open-standards/joule-code/joule-code-rs
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Transaction Science 562f424446
Some checks failed
wai-quantum WebGPU member / member · DX12 and Vulkan (cbio-windows) (pull_request) Successful in 11m58s
joule-moq-remote host agent / joule-moq-remote · does this change touch it (pull_request) Successful in 10s
joule-moq-room room service / joule-moq-room · does this change touch it (pull_request) Successful in 7s
standards workspaces build + test / which workspaces this change touches (pull_request) Successful in 8s
wai-audit collector and player integration / does this change touch it (pull_request) Successful in 7s
joule-moq-web browser client / joule-moq-web · does this change touch it (pull_request) Successful in 16s
wai-app and Create / wai-app · does this change touch it (pull_request) Successful in 16s
WAI operation catalogue / does this change touch it (pull_request) Successful in 8s
WAI conformance / does this change touch it (pull_request) Successful in 8s
WAI breaking changes and the conformance runner / WAI breaking · does this change touch WAI (pull_request) Successful in 17s
WAI energy receipts / does this change touch it (pull_request) Successful in 6s
WAI examples / WAI examples · does this change touch them (pull_request) Successful in 6s
wai-fleet service / does this change touch it (pull_request) Successful in 9s
WAI HTTP delivery / WAI HTTP · does this change touch it (pull_request) Successful in 9s
wai key · the real keychain / does this change touch it (pull_request) Successful in 6s
wai-key-proxy / does this change touch it (pull_request) Successful in 6s
wai-ledger service / does this change touch it (pull_request) Successful in 9s
WAI neural sink gates / does this change touch it (pull_request) Successful in 8s
wai-ops-gpu integer operators on GPUs / does this change touch it (pull_request) Successful in 7s
wai-pack / wai-pack · does this change touch it (pull_request) Successful in 6s
wai-quantum for JavaScript / does this change touch it (pull_request) Successful in 7s
wai-quantum studio and desktop / does this change touch it (pull_request) Successful in 7s
WAI JPEG-AI whole decode (pinned inputs, required) / does this change touch it (pull_request) Successful in 23s
wai-quantum WebGPU member / does this change touch it (pull_request) Successful in 7s
wai-sink-android native sink library / does this change touch it (pull_request) Successful in 6s
WAI mbt2018_mean integer decode (regenerated vectors) / does this change touch it (pull_request) Successful in 6s
wai-sink-swift native sink package / does this change touch it (pull_request) Successful in 7s
wai-web wasm32 / does this change touch it (pull_request) Successful in 6s
WAI Studio / does this change touch it (pull_request) Successful in 10s
wai-web reach builds / wai-web reach · does this change touch it (pull_request) Successful in 19s
joule-code conformance gate / Build + round-trip C1-C4 vectors (pull_request) Successful in 2m31s
WAI conformance / fast integer kernels, every x86_64 kernel set (AVX-512 silicon) (pull_request) Successful in 4m57s
wai-quantum WebGPU member / member · integrated GPU, Vulkan (framework-128gb) (pull_request) Successful in 12m48s
wai-quantum WebGPU member / member · GPU, Vulkan (thor) (pull_request) Successful in 24m51s
wai-quantum WebGPU member / member · GPU, Vulkan (jetson-hub) (pull_request) Successful in 26m48s
wai-app and Create / wai-app · tests, clippy, the line language's verifier (linux) (pull_request) Successful in 32s
wai-audit collector and player integration / collector · linux (pull_request) Successful in 1m34s
WAI conformance / faces from keypoints under wasm32-wasip2 (wasmtime) (pull_request) Successful in 1m41s
WAI conformance / cross-arch byte-equality · linux (pull_request) Successful in 1m45s
WAI breaking changes and the conformance runner / WAI breaking · wire, record and API against main · linux (pull_request) Successful in 1m25s
WAI operation catalogue / the catalogue and every door · linux (pull_request) Successful in 5m23s
wai-fleet service / service · linux (pull_request) Successful in 2m5s
WAI HTTP delivery / HTTP corpus · every patch and mutation in exactly one shard (pull_request) Successful in 12s
wai-key-proxy / proxy · linux (pull_request) Successful in 1m2s
WAI breaking changes and the conformance runner / WAI breaking and conform · their tests, and the independent verifiers through wai conform · linux (pull_request) Successful in 4m17s
wai-ledger service / service · linux (pull_request) Successful in 1m35s
wai-quantum studio and desktop / desktop app · windows (pull_request) Successful in 12m7s
WAI neural sink gates / the exact JPEG-AI decoder reports its path (pinned inputs, required) (pull_request) Successful in 2m42s
wai-pack / wai-pack · linux (pull_request) Successful in 2m26s
wai-ops-gpu integer operators on GPUs / builds · no adapter is not a pass (linux) (pull_request) Successful in 3m10s
wai-quantum for JavaScript / javascript · linux (pull_request) Successful in 3m57s
wai-quantum studio and desktop / studio · browser (pull_request) Successful in 3m42s
WAI conformance / quantum core and corpus under wasm32-wasip2 (wasmtime) (pull_request) Successful in 10m15s
WAI neural sink gates / model-free refusals of the neural sink (pull_request) Successful in 6m31s
WAI Studio / the catalogue's actions, the unit tests and the core · linux (pull_request) Failing after 21s
wai-quantum WebGPU member / shader checks · browser build · wasip2 inertness (pull_request) Successful in 2m52s
wai-quantum WebGPU member / member · software Vulkan (linux) (pull_request) Successful in 3m0s
wai-quantum studio and desktop / desktop app · linux (pull_request) Successful in 6m59s
wai-web reach builds / wai-web reach builds · the package of record, every output as recorded (pull_request) Successful in 3m35s
WAI mbt2018_mean integer decode (regenerated vectors) / regenerate mbt2018_mean integer vectors → Rust decode, required (pull_request) Successful in 5m7s
WAI energy receipts / energy receipts · linux (pull_request) Successful in 13m23s
wai-web reach builds / wai-web reach builds · this tree's wai-web, every rung on its engine line (pull_request) Successful in 4m26s
WAI JPEG-AI whole decode (pinned inputs, required) / fetch pinned JPEG-AI inputs → whole decode + pixel hash, required (pull_request) Successful in 8m0s
WAI conformance / cargo-class corpora · linux (pull_request) Successful in 20m3s
wai-web wasm32 / wai-web wasm32 build · corpus, menu and writers (pull_request) Successful in 22m36s
WAI examples / WAI examples · portable · linux (pull_request) Successful in 44m32s
WAI Studio / Studio in WebKit · linux (pull_request) Failing after 44m9s
joule-code conformance gate / joule-moq-relay, its own energy on a counter (macos) (pull_request) Successful in 35s
joule-moq-remote host agent / joule-moq-remote, every target (macos) (pull_request) Successful in 57s
wai-audit collector and player integration / collector, player integration and the browser end to end · macos (pull_request) Successful in 2m1s
standards workspaces build + test / macOS energy backends (pull_request) Successful in 14m42s
WAI conformance / cross-arch byte-equality · macos (pull_request) Successful in 39s
wai-app and Create / wai-app · Create, browser end-to-end (macos) (pull_request) Successful in 8m14s
WAI conformance / codec wrappers · fuzz smoke, text decode limits, C entry points, provenance, the semantic path (pull_request) Successful in 1m25s
wai-fleet service / service · macos (pull_request) Successful in 1m28s
wai key · the real keychain / the real keychain · macos (pull_request) Successful in 2m28s
joule-moq-web browser client / joule-moq-web · browser end-to-end (macos) (pull_request) Successful in 16m21s
wai-ledger service / service · macos (pull_request) Successful in 2m25s
WAI conformance / cargo-class corpora · macos (pull_request) Failing after 15m17s
WAI energy receipts / energy receipts · macos (pull_request) Successful in 11m6s
wai-pack / wai-pack · macos (pull_request) Successful in 5m23s
wai-quantum studio and desktop / desktop app · macos (pull_request) Successful in 5m11s
wai-quantum WebGPU member / member · browser WebGPU (macos) (pull_request) Successful in 2m25s
wai-quantum WebGPU member / member · Metal (macos) (pull_request) Successful in 4m22s
wai-ops-gpu integer operators on GPUs / Metal GPU and browser WebGPU (macos) (pull_request) Successful in 14m15s
wai-sink-android native sink library / every ABI, the AAR, and the instrumented tests in a headless emulator · macos (pull_request) Successful in 7m36s
WAI examples / WAI examples · the archive, the readiness check, the browser and Apple · macos (pull_request) Successful in 25m46s
WAI Studio / Studio in Chromium and Firefox · macos (pull_request) Failing after 11m58s
wai-sink-swift native sink package / libwai slices, desktop tests, simulator tests · macos (pull_request) Successful in 18m59s
joule-code conformance gate / joule-moq-relay, every target (pull_request) Successful in 3m19s
repository checks / lockfiles, advisories, tests in CI, workflow hygiene, spec and section references, public text (pull_request) Successful in 2m18s
joule-code conformance gate / joule-moq-ingest, every target (pull_request) Successful in 4m55s
joule-moq-remote host agent / joule-moq-remote, every target (linux-arm64) (pull_request) Successful in 1m45s
joule-moq-room room service / joule-moq-room, every target (pull_request) Successful in 4m11s
WAI conformance / v2 vocabulary · manifests validate as stated (pull_request) Successful in 19s
WAI conformance / cargo-class corpora · linux-arm64 (pull_request) Successful in 16m45s
WAI conformance / delivery telemetry · CMCD and CMSD against an independent library (pull_request) Successful in 17s
WAI conformance / cross-arch byte-equality · linux-arm64 (pull_request) Successful in 31s
standards workspaces build + test / joule-code-rs (joule-code/joule-code-rs, joule-code-rs, linux-arm64, true) (pull_request) Successful in 20m15s
WAI conformance / C2PA manifest emission · signed, read back, validated (pull_request) Successful in 1m55s
WAI examples / WAI examples · android-app · linux-arm64 (pull_request) Successful in 5m51s
WAI conformance / each feature of the independent verifiers' steps compiles alone (pull_request) Successful in 12m8s
WAI HTTP delivery / HTTP corpus · falsify mutations 2/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify patches 0/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify patches 1/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify patches 2/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · verified both ways, and the differential (pull_request) Has been cancelled
WAI HTTP delivery / cache rules · controls and labelled caches (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify mutations 1/3 (pull_request) Has been cancelled
WAI HTTP delivery / HTTP corpus · falsify mutations 0/3 (pull_request) Has been cancelled
WAI conformance / independent verifiers · claims, JWP, key discovery and integer payloads (Python) (pull_request) Has been cancelled
WAI energy receipts / energy receipts · linux-arm64 (pull_request) Has been cancelled
wai-pack / wai-pack · linux-arm64 (pull_request) Has been cancelled
wai-pack / wai-pack · independent verifier (Python) (pull_request) Has been cancelled
wai-pack / wai-pack · the floor through a media prober (pull_request) Has been cancelled
wai-pack / wai-pack · dependency licences (pull_request) Has been cancelled
wai-sink-android native sink library / the JNI layer and the platform-free half on the host JVM · linux-arm64 (pull_request) Has been cancelled
wai key on Windows: a seed for this account alone, and refused when another may read it
A seed in a shared folder got the folder's list, and wai signed with it. Now the
seed, the record and a keystore wai makes have this account as owner and as their
one entry, with inheritance off, wherever they are. The call that makes the file
carries the list (CreateFileW with its security descriptor), so the secret never
exists on disk under anything wider, and no handle can be held open from a moment
when it did. Unix was already so: open with O_CREAT|O_EXCL and mode 0600. A test
now holds that too.

A seed whose list grants any other account anything, or that another account owns,
is refused with the same exit 3 and key-file-exposed as a wide mode on Unix, naming
the file, the accounts and the icacls command that fixes it. Everything is by SID,
read through the system's calls and never from icacls' output, which is localised.

SYSTEM and Administrators are not listed: a backup or a scanner reads through its
privileges rather than the list, an administrator can still take ownership, and the
account itself reads the file elevated or not.

All the unsafe code is in win_acl.rs, behind cfg(windows). What decides is ordinary
code over plain values, so its tests run on every system. windows-sys 0.61 was
already in all sixteen lockfiles that hold this crate; each gains one line.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-11-05 12:09:37 -05:00
..
crates wai key on Windows: a seed for this account alone, and refused when another may read it 2026-11-05 12:09:37 -05:00
vendor/wtransport vendored wtransport: the close_session doc says when the session's result is set 2026-10-20 08:32:05 -04:00
Cargo.lock joule-moq-relay: a fan-out holds up no other track, and each core has its own socket 2026-11-02 19:05:27 -05:00
Cargo.toml Cargo: no minimum-supported-version floor, because the policy is latest stable 2026-11-03 17:42:20 -05:00