Files
Sergio 93253cc227 chore: refresco desde el monorepo — 27 crates nuevos (anim, lottie, svg, mesh, image, layer, test, wire-view, widgets rag-sidebar/router/lazy-list/rive-button) y sync de los 95 existentes
Regenerado con scripts/actualizar-standalone.py --llimphi. Vendoriza además
shared/{foreign-lottie,grafo}. Quedan fuera los crates acoplados al workspace
madre (wasm-*, video-plane, voxel-app/studio, allichay, plugin-host, shuma-term).
cargo check --workspace verde (112 miembros).
2026-07-25 20:57:22 +00:00
..

llimphi-wasm-core

Distribution by hash of Tier 3 WASM apps (no GPU).

The pure core of distribution: hash resolution, integrity and Ed25519 grant verification, effective permissions. It does not depend on the runner or on Llimphi — so a headless service (a relay, a blob server) can use it without dragging in the graphics stack. The bridge to actually run a VerifiedApp lives in llimphi-wasm-dist (which adds the runner).

The chain, a host-side mirror of what wawa's kernel does with its apps:

  1. Resolve the bytecode by its BLAKE3 hash from a BlobSource (today DiskStore, a local CAS; or a P2P backend such as llimphi-wasm-net).
  2. Verify integrity: the retrieved wasm must rehash to the requested hash — content addressing, tamper detection.
  3. Verify the Ed25519 grant (format::ConcesionCapacidad): the author must live in a loadable TrustRing and the signature must cover mensaje_capacidad(bytecode, permissions). A grant for bytecode X is never valid for Y.

Part of llimphi — see llimphi.