e04d96eba2
wai/wai-audit is the reference collector of stream-audit §12: it verifies each bundle a player posts (wai-rs stream_audit), stores the accepted ones one file per session (a different record of a stored session is refused audit_session_duplicate), takes Event-mode CMCD batches as advisory telemetry, and serves each channel's report signed with its key. Limits per client (an IPv4 address or an IPv6 /64), per route body limits, CORS for the configured page origins. The CLI also verifies a bundle, recomputes a report from a data directory, and checks a served report against its bundles. Its tests post every corpus session and require the corpus's outcome, and require the stored sessions to report exactly the corpus's served reports. web/audit.js is the player integration: it hashes each object with WebCrypto, signs the acknowledgements, claims and session record with WebCrypto's Ed25519, computes the settlement tree root with a one-chunk BLAKE3 of its own, records spans, ads, the log and its CMCD batch. Its Node tests drive it with the corpus's inputs and require the corpus's records byte for byte. adapter-tap.js wraps fetch and XMLHttpRequest for any player; adapter-hlsjs.js wraps a player's loader class. Co-Authored-By: Claude Opus 5.5 <[email protected]>
2 lines
27 B
Text
2 lines
27 B
Text
e2e/node_modules/
|
|
e2e/out/
|