Exact

Exact Union RegExp

Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Transaction Science fbde9b2131 wai: an unpinned decode reads its set once and is checked by every identity ... Outside the integer path, a sink whose key log only revokes ran check 5 over the registered file's digest and any listing found beside it, then decoded from the path. With no listing beside them, a revoked several- file set decoded, and a file changed after the check was what the decode read. At a registry with a key log, the neural sink now reads once what the decode can read: the registered file of a one-file set; otherwise every file below the directory the decoder reads from (the registered directory, or the registered file's), as pin::listing_of_dir lists it (pin::read_dir_set, which listing_of_dir now uses). Check 5 runs over every digest a pin over it could name: the file's, or the directory's derived listing and each member's, and each listing beside them that matches what was read. The decode then reads only those bytes (neural::ParamSource::Checked, which replaces Authorised and records the registered file within a set), never the path; where the key log holds the capability's sets to jwp-receipts §7.9, only the part §7.9 authorised. The decoders outside the integer path read files by name from that directory, some chosen by the payload, so the set is the directory rather than a fixed list. With no key log the decode reads the path, as before. SPEC §4 (Module authorisation) and jwp-receipts §7.9 state the reference behaviour. Test: neural_native_decode::a_revoke_only_key_log_checks_and_reads_the_set_once (a revoked set beside its listing; with no listing, the decoder and the directory registered; a member's own digest revoked; the tables swapped on disk after the check; no key log). Co-Authored-By: Claude Opus 5.5 <[email protected]>		2026-10-01 23:08:03 -04:00
..
workflows	wai: an unpinned decode reads its set once and is checked by every identity	2026-10-01 23:08:03 -04:00