open-standards/wai/wai-web/demo
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Transaction Science aeccbd41e1 int_world gate 2: the renderer through world/1, beside the direct one; every golden through the lowering
int_world::legacy holds the direct renderer, unchanged; the crate's int_world
functions are still it (the switch is gate 6). int_world::ops::World renders
through the loaded set: step, render, plan, decode_planes, decode_deltas,
move_row (dequantize(d, afrac, 0)), and the free decode_planes, decode_deltas
and decode. Before the first frame: every row carries A values
(model_mismatch), z_0 is [C, lat, lat], and T and g_s plan on it, T giving
the shape back.

tests/int_world_ops.rs: both committed vectors render through the lowering
to the direct renderer's frames and to every golden (the nine frame and the
clip SHA-256s of the sidecars, the export's FNV-1a frame and clip hashes),
the one agent vector by rows, moves and action indices alike, and one step
and one frame at a time.

wai-web: demo/verify_int_world_wasm.mjs, run in wai-web-wasm.yml: WorldModel
in wasm32 renders both vectors frame by frame to their sidecars' SHA-256s.

Green (build host): int_world_ops debug and release, int_world, int_world2;
wai-web wasm32 release + wasm-bindgen 0.2.127, verify_int_world_wasm.mjs
under Node: step, stepDelta, stepPlanes (one agent) and stepPlanes (two
agents) to clips e97bad20... and 8caa2540....

Falsified (Part 3.5), each restored with git:
- leaky truncates toward zero (interp k_leaky): int_world_ops red, "world:
  frames [1, 2, 3, 4, 5, 6, 7, 8] through the lowering differ from the direct
  renderer's"; frame 0 untouched; the direct goldens int_world, int_world2
  green (pre-switch).
- world/1 builds three planes for a two agent T (a = 3): the two agent golden
  red, "world2: ModelMismatch: T and g_s do not lower by world/1 ...", after
  the one agent vector passed; wai-ops world_sets_reproduce_every_frame red.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-15 23:42:23 -04:00
..
audio wai: interactive + temporal cargo classes, provenance, telepresence 2026-06-13 23:16:42 -04:00
int_synth wai-web: integer-exact neural decode in the browser, no ML runtime 2026-06-21 05:53:41 -04:00
vectors wai: interactive + temporal cargo classes, provenance, telepresence 2026-06-13 23:16:42 -04:00
audio.html wai: interactive + temporal cargo classes, provenance, telepresence 2026-06-13 23:16:42 -04:00
audio.js wai: interactive + temporal cargo classes, provenance, telepresence 2026-06-13 23:16:42 -04:00
int_hyper.html wai: the integer-payload pin, as SPEC §8 now permits it, and what is final 2026-10-01 19:47:27 -04:00
int_hyper.js wai: the headline decode tests fail on a missing input, and CI supplies their inputs 2026-09-28 18:40:59 -04:00
int_synth.html wai: one registry table, candidate capabilities, public-text checks 2026-09-30 22:38:09 -04:00
int_synth.js wai-web: integer-exact neural decode in the browser, no ML runtime 2026-06-21 05:53:41 -04:00
quantum_webgpu.html wai-quantum WebGPU member: tile runs, a second implementation certified on its own 2026-10-11 17:01:16 -04:00
quantum_webgpu_worker.js wai-quantum WebGPU member: tile runs, a second implementation certified on its own 2026-10-11 17:01:16 -04:00
README.md wai-quantum WebGPU member: tile runs, a second implementation certified on its own 2026-10-11 17:01:16 -04:00
verify_generate_wasm.mjs wai-web wasm32 CI: the browser generator and score synth make every native pin 2026-10-09 17:17:06 -04:00
verify_int_hyper.sh wai: one registry table, candidate capabilities, public-text checks 2026-09-30 22:38:09 -04:00
verify_int_hyper_wasm.mjs wai: one registry table, candidate capabilities, public-text checks 2026-09-30 22:38:09 -04:00
verify_int_payload_wasm.mjs wai: keep loaded parameter sets between decodes, keyed by the SHA-256 of their bytes (WIP) 2026-10-15 11:07:27 -04:00
verify_int_synth.sh wai: one registry table, candidate capabilities, public-text checks 2026-09-30 22:38:09 -04:00
verify_int_synth_wasm.mjs wai: one registry table, candidate capabilities, public-text checks 2026-09-30 22:38:09 -04:00
verify_int_world_wasm.mjs int_world gate 2: the renderer through world/1, beside the direct one; every golden through the lowering 2026-10-15 23:42:23 -04:00
verify_measure.sh wai-web: staged measurement and the session claim in the browser (W5-4) 2026-10-06 16:59:27 -04:00
verify_measure_wasm.mjs wai: the recorder derives the classical length; a malformed sha256 refused behind encryption 2026-10-08 03:02:27 -04:00
verify_menu.mjs wai: one registry table, candidate capabilities, public-text checks 2026-09-30 22:38:09 -04:00
verify_pack.mjs wai-web: pack and packMulti refuse a payload past its u32 field 2026-10-09 17:14:52 -04:00
verify_staged_wasm.mjs wai: round 3 of the link-18 review — claimed stage0 in the CLI, inert claims, order and limits 2026-10-05 07:23:23 -04:00
world.html wai: interactive + temporal cargo classes, provenance, telepresence 2026-06-13 23:16:42 -04:00
world.js wai: key discovery, signing authority and module revocation 2026-10-01 07:12:20 -04:00

wai-web demo — interactive-worlds browser sink

world.html is a conformant wai.world.replay sink running in a tab: the WWLD payload (a tick-0 world + signed op log, ~1.3 KB for the truss vector) is re-derived frame by frame in WebGPU by the same wai crate native sinks run, compiled to wasm32 with the codec chain off (--no-default-features --features world). At the sealed final tick the sink recomputes the BLAKE3 state hash and compares it to the publisher's Ed25519-signed seal — replay-equivalence, demonstrated: the hash the browser computes is byte-identical to world-conformance/expected_hashes.json.

Run

# from wai-web/: rebuild the wasm pkg after engine changes
wasm-pack build --target web --out-dir demo/pkg

# vectors come from the conformance corpus
cp ../world-conformance/vectors/{truss_fracture,ballistic_bounce,basic_kinematics}.wwld demo/vectors/

# serve (any static server; WASM needs http, not file://)
python3 -m http.server 8741
# → http://localhost:8741/demo/world.html

Needs a browser with WebGPU enabled. No build steps beyond wasm-pack; no JS dependencies.

int_synth.html — integer-exact neural image sink (no ML runtime)

int_synth.html decodes a wai.neural.int_synth payload to RGB with the same pure-i64 Rust that decodes natively, compiled to wasm32 — no onnxruntime-web, no WebGPU, no float. Because the decode is integer all the way down (the integer-entropy contract, SPEC §6), the reconstruction is byte-identical on every machine, so the page re-checks its BLAKE3 against the hash the native reference froze into neural-conformance/expected_hashes.json. The four staged vectors (demo/int_synth/, copied from the corpus) include the real trained photo model (128×128, 21.6 dB PSNR).

# from wai-web/: build the web pkg, then serve
wasm-pack build --release --target web --out-dir demo/pkg --out-name wai_web
python3 -m http.server 8741   # → http://localhost:8741/demo/int_synth.html

Reproducible CLI proof that the wasm decode equals the native corpus (builds the nodejs-target pkg and checks all four vectors' hashes):

./demo/verify_int_synth.sh

Staged delivery — StageSink in the browser

src/stage.rs binds wai::staged::StageSink, the staged-delivery sink a native player runs (extensions/staged-delivery.md), for JS: StageBase.decode decodes a base envelope by SPEC §4 through the integer path, with its pin and under the page's cost limit; StageBase.fromStage0 takes a base the page decoded elsewhere, which is claimed (its chain's reports, units and stage hashes say so). StageSink adds bases (taking them), offers refinement layers, expires holds and removes bases in any order, and every unit's stage, producer, tier, output and stage hash reads back. stageLayerInfo reads a layer's refines, WIR1 header and declared cost, and a base's declared decode cost, before either is offered. Reports and units come back in the corpus's own form (staged-conformance/README.md).

verify_staged_wasm.mjs replays every case of staged-conformance/ through the wasm32 build and requires every report, final unit, stage hash and clip hash the native sink wrote; each integer base is decoded in wasm32 and must give its stage0.bin. It then checks the binding's guards: bases that declare huge clips (wai-rs/tests/vectors/staged_bounds/) refused under a cost limit with linear memory watched, a base past the chain budget, base facts a page cannot raise, and a seeded fuzz that must not trap:

# from wai-web/
cargo build --release --target wasm32-unknown-unknown
wasm-bindgen --target nodejs --out-dir demo/pkg-node --out-name wai_web \
  target/wasm32-unknown-unknown/release/wai_web.wasm
node demo/verify_staged_wasm.mjs ./pkg-node/wai_web.js ../staged-conformance

Staged measurement — the native figures in the browser

src/measure.rs binds wai::stage_measure, the code the native measurement tool wai_stage_measure runs (extensions/staged-measurement.md), for JS. A title is read from a Map of files by their path below wai/: titleMissing(dir, files) names the next file it needs, so a page fetches files one at a time until it holds them all. evaluateTitle (or new MeasureTitle(dir, files).json()) gives the text wai_stage_measure eval --json prints: counted bytes per object, stage and prefix, quality integers per presentation and per prefix, first presentable bytes, the layering overhead's points, deduplication and the output tree. simulate and simulateModel give the text wai_stage_measure sim prints. countObject counts one envelope (or names the code it is not countable with), qualityRgb8 gives one picture pair's integers (sums of squares as decimal strings), and outputRoot the output tree's root over presentations.

sessionBegin(entry, host, nonce) is wai::session_recorder::SessionRecorder over the session's entry object: decoderFor names the decoder that decoded an envelope, presented and received record what the page did, and finish(seed, signer_id, issued_at) seals the reconstruct-session claim (extensions/jwp-receipts.md §2.4.12), checked against the record first; a browser session states no energy figure. verifyClaim(claim, outputs, objects) checks a claim against the presentations and the objects received, and gives "" or the reason.

verify_measure.sh builds the nodejs package (or takes one already built), runs verify_measure_wasm.mjs over staged-measure-conformance/ — every golden, refusal title, counted object, quality pair and simulator case, byte for byte, and a session per fixture recorded the way a page records one, which must be the native tool's claim byte for byte — then requires the native wai_stage_measure eval --json to equal the wasm32 evaluation of every fixture, and the native and independent Python claim verifiers to give the wasm32 build's verdicts on every session it sealed:

# from wai-web/ (claim_verify.py needs the `cryptography` package)
bash demo/verify_measure.sh

quantum_webgpu.html — the fabric's WebGPU member in a page

src/quantum_webgpu.rs (feature quantum_webgpu, its own bundle) binds wai::quantum_fabric_webgpu for JS: quantum_webgpu_discover() opens the adapter the page is offered as a fabric member and probes its arithmetic against the CPU's, and the member it returns certifies the gate kernel against the CPU reference on a corpus (certify) and runs a WQC container to its statevector hash (statevector_hash_hex). The kernel is the same WGSL text the native member runs, compiled by the page's own WebGPU. A bit-exact member reproduces the CPU reference's pinned corpus digests, quantum-conformance/fabric/expected.json.

The page runs quantum_webgpu_worker.js in a module worker: the four pinned certificates (both gatesets, random-v1 and fabric-v1) and every vector of the quantum corpus, on the member and again on the same adapter running the tile implementation (tiled(): runs of gates applied tile by tile, one dispatch per run, whose barrier the page's WGSL compiler holds to the uniformity rules); then every reject file (each refused with its listed class), and a circuit one qubit wider than the member holds. A second worker repeats the last check with the adapter offering only the WebGPU default buffer limits, where the member holds 25 qubits and refuses 26 as too wide.

# from wai-web/: the bundle has its own --out-name, so its imports never meet the main bundle's
cargo build --release --target wasm32-unknown-unknown --features quantum_webgpu
wasm-bindgen --target web --out-dir demo/pkg-webgpu --out-name wai_quantum_webgpu \
  target/wasm32-unknown-unknown/release/wai_web.wasm
# serve wai/: the page reads ../../quantum-conformance/
cd .. && python3 -m http.server 8741   # → http://localhost:8741/wai-web/demo/quantum_webgpu.html

quantum-conformance/browser_webgpu.mjs drives the page headless and checks every result against the committed corpus.