open-standards/map
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Transaction Science 84768074ca
Some checks failed
energy meters on real hardware / RAPL and NVML on jetson-hub (push) Has been cancelled
energy meters on real hardware / sink decode table · RAPL on jetson-hub (NVML surveyed) (push) Has been cancelled
energy meters on real hardware / sink decode table · per-task energy and the GPU rail on macOS (push) Has been cancelled
repository checks / lockfiles, advisories, tests in CI, workflow hygiene, spec and section references, public text (push) Has been cancelled
jouleclaw public surface must stay documented / Public-surface audit (jouleclaw-rs) (push) Has been cancelled
joule-code conformance gate / joule-moq-relay, its own energy on a counter (macos) (push) Successful in 2m15s
wai-app and Create / wai-app · does this change touch it (push) Successful in 1m45s
wai-app and Create / wai-app · tests, clippy, the line language's verifier (linux) (push) Has been cancelled
wai-app and Create / wai-app · Create, browser end-to-end (macos) (push) Has been cancelled
joule-code conformance gate / Build + round-trip C1-C4 vectors (push) Successful in 5m43s
joule-code conformance gate / joule-moq-ingest, every target (push) Has been cancelled
joule-code conformance gate / joule-moq-relay, every target (push) Has been cancelled
Every text that states the IOReport liveness rule states it as the meters apply it
The meters count an IOReport interval only within three of the probe's ticks, and
the texts that state the rule said nothing of it, so an implementation following
any of them would call a lump-refreshed rail live once load stretched its intervals.
Each now says what an interval is (from one sample in hand to the next), that only
one no longer than three of the probe's ticks (75 ms at its 25 ms tick) counts, that
a longer one counts as nothing (not among the intervals, not as an advance, not
towards the 300 ms), and that the 300 ms is the summed length of the intervals that
count.

The normative clauses in arl/ARL-S.md, jcp/SPEC.md, joule-code/spec/receipt.md,
joule-ui/SPEC.md, jouleclaw/SPEC.md, JCR-1-spec.md, map/spec/receipt.md,
mesh/SPEC.md (a block quote), proof/SPEC.md and sense/SPEC.md; proof-schema's
quotation of proof/SPEC.md's; jouleclaw-energy's conformance README; and the proof
and sandbox READMEs, which say the cap is IOReport's alone. Map's and Joule Code's
unreleased changelog entries, which record the rule as it was added, are amended,
since neither release has gone out. No wire or conformance-vector change.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-11-07 08:20:02 -05:00
..
conformance Add aac, map, sandbox standards; catalog the standards family 2026-06-07 17:04:36 -04:00
map-rs Cargo: no minimum-supported-version floor, because the policy is latest stable 2026-11-03 17:42:20 -05:00
spec Every text that states the IOReport liveness rule states it as the meters apply it 2026-11-07 08:20:02 -05:00
vocab map: point at maps.transaction.science (the only site) everywhere 2026-06-07 19:40:49 -04:00
CHANGELOG.md Every text that states the IOReport liveness rule states it as the meters apply it 2026-11-07 08:20:02 -05:00
CONTRIBUTING.md Add aac, map, sandbox standards; catalog the standards family 2026-06-07 17:04:36 -04:00
LICENSE Add aac, map, sandbox standards; catalog the standards family 2026-06-07 17:04:36 -04:00
LICENSE-SPEC Add aac, map, sandbox standards; catalog the standards family 2026-06-07 17:04:36 -04:00
README.md Add aac, map, sandbox standards; catalog the standards family 2026-06-07 17:04:36 -04:00
ROADMAP.md docs: drop vanity test-counts (no-vanity-metrics policy) 2026-06-07 19:00:28 -04:00
SPEC.md specs: a vendor counter is a hardware reading only while it is demonstrably live 2026-10-01 01:10:36 -04:00

Map

A carrier for place. Range-requestable, signed, energy-attributed, owned by no one.

Map is the geospatial cargo class of the Transaction Science substrate. Where Smart Byte carries value, EOC carries compute, and Joule Code carries coding work, Map carries place — a region of the world at a position, an altitude, an instant, and a fidelity — as a content-addressed, signed tile with its energy cost intrinsic.

A tile is not an image and not an API response. It is a vesicle carrying exactly five things: identity (the BLAKE3 content address of its canonical serialization), a 4D cell key (where, how high, when, and how detailed), provenance (the signed tileset root it was published under, and the author key that signed it), cargo (the payload — terrain, a scalar/vector field, vector features, or 3D Gaussian splats), and a two-part joule cost (measured + estimated, with an honest provenance tag on every reading). Render requests resolve through an explicit energy-tiered fidelity cascade — cache, then a terrain base floor, then fields, then features, then photoreal splats — and return the highest tier present for the cell at or below the requested fidelity, falling back to the floor, which is defined everywhere. Graceful fallback is a property of the standard, not of an implementation.

The substrate is intentionally ownerless: no protocol-level token, permissive licensing on the spec text and reference code, and conformance vectors so any implementer can verify canonicity without a trust relationship with the authors. A conforming reader resolves a cell, verifies it against a signed manifest, renders it, and meters it — against static storage, with no contact with any single company's servers as a condition of operation. Transaction Science is one steward: it publishes the spec, ships a reference implementation, and operates commercial services (capture pipelines, hosted tilesets, a registry) around the substrate — not its proprietor.

The doctrine

The map is a file, not a service. The durable layer of a mapping platform is not tile serving or per-load billing — both are commoditized and both expire. It is the published, signed, dated file that renders forever from dumb storage, measured in joules per resolved cell.

Three consequences, normative in SPEC.md:

  1. The cascade. Every render request resolves through F0:Cache → F1:Base → F2:Field → F3:Feature → F4:Photoreal and returns the highest tier ≤ the requested fidelity that holds data for the cell, falling back to the F1 base floor — which is defined everywhere on the datum, so a covered region never fails to render.
  2. The receipt. Every resolve/decode reports a two-part energy cost in microjoules — measured + estimated — with a Provenance tag (HwShunt | ModelBased | Estimator), sealed as a JCR-1 envelope (canonical det-CBOR + COSE_Sign1/EdDSA — the family's shared signed-receipt format).
  3. No capture. No protocol token. A tileset is a single range-requestable file on dumb storage; reading it requires the bytes and a public key, nothing more. Revisions (a new forecast hour, a new AIRAC cycle) are signed, dated transitions over the manifest root — never in-place mutations.

The 4D cell key

Map's one genuinely new primitive is the address. A tile is keyed by four orthogonal axes — S2 cell (horizontal, Hilbert-ordered), altitude band (signed; band 0 = datum), time bucket (half-open TAI interval; bucket 0 = atemporal), and within-tier LOD. The horizontal axis is what makes a tileset range-requestable; the temporal axis is first-class, which is exactly what 3D Tiles lacks and what weather and flight navigation require. A "map of Tuesday at 14:00Z" is a different, equally addressable region from the same place on Wednesday.

Contents

  • SPEC.md — the normative specification (RFC 2119). The tile cargo, the 4D cell key, canonical serialization, the tileset + manifest, the cascade, and the receipt.
  • spec/ — sub-specifications: the cell key, the tileset container, the manifest + revision chain, and the receipt format.
  • vocab/ — the controlled vocabulary and stable IRIs (LEXICON.md).
  • conformance/ — signed wire vectors. An implementation is conformant if it round-trips these.
  • map-rs/ — the Rust reference library: the protocol crates (schema, cascade, receipt, conformance) plus the ported substrate (index, tiles, orbital, route). This is the lean library a third party implements against — not a renderer.

Reference implementation and consumers

The Rust reference lives in map-rs/. The demonstrator pillar is maps.transaction.science — a WebGPU globe (Rust → WASM + native, on wgpu) that consumes map-rs: a satellite/terrain/weather basemap with live orbital, ADS-B, and AIS entity layers and an AI-native query surface. The demonstrator is a demonstration of the standard, the way the pillars demonstrate the other standards — not the product.

Status

v0.1.0 draft. Specification core published (SPEC.md + spec/). Reference workspace map-rs/: map-schema (the 4D cell key, tile, tileset directory, manifest + revision, content addressing), map-cascade (the F0–F4 fidelity resolver with guaranteed F1 fallback), map-receipt (JCR-1 sealing, interoperable with the family's verifiers), and the map-conformance harness. The substrate crates (map-index from joule-s2 + joule-spatial3d, map-tiles from joule-tiles, map-orbital from joule-orbital, map-route from joule-maps) are being ported from the existing engine; see ROADMAP.md. Not certified for primary navigation (see SPEC §9).

Licence

  • Reference code (map-rs/): Apache-2.0 — see LICENSE.
  • Specification text (SPEC.md, spec/, vocab/): CC-BY-4.0 — see LICENSE-SPEC.