open-standards/wai/changes/2026-11-09-waism-det-module-probe-jpegai.md
Transaction Science c2e52d1e16
Some checks failed
wai-det-jpegai WAISM float-level module of record / does this change touch it (push) Successful in 25s
repository checks / lockfiles, advisories, tests in CI, workflow hygiene, spec and section references, public text (push) Has been cancelled
WAI breaking changes and the conformance runner / WAI breaking · does this change touch WAI (push) Successful in 8s
WAI breaking changes and the conformance runner / WAI breaking · wire, record and API against main · linux (push) Successful in 50s
WAI breaking changes and the conformance runner / WAI breaking and conform · their tests, and the independent verifiers through wai conform · linux (push) Successful in 7m10s
wai-det-jpegai WAISM float-level module of record / linux · both checkers, F1, F2 on wasmtime (Cranelift, Winch, Pulley) and Wasmi, the planted faults (push) Successful in 13m54s
wai-det-jpegai WAISM float-level module of record / linux-arm64 · both checkers, F1, F2 on wasmtime (Cranelift, Winch, Pulley) and Wasmi, the planted faults (push) Failing after 14m33s
wai-det-jpegai: the JPEG AI exact decoder as the float level's module of record, with F1 and F2 on two instruction sets
One WebAssembly module with the interface of waism §5 and nothing else, decoding
wai.image.jpegai through wai-rs's exact decoder, the integer weight bundle arriving as the set
(the file sequence of norm.json and weights/*.json). Refusals are the capability's codes; a
codestream outside the decoder's configuration traps. Both checkers hold it at the float level
and refuse it R3 at the integer level. record/ keeps the module of record, built on Linux
x86_64 over main at 373fe3594 and named by its SHA-256 (53d54e58…, 666,425 bytes).

corpus.json, written by corpus.py from committed files: the reference codestream over the
pinned jpegai/v1 bundle, to the native exact decoder's pinned RGB8 (dbc494a5…), and three
refusal fixtures. host/ runs the probe on each engine first, in the same process (§6 check 10),
then every case on an instance of its own: wasmtime 50.0.1 with Cranelift, Winch and Pulley,
each with its NaN canonicalisation on and off, and Wasmi 2.0.0 built with `deterministic`.

What ran (rb, slot limiter):
- Linux x86_64 (Framework): F1 holds, the probe's bytes on the four engines with the NaN rule
  set and other bytes on the three without it; the planted probe fails F1. F2: the module of
  record gives every case the corpus's on all four engines, one run digest c7025bbc….
- Linux arm64 (Thor): build.sh with both checkers; F1 holds and the planted probe fails it; F2
  on the module of record and on this host's own build (ffb2c94f…, other bytes): eight runs,
  the same run digest. module-check.sh in full passes.
- The planted decoder (feature planted-nan-branch) gives the pinned RGB8 on the four engines
  the probe holds, another output on the three with the rule unset run past the probe, and the
  probe refuses those engines first (module_probe_mismatch), on both hosts.
- wai registry export --check, wai ops export --check and wai breaking against main: clean.

module-check.sh holds record/ to its manifest and both verdicts; wai-det-jpegai.yml runs the
build, F1, F2 and the planted faults on linux and linux-arm64.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-11-09 18:37:15 -05:00

40 lines
3.2 KiB
Markdown

### WA²ISM™'s float level: the probe and its vectors, and the JPEG AI exact decoder as its module of record
- **The probe of waism §9.3**, `wai-module-check/planted/probe.wasm`, built by `planted/build.py`
from §9.3's table: its twelve operations on operands loaded at run time from a data segment,
each result stored in order, in a memory of one page whose minimum is its maximum. Beside it,
`probe.txt`: each case's operands and the result the deterministic profile prescribes, and the
probe's bytes, the 80 bytes its `wai_run` gives on an engine set to that profile's NaN rule.
Both checkers hold it at the float level and refuse it R3 at the integer level, in
`planted/cases.txt`.
- **`wai-det-jpegai`**, the JPEG AI exact decoder as a module of the float level: one WebAssembly
module with the interface of waism §5 and nothing else that decodes `wai.image.jpegai` through
`wai-rs`'s exact decoder, the decode a native sink runs when it holds the integer weight
bundle. The bundle arrives as the set, the file sequence of `norm.json` and `weights/*.json`.
Refusals are the capability's codes; a codestream outside the decoder's one configuration,
for which the capability's text gives no code, traps. Both checkers hold it at the float
level and refuse it R3 at the integer level. `record/` keeps the module of record, built on
Linux x86_64 and named by its SHA-256 in `record/manifest.json`.
- **The module corpus**, `corpus.json`, written by `corpus.py`: the reference codestream over
the pinned `jpegai/v1` bundle, to the SHA-256 of the RGB8 the native exact decoder gives, and
three refusal fixtures (a member missing, `set_incomplete`; `norm.json` and
`weights/icci.json` not JSON, `model_mismatch`). It does not hold §9.2's grow-refusal
cases.
- **F1.** `host/` runs the probe on wasmtime 50.0.1 with Cranelift, Winch and Pulley, each with
its NaN canonicalisation on and off, and on Wasmi 2.0.0 built with its `deterministic`
feature. With the NaN rule set every engine gives the probe's bytes; with it unset each
wasmtime engine gives other bytes, on Linux x86_64 and Linux arm64.
- **F2.** The module of record decodes the corpus's vector to the native exact decoder's
pinned RGB8, and gives each refusal fixture its code, on the four engines set to the NaN
rule, each run after the probe in the same process, on Linux x86_64 and Linux arm64, and so
does Linux arm64's own build of the source, whose bytes are other: one run digest for every
engine, build and host.
- **The planted faults.** `planted/probe-nan-branch.wasm`, the probe with a branch on whether
each result is a NaN that writes the canonical NaN itself, gives the probe's bytes on every
engine and fails F1. The decoder built with `planted-nan-branch`, a branch on the sign of a
NaN made at run time, decodes to the pinned RGB8 on the engines the probe holds and to
another output on the engine with the NaN rule unset, which the probe refuses first.
- **CI.** `module-check.sh` holds `wai-det-jpegai/record/` to its manifest, at the float level
and refused R3 at the integer level by both checkers, and the corpus to `corpus.py`.
`wai-det-jpegai.yml` runs the build, F1, F2 and the planted faults on Linux x86_64 and Linux
arm64.