open-standards/wai/live-conformance/audience/README.md
Transaction Science 41510d35ae
Some checks failed
wai-quantum energy-landscape jobs / does this change touch it (push) Successful in 12s
WAI breaking changes and the conformance runner / WAI breaking · does this change touch WAI (push) Successful in 22s
wai-audit collector and player integration / does this change touch it (push) Successful in 19s
wai-fleet service / does this change touch it (push) Successful in 21s
joule-moq-web browser client / joule-moq-web · does this change touch it (push) Successful in 23s
joule-moq-remote host agent / joule-moq-remote · does this change touch it (push) Successful in 33s
wai-sink-swift native sink package / does this change touch it (push) Successful in 23s
WAI Studio / does this change touch it (push) Successful in 18s
wai-sink-android native sink library / does this change touch it (push) Successful in 47s
wai-quantum for JavaScript / does this change touch it (push) Successful in 1m0s
wai-app and Create / wai-app · does this change touch it (push) Successful in 1m2s
wai-key-proxy / does this change touch it (push) Successful in 1m2s
WAI operation catalogue / does this change touch it (push) Successful in 1m3s
joule-moq-room room service / joule-moq-room · does this change touch it (push) Successful in 1m9s
wai-ledger service / does this change touch it (push) Successful in 1m2s
wai-quantum studio and desktop / does this change touch it (push) Successful in 1m2s
wai-fleet service / service · macos (push) Successful in 55s
wai-app and Create / wai-app · tests, clippy, the line language's verifier (linux) (push) Successful in 51s
joule-moq-remote host agent / joule-moq-remote, every target (macos) (push) Successful in 1m25s
wai-audit collector and player integration / collector, player integration and the browser end to end · macos (push) Successful in 1m35s
WAI breaking changes and the conformance runner / WAI breaking · wire, record and API against main · linux (push) Successful in 1m48s
wai-key-proxy / proxy · linux (push) Successful in 1m41s
WAI Studio / the catalogue's actions, the unit tests and the core · linux (push) Successful in 2m0s
wai-ledger service / service · macos (push) Successful in 56s
wai-fleet service / service · linux (push) Successful in 2m32s
wai-ledger service / service · linux (push) Successful in 2m13s
wai-audit collector and player integration / collector · linux (push) Successful in 2m57s
wai-quantum for JavaScript / javascript · linux (push) Successful in 4m8s
joule-moq-remote host agent / joule-moq-remote, every target (linux-arm64) (push) Has been cancelled
joule-moq-room room service / joule-moq-room, every target (push) Has been cancelled
repository checks / lockfiles, advisories, tests in CI, workflow hygiene, spec and section references, public text (push) Has been cancelled
joule-moq-web browser client / joule-moq-web · browser end-to-end (macos) (push) Has been cancelled
wai-app and Create / wai-app · Create, browser end-to-end (macos) (push) Has been cancelled
wai-quantum energy-landscape jobs / the same bits · linux-arm64 (push) Has been cancelled
wai-quantum energy-landscape jobs / the same bits · macos (push) Has been cancelled
wai-quantum studio and desktop / studio · browser (push) Has been cancelled
wai-sink-android native sink library / the JNI layer and the platform-free half on the host JVM · linux-arm64 (push) Has been cancelled
WAI breaking changes and the conformance runner / WAI breaking and conform · their tests, and the independent verifiers through wai conform · linux (push) Successful in 5m13s
wai-quantum studio and desktop / desktop app · macos (push) Has been cancelled
wai-sink-android native sink library / every ABI, the AAR, and the instrumented tests in a headless emulator · macos (push) Has been cancelled
wai-quantum energy-landscape jobs / the module under wasm32-wasip2 (wasmtime) (push) Has been cancelled
wai-sink-swift native sink package / libwai slices, desktop tests, simulator tests · macos (push) Has been cancelled
wai-quantum energy-landscape jobs / native against WebAssembly, over many seeds (push) Has been cancelled
wai-quantum studio and desktop / desktop app · windows (push) Has been cancelled
WAI Studio / Studio in Chromium and Firefox · macos (push) Has been cancelled
WAI operation catalogue / the catalogue and every door · linux (push) Has been cancelled
WAI Studio / Studio in WebKit · linux (push) Has been cancelled
wai-quantum studio and desktop / desktop app · linux (push) Has been cancelled
wai-quantum energy-landscape jobs / reader, kernels, answers and the stated result · linux, release (push) Has been cancelled
wai: audience decisions and territories — blackouts decided from a location aggregated in the session, and where a publisher may be shown
extensions/audience-decision.md registers two route-record documents, each signed in its
canonical form under its own domain.

`wai.video.audience` (`wai-audience-decision`): a decider's signed decision of whether the
sessions in one region may be shown a programme over a span, under the blackouts in force. Each
blackout is named by the id a session class carries (http-delivery Appendix H `blackouts`) and
lists its regions in rung-price §2's region codes, with the programme shown in its place. A
session aggregates its own location before it leaves the session: to the one listed code that
holds it, to outside, or to unresolved (no location, or a country of which only subdivisions are
listed); the aggregation decides exactly what the location would. A decision whose evidence holds
anything else (coordinates, a postal code, a session's identifier) or a region finer than the
aggregation gives is refused `audience_location_not_aggregated`; one whose region the blackouts
neither list nor hold, `audience_region_not_in_set`. The blackouts applied (every one, unresolved),
the verdict (show, withhold, or alternate when all that apply name one programme) and that
programme are recomputed; a session class of the programme carries the applied set as its
`blackouts` and the region's country as its `geo`, and a verifier given both states the class's
hash.

`wai.delivery.territory` (`wai-territory`): a publisher's signed statement of where its content may
be shown (everywhere, only in some regions, everywhere but some). Its latest statement stands
alone; a lapsed or contradicted latest revives none. The territory (within, outside,
undetermined, or unstated with its reason) is reported beside a server key's placement, which
cache-authority §4.4 computes from its own inputs and no statement changes; a statement that names
servers, nodes, origins, roles or may_sign is refused `territory_scopes_serving`. cache-authority
§4.3 and §4.4 are unchanged; §4.4 gains a paragraph saying so.

The reference is the `audience_decision` module of wai-rs (feature `audience_decision`); the
corpus is live-conformance/audience/ (13 aggregations, 67 decisions, 17 classes, 39 statements,
32 territories, 10 placements), and audience_decision_verify.py is its second implementation:
178 cases agree, 21 of 21 mutated copies fail and 34 of 34 weakened verifiers are caught.
Twelve faults planted in the reference each fail its tests: the evidence's extra-member check and
its finer-region check, rule 6 (a region not the blackouts'), the serving-member check and
`may_sign` among its members, a placement refused beside an outside territory, a decision's and a
statement's signature verified without the domain, over the text as written and under the other
record's domain, an unresolved session read as outside, and a lapsed statement letting an earlier
one stand.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-11-09 19:55:54 -05:00

2.6 KiB

live-conformance/audience — audience decisions and territories

The corpus of extensions/audience-decision.md §8, in one file, vectors.json.

Provenance. Generated here by wai_audience_decision_vectors gen (wai-rs, feature audience_decision), from Ed25519 keys on seeds of one byte repeated 32 times and constant instants; no input from outside this repository. Every region is an ISO 3166-1 user-assigned code (XA, XB, …) or a subdivision of one, and names no place.

keys names every key by its role, as 64 lowercase hexadecimal digits: the decider and another, the publishers of the territory statements, the servers the placements place (server_c1, active with cache/serve; server_c2, in no log; server_c3, revoked; server_c8, listed with delivery-gap alone), the operator's key log root, and small_order, the identity point.

  • aggregations (§4.3) are each blackouts and a session's location (a region code or null); outcome is the evidence it aggregates to, region and resolved.
  • decisions (§4.4 to §4.6) are each a decision's text; outcome is read, with its digest, verdict, applied and alternate, or refuse and its reason.
  • classes (§4.7) are each a decision's text and a session class (http-delivery Appendix H); outcome is consistent with the class's session_class_hash, or refuse with its reason and, for audience_class_mismatch, the member that differs.
  • statements (§5.2, §5.3) are each a territory statement's text; outcome is read, with its digest, publisher and show, or refuse and its reason.
  • territories (§5.4, §5.5) are each texts, a publisher, the receivers' region (or null) and the instant at_us; outcome.territory is the territory as §5.5 writes it.
  • placements (§5.6) are each a server key, an instant at_ms, the heads by origin, a publisher, a region and texts; outcome is the placement as cache-authority §4.4 writes it and the territory beside it.

Everything is synthetic: keys attest nothing. Each case states the outcome it was written to have, declared in the generator and never copied from a verifier.

wai_audience_decision_vectors verify and tests/audience_decision.rs check that the file regenerates byte for byte and that wai-rs reaches every stated outcome. ../audience_decision_verify.py is the second implementation, written from the extension's text, which also mutates copies of the corpus and drops each of its own checks in turn and requires each to be caught.