JWP, key discovery and integer payloads (Python) (pull_request) Has been cancelled
WAI conformance / delivery telemetry · CMCD and CMSD against an independent library (pull_request) Has been cancelled
WAI conformance / cross-arch byte-equality · linux (pull_request) Has been cancelled
WAI conformance / cross-arch byte-equality · linux-arm64 (pull_request) Has been cancelled
WAI conformance / cross-arch byte-equality · macos (pull_request) Has been cancelled
WAI conformance / codec wrappers · fuzz smoke, text decode limits, C entry points, provenance, the semantic path (pull_request) Has been cancelled
WAI conformance / C2PA manifest emission · signed, read back, validated (pull_request) Has been cancelled
WAI energy receipts / energy receipts · linux (pull_request) Has been cancelled
WAI energy receipts / energy receipts · linux-arm64 (pull_request) Has been cancelled
WAI energy receipts / energy receipts · macos (pull_request) Has been cancelled
WAI HTTP delivery / WAI HTTP · does this change touch it (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify mutations 0/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify mutations 1/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify mutations 2/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify patches 0/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify patches 1/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify patches 2/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · every patch and mutation in exactly one shard (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · verified both ways, and the differential (pull_request) Has been cancelled
WAI HTTP delivery / cache rules · controls and labelled caches (pull_request) Has been cancelled
WAI JPEG-AI whole decode (pinned inputs, required) / fetch pinned JPEG-AI inputs → whole decode + pixel hash, required (pull_request) Has been cancelled
WAI neural sink gates / model-free refusals of the neural sink (pull_request) Has been cancelled
wai-pack / wai-pack · does this change touch it (pull_request) Has been cancelled
wai-pack / wai-pack · linux (pull_request) Has been cancelled
wai-pack / wai-pack · linux-arm64 (pull_request) Has been cancelled
wai-pack / wai-pack · macos (pull_request) Has been cancelled
wai-pack / wai-pack · independent verifier (Python) (pull_request) Has been cancelled
wai-pack / wai-pack · the floor through a media prober (pull_request) Has been cancelled
wai-pack / wai-pack · dependency licences (pull_request) Has been cancelled
wai-quantum WebGPU member / shader checks · browser build · wasip2 inertness · MSRV (pull_request) Has been cancelled
wai-quantum WebGPU member / member · software Vulkan (linux) (pull_request) Has been cancelled
wai-quantum WebGPU member / member · Metal (macos) (pull_request) Has been cancelled
wai-quantum WebGPU member / member · browser WebGPU (macos) (pull_request) Has been cancelled
WAI section references / cited sections exist (pull_request) Has been cancelled
WAI mbt2018_mean integer decode (regenerated vectors) / regenerate mbt2018_mean integer vectors → Rust decode, required (pull_request) Has been cancelled
wai-web reach builds / wai-web reach · does this change touch it (pull_request) Has been cancelled
wai-web reach builds / wai-web reach builds · the package of record, every output as recorded (pull_request) Has been cancelled
wai-web reach builds / wai-web reach builds · this tree's wai-web, every rung on its engine line (pull_request) Has been cancelled
wai-web wasm32 / wai-web wasm32 build · corpus, menu and writers (pull_request) Has been cancelled
workflow hygiene / every workflow supersedes its own queue (pull_request) Has been cancelled
lockfiles / every Cargo.lock is current (pull_request) Has been cancelled
WAI conformance / cargo-class corpora · linux (pull_request) Has been cancelled
standards workspaces build + test / smart-byte-rs (pull_request) Has been cancelled
wai: reader limits for the extension formats' durations
A score, haptic signal, audio scene, splat4d clip or film declares its length in its
contract, and rendering allocates in proportion: a score's mixdown allocated `duration`
samples outright, a haptic channel `duration` × 2 bytes, a scene's stereo mix 20 bytes a
sample, and the splat4d and film receipts a hash a frame. Nothing bounded the
declaration, so a few bytes could ask a renderer for more memory than any machine has.
SECURITY.md recorded it as a gap when the fuzzing PR found the reader-side reservations.

Each extension's contract section (score, haptics, spatial-audio, volumetric,
linear-film and its reel) now has a reader limit shared with SPEC §2, through a new
always-on module `wai::limits`:
- score and haptics: `duration × channels` at most 2^27 samples;
- audio scene: `duration` at most 2^26, so the stereo floor is at most 2^27 samples;
- splat4d `n_frames`, film `frames`, a reel's shots together: at most 2^20 frames.
A reader may refuse past them (`duration_too_long`) when it reads the contract, before
anything is rendered; a conforming encoder writes none.

The film schedule's tick, `start_tick + f × ticks_per_frame`, wrapped in release builds
and panicked in debug ones. A reader must now refuse a schedule whose last tick passes
2^64 - 1 (a film's, and each shot's of a reel); `Film::frame_tick` saturates and
`Reel::frame_tick` uses checked arithmetic.

tests/extension_duration_limits.rs rewrites a committed vector of each format to declare
exactly its limit (it reads) and one past it (refused by name), and checks the film
schedule ending at 2^64 - 1 (reads) and past it (refused). Falsified: with the readers
as they were, all three tests fail. The world, audio, haptic, splat4d, score and film
corpora verify unchanged; the 275 lib tests with the container features pass. CI runs
the test beside container_reservations on every leg.

SECURITY.md drops the gap and keeps the one this exposes: replaying a world to a far
tick costs time in proportion (memory is bounded, time is not).

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-14 11:07:16 -04:00
..
avatars.md SPEC §7 Signatures: the one Ed25519 rule, cited by the receipt extensions 2026-10-07 14:39:04 -04:00
capability-constraints.md wai: one registry table, candidate capabilities, public-text checks 2026-09-30 22:38:09 -04:00
confidentiality.md wai: SECURITY.md, SPEC §2 and §6.5 say what holds 2026-10-09 17:16:04 -04:00
delivery-telemetry.md wai: the reconstruct-session claim class, its authorities and its figure profile (text) 2026-10-06 08:55:52 -04:00
derived-tracks.md wai: a Prior may declare its artifact's wire form; register NNC and the derived-track operations 2026-09-28 18:38:59 -04:00
determinism-tiers.md wai: SECURITY.md, SPEC §2 and §6.5 say what holds 2026-10-09 17:16:04 -04:00
energy-binding.md wai: jwp-receipts — chains per (key, track), inclusion-verified, the stage and delivery-gap classes 2026-10-06 06:01:26 -04:00
energy-measurement.md wai: ModelBased means a model calibrated on the host it describes 2026-10-11 22:57:23 -04:00
graphics-vector.md graphics-vector 5.4: the worked example states each block's string and writing mode 2026-10-13 02:46:34 -04:00
haptics.md wai: reader limits for the extension formats' durations 2026-10-14 11:07:16 -04:00
http-delivery.md Merge wai/d1-record-true (with #205, #197 and main) into wai/w4-4-staged-packages 2026-10-10 17:40:02 -04:00
integer-operators.md D2c M1 gate 6: int_synth decodes through wai-ops; the direct decode is test-only 2026-10-13 09:52:36 -04:00
integer-payloads.md D2c M1 gate 6: int_synth decodes through wai-ops; the direct decode is test-only 2026-10-13 09:52:36 -04:00
interactive-worlds.md SPEC §7 Signatures: the one Ed25519 rule, cited by the receipt extensions 2026-10-07 14:39:04 -04:00
jwp-receipts.md Merge main (at db5b8094, with W5-4 #187) into wai/w3-3-http-receipts 2026-10-08 10:26:02 -04:00
linear-film.md wai: reader limits for the extension formats' durations 2026-10-14 11:07:16 -04:00
moq-streaming-format.md wai: moq-streaming-format §4.1 — a FETCH of the gap may come in any order; each group linking to either end is history 2026-10-06 12:13:36 -04:00
oer-receipts.md wai: typed receipt classes and the soft binding class, reading OER through the OER module 2026-09-30 01:42:45 -04:00
packaging.md wai-pack live keeps no record per file: listing lines on disk, open objects only 2026-10-09 15:28:03 -04:00
prior-carriage.md wai generate.spectral: the model is the parameter set, so the envelope carries no pin; inspect and unwrap report the payload 2026-10-09 17:08:26 -04:00
provenance.md wai-web reach: the provenance vector's signer id is a label 2026-10-10 04:27:29 -04:00
quantum-ops.md wai: int_synth's weights are quantised after float training, and two engine paths moved 2026-10-09 11:55:53 -04:00
quantum-sim.md Merge wai/reach-builds (with #197 and main) into wai/d1-record-true 2026-10-10 17:35:03 -04:00
reconstruction-binding.md wai: state what each determinism tier guarantees, and make replicate mean it 2026-09-28 18:25:52 -04:00
score.md wai: reader limits for the extension formats' durations 2026-10-14 11:07:16 -04:00
spatial-audio.md wai: reader limits for the extension formats' durations 2026-10-14 11:07:16 -04:00
staged-delivery.md wai: stage explode gates on capability; the §4.1 sentence scoped; the caller-offers case named 2026-10-08 01:27:23 -04:00
staged-measurement.md wai: a refinement's own delivery timeout in the staged delivery simulator 2026-10-08 14:21:27 -04:00
state-feeds.md SPEC §7 Signatures: the one Ed25519 rule, cited by the receipt extensions 2026-10-07 14:39:04 -04:00
task-fidelity.md wai: state what each determinism tier guarantees, and make replicate mean it 2026-09-28 18:25:52 -04:00
ternary-tt.md wai: int_synth's weights are quantised after float training, and two engine paths moved 2026-10-09 11:55:53 -04:00
transparency.md wai: key discovery, signing authority and module revocation 2026-10-01 07:12:20 -04:00
unidirectional-delivery.md wai: key discovery, signing authority and module revocation 2026-10-01 07:12:20 -04:00
volumetric.md wai: reader limits for the extension formats' durations 2026-10-14 11:07:16 -04:00