open-standards/wai/http-conformance/falsify/walk-unbounded.patch
Transaction Science 71cb8cbed9 http receipts: falsify the round-2 fixes
Patches (falsify/run.sh) for each fix, each failing the corpus cases it names:
legacy-group-read, walk-unclamped, fetch-unmemoised, fetch-budget-unchecked,
file-cap-unchecked, index-size-unchecked, index-items-uncapped,
index-claims-uncapped, claim-through-any-receipt, ancestor-unrecovered,
step6-skipped, figure-not-held-accepted, energy-context-assumed,
gap-coordinates-unchecked; ancestor-as-object, claim-parent-unfetched,
rcpt-name-unchecked, walk-skipped and walk-unbounded regenerated against the new
receipts.rs. Python mutations groups-from-listed, budget-unchecked and
caps-unchecked added, and the round's legacy-admitted, memo-off, walk-unclamped,
step6-skipped and ancestor-any listed in run.sh in place of ancestor-as-object.

The CLI's stream server now outlasts the deadline, so a client without the index
cap reports the deadline instead; the wall-clock assertion is dropped (the
deadline's own report is what the test reads).

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-07 22:30:00 -04:00

15 lines
722 B
Diff

# must fail: receipts_walk_bound receipts_walk_65
# the parent walk past its bound (receipts::admit_walking)
diff --git a/wai/wai-rs/src/http_binding/receipts.rs b/wai/wai-rs/src/http_binding/receipts.rs
index f2bdba57..7d4eb0a9 100644
--- a/wai/wai-rs/src/http_binding/receipts.rs
+++ b/wai/wai-rs/src/http_binding/receipts.rs
@@ -418,7 +418,7 @@ fn admit_walking(
loop {
// §3 step 3 says `parent_not_held` only of a group that names a parent.
let Some(l) = link else { return Err(stop(fetched, "parent_not_held")) };
- if fetched == bound {
+ if fetched == usize::MAX - bound {
return Err(stop(fetched, "bound"));
}
let bytes = match fetch.get(&l) {