open-standards/.github/workflows
Repository files (latest commit first)
Filename Latest commit message Latest commit date
David Charlot d5ec1abe1b
Some checks failed
no-vanity-metrics / Scan committed Markdown for vanity metrics (pull_request) Successful in 3s
standards workspaces build + test / eoc-rs (pull_request) Successful in 1m53s
standards workspaces build + test / jcp-rs (pull_request) Successful in 1m15s
standards workspaces build + test / proof-rs (pull_request) Successful in 1m11s
standards workspaces build + test / sandbox-rs (pull_request) Successful in 2m0s
standards workspaces build + test / smart-byte-rs (pull_request) Successful in 2m30s
WAI conformance / cargo-class corpora · linux (pull_request) Successful in 30s
WAI conformance / cross-arch byte-equality · linux (pull_request) Successful in 14s
standards workspaces build + test / aac-rs (pull_request) Successful in 1m14s
WAI conformance / C2PA manifest emission · signed, read back, validated (pull_request) Successful in 39s
standards workspaces build + test / joule-code-rs (pull_request) Successful in 1m27s
standards workspaces build + test / jouleclaw-rs (pull_request) Successful in 6m37s
standards workspaces build + test / joulecontract-rs (pull_request) Successful in 1m14s
standards workspaces build + test / map-rs (pull_request) Successful in 1m12s
standards workspaces build + test / mesh-rs (pull_request) Successful in 1m2s
standards workspaces build + test / openpay (pull_request) Successful in 2m25s
WAI conformance / cargo-class corpora · linux-arm64 (pull_request) Successful in 37s
WAI conformance / cross-arch byte-equality · linux-arm64 (pull_request) Successful in 18s
standards workspaces build + test / arl-rs (pull_request) Successful in 10m57s
standards workspaces build + test / joule-ui-rs (pull_request) Successful in 48m58s
standards workspaces build + test / jouledesk-rs (pull_request) Successful in 33m18s
standards workspaces build + test / joulehook-rs (pull_request) Successful in 32m58s
standards workspaces build + test / sense-rs (pull_request) Successful in 28m20s
WAI conformance / cargo-class corpora · macos (pull_request) Successful in 6m15s
WAI conformance / cross-arch byte-equality · macos (pull_request) Successful in 2m23s
WAI conformance / cargo-class corpora · windows (pull_request) Has been cancelled
WAI conformance / cross-arch byte-equality · windows (pull_request) Has been cancelled
wai: run the C2PA emitter in CI, and drop its system-crypto dependency
Two gaps in the emitter as first written, both of the same kind: a claim with
nothing checking it.

**The tests never ran.** `c2pa_emit` is off by default and the four-platform
`cargo-classes` job builds a fixed feature list that does not include it, so the
seven tests compiled locally and nowhere else. A feature no workflow enables has
no coverage at all — the suite passes and the tests in it simply do not run.
This adds a job that enables it.

One platform, deliberately. Everything the existing matrix exists to prove is
about byte-identical reconstruction across architectures; a signed manifest makes
no such claim and would not become more true for being emitted on four machines.

**It linked system OpenSSL.** The c2pa SDK defaults to an openssl backend plus
four HTTP stacks. Every wai workflow is built on "pure Rust, no system
dependencies" — that is what lets the conformance matrix run on Linux, macOS and
Windows with no setup — and an openssl-linked optional feature quietly puts a
system library back in the crate's reach. Switched to the SDK's
`rust_native_crypto` backend with `default-features = false`, which also drops
the reqwest/ureq/wstd/wasi chain that local emission never uses. `openssl`,
`openssl-sys`, `reqwest` and `ureq` are all absent from the graph, and the seven
tests pass unchanged.

Both properties are now asserted rather than assumed, because both are the kind
that decay silently:

- a step fails if `openssl` or `openssl-sys` ever reaches the `c2pa_emit` graph,
  since an openssl-linked build would still pass every test here while making
  the crate undistributable to a bare runner;
- a step fails if `c2pa` ever becomes reachable from `provenance`, since that
  would hand a large dependency tree to consumers who wanted only the binding
  types, and falsify the "off by default" claim in the extension.

The guards were checked to discriminate, not merely to pass: `cargo tree -i` was
confirmed to detect a dependency that IS present, so a guard that silently
stopped working could not read as a green check.

Co-Authored-By: Claude Opus 5 <[email protected]>
2026-09-06 06:26:10 -04:00
..
conformance.yml ci: target the self-hosted fleet labels, not GitHub-hosted images 2026-07-23 00:17:08 -04:00
joule-code-conformance.yml ci: bump hardcoded toolchain pins 1.97.1 → 1.98.0 2026-08-26 07:41:56 -04:00
jouleclaw-public-surface-documented.yml ci: bump hardcoded toolchain pins 1.97.1 → 1.98.0 2026-08-26 07:41:56 -04:00
no-vanity-metrics.yml ci: target the self-hosted fleet labels, not GitHub-hosted images 2026-07-23 00:17:08 -04:00
standards-build.yml ci: note the linux-arm64 cache-volume constraint for jouleclaw-rs 2026-08-29 21:49:43 -04:00
wai-byte-equality.yml Merge pull request 'wai: prove integer video byte-identical, meter it, and publish the method' (#60) from wai/video-byte-equality into main 2026-08-29 03:11:48 -04:00
wai-conformance.yml wai: run the C2PA emitter in CI, and drop its system-crypto dependency 2026-09-06 06:26:10 -04:00
wai-neural-e2e.yml ci: bump hardcoded toolchain pins 1.97.1 → 1.98.0 2026-08-26 07:41:56 -04:00