| Filename | Latest commit message | Latest commit date |
|---|---|---|
3a6963ea0d
Some checks failed
workflow hygiene / every workflow supersedes its own queue (pull_request) Has been cancelled
wai-web wasm32 / wai-web wasm32 build · corpus, menu and writers (pull_request) Has been cancelled
wai-web reach builds / wai-web reach · does this change touch it (pull_request) Has been cancelled
wai-web reach builds / wai-web reach builds · the package of record, every output as recorded (pull_request) Has been cancelled
wai-web reach builds / wai-web reach builds · this tree's wai-web, every rung on its engine line (pull_request) Has been cancelled
WAI mbt2018_mean integer decode (regenerated vectors) / regenerate mbt2018_mean integer vectors → Rust decode, required (pull_request) Has been cancelled
WAI section references / cited sections exist (pull_request) Has been cancelled
wai-quantum WebGPU member / shader checks · browser build · wasip2 inertness · MSRV (pull_request) Has been cancelled
wai-quantum WebGPU member / member · software Vulkan (linux) (pull_request) Has been cancelled
wai-quantum WebGPU member / member · Metal (macos) (pull_request) Has been cancelled
wai-quantum WebGPU member / member · browser WebGPU (macos) (pull_request) Has been cancelled
wai-pack / wai-pack · does this change touch it (pull_request) Has been cancelled
wai-pack / wai-pack · linux (pull_request) Has been cancelled
wai-pack / wai-pack · linux-arm64 (pull_request) Has been cancelled
wai-pack / wai-pack · macos (pull_request) Has been cancelled
wai-pack / wai-pack · independent verifier (Python) (pull_request) Has been cancelled
wai-pack / wai-pack · the floor through a media prober (pull_request) Has been cancelled
wai-pack / wai-pack · dependency licences (pull_request) Has been cancelled
WAI neural sink gates / model-free refusals of the neural sink (pull_request) Has been cancelled
wai-quantum WebGPU member / member · discrete GPU, Vulkan (jetson-hub) (pull_request) Has been cancelled
WAI JPEG-AI whole decode (pinned inputs, required) / fetch pinned JPEG-AI inputs → whole decode + pixel hash, required (pull_request) Has been cancelled
WAI HTTP delivery / WAI HTTP · does this change touch it (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify mutations 0/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify mutations 1/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify mutations 2/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify patches 0/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify patches 1/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify patches 2/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · every patch and mutation in exactly one shard (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · verified both ways, and the differential (pull_request) Has been cancelled
WAI HTTP delivery / cache rules · controls and labelled caches (pull_request) Has been cancelled
WAI energy receipts / energy receipts · linux (pull_request) Has been cancelled
WAI energy receipts / energy receipts · linux-arm64 (pull_request) Has been cancelled
WAI energy receipts / energy receipts · macos (pull_request) Has been cancelled
WAI conformance / cargo-class corpora · linux (pull_request) Has been cancelled
WAI conformance / cargo-class corpora · linux-arm64 (pull_request) Has been cancelled
WAI conformance / cargo-class corpora · macos (pull_request) Has been cancelled
WAI conformance / quantum core and corpus under wasm32-wasip2 (wasmtime) (pull_request) Has been cancelled
WAI conformance / v2 vocabulary · manifests validate as stated (pull_request) Has been cancelled
WAI conformance / independent verifiers · claims, JWP, key discovery and integer payloads (Python) (pull_request) Has been cancelled
WAI conformance / delivery telemetry · CMCD and CMSD against an independent library (pull_request) Has been cancelled
WAI conformance / cross-arch byte-equality · linux (pull_request) Has been cancelled
WAI conformance / cross-arch byte-equality · linux-arm64 (pull_request) Has been cancelled
WAI conformance / cross-arch byte-equality · macos (pull_request) Has been cancelled
WAI conformance / codec wrappers · fuzz smoke, text decode limits, C entry points, provenance, the semantic path (pull_request) Has been cancelled
WAI conformance / C2PA manifest emission · signed, read back, validated (pull_request) Has been cancelled
tests in CI / every test file is run by a job or listed with its reason (pull_request) Has been cancelled
standards workspaces build + test / jouleclaw-rs (pull_request) Has been cancelled
standards workspaces build + test / aac-rs (pull_request) Has been cancelled
standards workspaces build + test / arl-rs (pull_request) Has been cancelled
standards workspaces build + test / eoc-rs (pull_request) Has been cancelled
standards workspaces build + test / jcp-rs (pull_request) Has been cancelled
standards workspaces build + test / joule-code-rs (pull_request) Has been cancelled
standards workspaces build + test / joule-ui-rs (pull_request) Has been cancelled
standards workspaces build + test / joulecontract-rs (pull_request) Has been cancelled
standards workspaces build + test / jouledesk-rs (pull_request) Has been cancelled
standards workspaces build + test / joulehook-rs (pull_request) Has been cancelled
standards workspaces build + test / map-rs (pull_request) Has been cancelled
standards workspaces build + test / mesh-rs (pull_request) Has been cancelled
standards workspaces build + test / openpay (pull_request) Has been cancelled
standards workspaces build + test / proof-rs (pull_request) Has been cancelled
standards workspaces build + test / sandbox-rs (pull_request) Has been cancelled
standards workspaces build + test / sense-rs (pull_request) Has been cancelled
standards workspaces build + test / smart-byte-rs (pull_request) Has been cancelled
standards workspaces build + test / macOS energy backends (pull_request) Has been cancelled
spec citations resolve / Code cites no section its SPEC lacks (pull_request) Has been cancelled
no-vanity-metrics / Scan committed Markdown for vanity metrics (pull_request) Has been cancelled
no-vanity-metrics / WAI public text names no comparison (pull_request) Has been cancelled
no-vanity-metrics / WAI public text names no company or product (pull_request) Has been cancelled
no-vanity-metrics / No new orphan source files (pull_request) Has been cancelled
lockfiles / every Cargo.lock is current (pull_request) Has been cancelled
SECURITY.md's remaining known gap: fuzzing was a seeded-random smoke test, with no coverage guidance for the manifest parser, the integer payload parsers or the codec wrappers. wai-rs/fuzz/ adds four libFuzzer targets (cargo-fuzz, AddressSanitizer): - envelope: version detection, the WAI1 and WAI2 readers, the listing form; - int_payload: int_payload::decode_int against each (capability, parameter set) pair the integer conformance corpus commits, the first byte choosing the pair; - media: the picture, audio, video and text decoders of the floor and the recommended set, the first byte choosing the decoder; - containers: the extension containers (world, causal op, film, reel, score, haptic, splat4d, audio scene). `seeds` builds the corpora from the repository: every committed envelope, integer payload and container, and a valid payload per decoder from the reference writers. `run.sh` runs each target for a given time, tells a find (exit 1, input kept in fuzz/artifacts) from a tool failure (exit 2), and builds with --no-cfg-fuzzing because rav1e depends on libfuzzer-sys under cfg(fuzzing), which left wai's cdylib with an undefined symbol. wai-fuzz.yml runs each target for 15 minutes nightly on the macOS runner (which has the codec libraries), never per pull request, keeping the corpus on the CI volume between nights. wai-rs's one multi-line inline table (c2pa) is put on one line: cargo-fuzz's TOML parser rejects it. Found in the containers target's first seconds: the audio scene reader reserved a u32 count of entries read from the input before reading one, so a few bytes asked for 48 GiB. The world, reel, score, haptic and splat4d readers did the same. Each now reserves no more than its remaining bytes could hold. tests/container_reservations.rs rewrites a committed vector of each to declare 2^32 - 1 entries in four bytes and requires a refusal with no single allocation past a few megabytes, through an allocator that records the largest request and refuses past 256 MiB; on the old readers the world asset table alone asked for 256 GiB (falsified). wai-conformance runs it on every leg. SECURITY.md now says what is fuzzed, and keeps two gaps: the C libraries are not instrumented, and the extension formats' declared durations have no reader limit yet (rendering allocates in proportion; reading is bounded). Smoke runs on the build host: envelope, int_payload and media 120 s each, nothing found; containers found the above, then ran 300 s clean once fixed. Green there: the new test, and the 275 lib tests with the container features. Clean: tests-in-CI, spec and section refs, workflow concurrency, lockfiles, vanity metrics, comparative prose, public names. Co-Authored-By: Claude Opus 5.5 <[email protected]> |
||
| .. | ||
| conformance.yml | ||
| energy-hardware.yml | ||
| joule-code-conformance.yml | ||
| jouleclaw-public-surface-documented.yml | ||
| lockfiles.yml | ||
| no-vanity-metrics.yml | ||
| spec-refs.yml | ||
| standards-build.yml | ||
| tests-in-ci.yml | ||
| wai-byte-equality.yml | ||
| wai-conformance.yml | ||
| wai-energy-receipts.yml | ||
| wai-formal-verification.yml | ||
| wai-fuzz.yml | ||
| wai-http.yml | ||
| wai-jpegai-e2e.yml | ||
| wai-neural-e2e.yml | ||
| wai-neural-gates.yml | ||
| wai-ops-differential.yml | ||
| wai-ops.yml | ||
| wai-pack.yml | ||
| wai-quantum-cuda.yml | ||
| wai-quantum-webgpu.yml | ||
| wai-section-refs.yml | ||
| wai-sota-vectors.yml | ||
| wai-vector.yml | ||
| wai-web-reach.yml | ||
| wai-web-wasm.yml | ||
| workflow-hygiene.yml | ||