Bytecode integrity verification

Generated from canonical repository manifests. Do not edit this note directly.

Relationships

• belongs-to → [[source-families/wmlscript|wmlscript]]
• planned-by → [[work-items/WMLS-501|WMLS-501]]
• planned-by → [[work-items/WMLS-502|WMLS-502]]
• planned-by → [[work-items/WMLS-503|WMLS-503]]
• refines ← [[clauses/WMLSCRIPT-CL-FATAL-BYTECODE-ERROR-MATRIX|WMLSCRIPT-CL-FATAL-BYTECODE-ERROR-MATRIX]]
• refines ← [[clauses/WMLSCRIPT-CL-FUNCTION-RECORD-BOUNDARIES|WMLSCRIPT-CL-FUNCTION-RECORD-BOUNDARIES]]
• refines ← [[clauses/WMLSCRIPT-CL-INTEGRITY-BEFORE-EXECUTION|WMLSCRIPT-CL-INTEGRITY-BEFORE-EXECUTION]]
• refines ← [[clauses/WMLSCRIPT-CL-INTEGRITY-CODE-SIZE-CHECK|WMLSCRIPT-CL-INTEGRITY-CODE-SIZE-CHECK]]
• refines ← [[clauses/WMLSCRIPT-CL-INTEGRITY-FAILURE-QUARANTINE|WMLSCRIPT-CL-INTEGRITY-FAILURE-QUARANTINE]]
• refines ← [[clauses/WMLSCRIPT-CL-INTEGRITY-FUNCTION-SIZES|WMLSCRIPT-CL-INTEGRITY-FUNCTION-SIZES]]
• refines ← [[clauses/WMLSCRIPT-CL-INTEGRITY-INSTRUCTION-STREAM|WMLSCRIPT-CL-INTEGRITY-INSTRUCTION-STREAM]]
• refines ← [[clauses/WMLSCRIPT-CL-INTEGRITY-POOL-COUNTS|WMLSCRIPT-CL-INTEGRITY-POOL-COUNTS]]
• refines ← [[clauses/WMLSCRIPT-CL-INTEGRITY-VERSION-CHECK|WMLSCRIPT-CL-INTEGRITY-VERSION-CHECK]]
• sourced-from → [[source-documents/WAP-193_101-WMLScript|WAP-193_101-WMLScript]]

Data

{
  "family": "wmlscript",
  "ordinal": 107,
  "actor": "wmlscript-interpreter",
  "referencedSection": "Bytecode integrity verification",
  "specificationStatus": "mandatory",
  "dependencyExpression": {
    "type": "none",
    "scrIds": []
  },
  "sourceAnchor": {
    "documentId": "WAP-193_101-WMLScript",
    "staticConformanceSection": "15.2.6"
  },
  "disposition": {
    "strict": "required-for-claimed-actor",
    "classCProfile": "required-by-class-c-client-mcf",
    "enhancementMayReplaceStrictBehavior": false
  },
  "reviewState": "source-extracted-class-c-applied-direct-test-linked",
  "implementationStatus": "partial",
  "evidenceState": "direct-test-linked",
  "assessmentNote": "The WAP-193 verifier enforces whole-unit integrity, standard-library/function reference domains, and reachable stack dataflow before execution; opcode execution and remaining URL/access validity stay deferred.",
  "implementationEvidence": [
    {
      "path": "engine-wasm/engine/src/wavescript/wap_decoder.rs",
      "symbol": "decode_wap_compilation_unit"
    }
  ],
  "testEvidence": [
    {
      "path": "engine-wasm/engine/src/wavescript/wap_decoder.rs",
      "test": "source_pinned_library_and_stack_dataflow_fixtures_are_deterministic",
      "command": "cargo test --manifest-path engine-wasm/engine/Cargo.toml wap_decoder",
      "limitation": "Direct pre-execution library-domain, whole-function stack, return, reachability, and recovery evidence; execution semantics remain deferred."
    },
    {
      "path": "engine-wasm/engine/src/wavescript/wap_decoder.rs",
      "test": "decodes_constant_pragma_function_and_instruction_pools",
      "command": "cargo test --manifest-path engine-wasm/engine/Cargo.toml wap_decoder",
      "limitation": "Direct strict verifier evidence only; it does not claim deferred opcode execution, URL/access behavior, or complete chapter 12 closure."
    },
    {
      "path": "engine-wasm/engine/src/engine_wasm_bindings_tests.rs",
      "test": "wasm_wmls_501_decoder_matches_native_fixture_and_failure_semantics",
      "command": "wasm-pack test --node engine-wasm/engine --features wasm-bindings",
      "limitation": "Pins native/WASM decoder parity without changing the host-visible script execution contract."
    }
  ],
  "ownerLayers": [
    "engine-wasm"
  ],
  "requirementIds": [
    "RQ-WMLS-009"
  ],
  "matrixWorkItems": [
    "WMLS-501"
  ],
  "workItems": [
    "W1-02",
    "W1-03",
    "W1-04",
    "W1-05",
    "WMLS-501",
    "WMLS-502",
    "WMLS-503"
  ],
  "source": "spec-processing/source-manifests/wap-1.2.1-wmlscript-scr.json"
}