Watch

History

Repository files (latest commit first)
Filename	Latest commit message	Latest commit date
Transaction Science ae4ce533d7 Some checks failed wai-quantum energy-landscape jobs / does this change touch it (push) Successful in 7s Details WAI breaking changes and the conformance runner / WAI breaking · does this change touch WAI (push) Successful in 18s Details WAI breaking changes and the conformance runner / WAI breaking · wire, record and API against main · linux (push) Failing after 1m2s Details wai-quantum energy-landscape jobs / the module under wasm32-wasip2 (wasmtime) (push) Successful in 2m23s Details wai-quantum energy-landscape jobs / the same bits · macos (push) Successful in 3m34s Details repository checks / lockfiles, advisories, tests in CI, workflow hygiene, spec and section references, public text (push) Failing after 5m9s Details wai-quantum energy-landscape jobs / native against WebAssembly, over many seeds (push) Successful in 5m7s Details WAI breaking changes and the conformance runner / WAI breaking and conform · their tests, and the independent verifiers through wai conform · linux (push) Successful in 5m20s Details wai-quantum energy-landscape jobs / the same bits · linux-arm64 (push) Successful in 7m46s Details wai-quantum energy-landscape jobs / reader, kernels, answers and the stated result · linux, release (push) Successful in 8m20s Details joule-moq-remote host agent / joule-moq-remote · does this change touch it (push) Has been cancelled Details joule-moq-remote host agent / joule-moq-remote, every target (linux-arm64) (push) Has been cancelled Details joule-moq-remote host agent / joule-moq-remote, every target (macos) (push) Has been cancelled Details joule-moq-room room service / joule-moq-room · does this change touch it (push) Has been cancelled Details joule-moq-room room service / joule-moq-room, every target (push) Has been cancelled Details joule-moq-web browser client / joule-moq-web · does this change touch it (push) Has been cancelled Details joule-moq-web browser client / joule-moq-web · browser end-to-end (macos) (push) Has been cancelled Details wai-app and Create / wai-app · does this change touch it (push) Has been cancelled Details wai-app and Create / wai-app · tests, clippy, the line language's verifier (linux) (push) Has been cancelled Details wai-app and Create / wai-app · Create, browser end-to-end (macos) (push) Has been cancelled Details wai-audit collector and player integration / does this change touch it (push) Has been cancelled Details wai-audit collector and player integration / collector · linux (push) Has been cancelled Details wai-audit collector and player integration / collector, player integration and the browser end to end · macos (push) Has been cancelled Details WAI operation catalogue / does this change touch it (push) Has been cancelled Details WAI operation catalogue / the catalogue and every door · linux (push) Has been cancelled Details wai-fleet service / does this change touch it (push) Has been cancelled Details wai-fleet service / service · linux (push) Has been cancelled Details wai-fleet service / service · macos (push) Has been cancelled Details wai-ledger service / does this change touch it (push) Has been cancelled Details wai-ledger service / service · linux (push) Has been cancelled Details wai-ledger service / service · macos (push) Has been cancelled Details wai-quantum for JavaScript / does this change touch it (push) Has been cancelled Details wai-quantum for JavaScript / javascript · linux (push) Has been cancelled Details wai-quantum studio and desktop / does this change touch it (push) Has been cancelled Details wai-quantum studio and desktop / studio · browser (push) Has been cancelled Details wai-quantum studio and desktop / desktop app · macos (push) Has been cancelled Details wai-quantum studio and desktop / desktop app · linux (push) Has been cancelled Details wai-quantum studio and desktop / desktop app · windows (push) Has been cancelled Details wai-sink-android native sink library / does this change touch it (push) Has been cancelled Details wai-sink-android native sink library / the JNI layer and the platform-free half on the host JVM · linux-arm64 (push) Has been cancelled Details wai-sink-android native sink library / every ABI, the AAR, and the instrumented tests in a headless emulator · macos (push) Has been cancelled Details wai-sink-swift native sink package / does this change touch it (push) Has been cancelled Details wai-sink-swift native sink package / libwai slices, desktop tests, simulator tests · macos (push) Has been cancelled Details WAI Studio / does this change touch it (push) Has been cancelled Details WAI Studio / the catalogue's actions, the unit tests and the core · linux (push) Has been cancelled Details WAI Studio / Studio in Chromium and Firefox · macos (push) Has been cancelled Details WAI Studio / Studio in WebKit · linux (push) Has been cancelled Details wai-key-proxy / does this change touch it (push) Has been cancelled Details wai-key-proxy / proxy · linux (push) Has been cancelled Details wai: a C2PA Manifest Store bound to a stored WAI1 or WAI2 envelope, and to the receipt that delivered it A .wai file can now be a C2PA asset without changing an envelope byte. extensions/c2pa-binding.md registers the record `wai.asset.c2pa`: a C2PA Manifest Store served beside the object at <cid>.c2pa (application/c2pa, C2PA 2.4 §11.4 and §15.5.3.1; an object's response may name it with Link rel="c2pa-manifest", §15.5.3.2), never inside it, so the object's content hash, its receipts and its head proof stay as they were. http-delivery §8.9 gives the location. The store is live provenance's profile (JUMBF layout, claim, EdDSA COSE claim signature, X.509 chain) with three assertions: c2pa.hash.data over every byte of the envelope with no exclusions and an empty pad (§18.5); c2pa.actions.v2 with the source type the signer states; and science.transaction.wai.envelope, which names the envelope's content hash, its capabilities (a WAI2's in table order) and the JWP group receipt it was delivered under, by link hash (also the name of its rcpt/ file), with that receipt's publisher key. The receipt must be in the labelled payload, whose link hash covers its parent. The manifest identifier is derived from the envelope, the receipt and the claim signer's certificate. A verifier checks the claim and chain (live-provenance §11.2 steps 1-6), the assertions, the identifier, the data hash, the content hash and capabilities, the receipt's link hash, signature and publisher, and the envelope's object receipt under it: seventeen reasons, each with its C2PA §15 code where C2PA gives one. The reference is the c2pa_envelope module of wai-rs (feature c2pa_envelope; writer c2pa_envelope::sign); the corpus is live-conformance/c2pa-envelope/ (stores bound to a WAI1 and to a WAI2 of one picture at two sizes, 27 negatives covering every reason), written from fixed seeds by wai_c2pa_envelope_vectors; c2pa_live_verify.py, the second implementation, now also verifies it: 29 vectors agree, 26 of 26 mutated copies are refused and 17 of 17 weakened verifiers are caught. Fourteen faults planted in the reference (each check of the verification skipped in turn, a legacy receipt, bytes after the envelope, a padded data hash, the identifier without its signer) each fail its tests. The C2PA Rust library (c2pa 0.91.7) reads both good stores beside their envelopes as Trusted with assertion.dataHash.match, and reports assertion.dataHash.mismatch when one envelope byte changes. Co-Authored-By: Claude Opus 5.5 <[email protected]>		2026-11-09 10:50:25 -05:00
..
corpora	wai conform relay --suite moqt holds a relay to the MOQT interop cases, pq joins the verifier suites, and wai conformance gen writes a corpus by its generator	2026-11-08 14:44:52 -05:00
verifiers	wai: a C2PA Manifest Store bound to a stored WAI1 or WAI2 envelope, and to the receipt that delivered it	2026-11-09 10:50:25 -05:00
baseline.json	wai-conformance starts on a change to joule-ui-catalogue, the crate wai-app now links	2026-11-07 03:10:33 -05:00
README.md	wai conform relay --suite moqt holds a relay to the MOQT interop cases, pq joins the verifier suites, and wai conformance gen writes a corpus by its generator	2026-11-08 14:44:52 -05:00

README.md

What wai-conformance.yml runs, one file a step

wai-conformance.yml keeps no hand list of its verifier steps, corpora or kernel tests. Its lists are derived, when it runs, from the files here and from tags in the test files, by scripts/wai-conformance-lists.py, whose docstring states every key; its gate reads the steps' paths: through scripts/pr-touches-paths.py. A change that adds a verifier, a corpus or a kernel test adds a file, or a line to a file of its own, and edits no line of the workflow, unless a step's paths: names a file under none of the trigger's paths (check names it). Its features and [[test]] entries in wai/wai-rs/Cargo.toml stay shared (wai/CONTRIBUTING.md).

verifiers/<name>.sh: one step of the independent-verifiers job. Its body is the step's shell, run in wai/ (or working-directory:) with bash -eo pipefail, as a workflow step runs. Its header, the leading # key: value lines, gives step: (its name), order: (steps run in ascending order, a tie by file name), features: (each list compiles alone in features-alone, and every feature joins WAI_FEATURES), and where it needs them alone:, build: pq, release-features:, bins:, pq-bins:, paths: (the extension texts it reads, which the workflow's gate then runs on) and working-directory:. Its corpus's independent verifier is an independent: line, <name> <area> [needs=<packages>] [verdicts=<file>] [dir=<dir>] python3 [-I] <script> <args>, the command line its README gives, run in wai/ by the job's one step wai conform --independent and never by the body; wai-rs/build.rs reads the binary's table of independent verifiers from these lines. A file with such lines and no body is a declaration: its verifiers run in that step alone. Prose comments follow the header, after a # line.
corpora/<name>.txt: one cargo-class corpus, verified by its own tool on every leg of cargo-classes (corpus:, order:, bin:, dir:), and written by it through wai conformance gen --suite <corpus>: its gen mode, or the modes gen: names in order (none where the tool writes nothing and the corpus's README says what does). wai-rs/build.rs reads these files for that command's table, and a dir: that names no corpus fails the build.
A test file of wai/wai-rs/tests/ whose first line is // wai-conformance: int-kernels runs in the fast integer kernels' steps of both profiles (int-kernels-release: the release step only; int-kernels-amd: the AVX-512 host too). The steps' features are the tagged tests' required-features.
baseline.json: the lists the workflow kept by hand before they were derived. The repository checks require every derived list to hold every entry of it, and every step it names to run.

To see what the workflow runs: python3 scripts/wai-conformance-lists.py dry-run (of another commit: --ref <commit>; two of them diff line by line). To run one step as CI does: python3 scripts/wai-conformance-lists.py run --only <name>. To check the files: python3 scripts/wai-conformance-lists.py check.