1# llimphi-wasm-core23Distribution by hash of Tier 3 WASM apps (no GPU).
45The pure core of distribution: hash resolution, integrity and Ed25519 grant
6verification, effective permissions. It **does not depend on the runner or on
7Llimphi** — so a headless service (a relay, a blob server) can use it without
8dragging in the graphics stack. The bridge to actually *run* a `VerifiedApp`
9lives in `llimphi-wasm-dist` (which adds the runner).
1011The chain, a host-side mirror of what wawa's kernel does with its apps:
12131. **Resolve** the bytecode by its BLAKE3 hash from a `BlobSource` (today
14 `DiskStore`, a local CAS; or a P2P backend such as `llimphi-wasm-net`).
152. **Verify integrity**: the retrieved wasm must rehash to the requested hash —
16 content addressing, tamper detection.
173. **Verify the Ed25519 grant** (`format::ConcesionCapacidad`): the author must
18 live in a loadable `TrustRing` and the signature must cover
19 `mensaje_capacidad(bytecode, permissions)`. A grant for bytecode X is never
20 valid for Y.
2122---
2324Part of **llimphi** — see [llimphi](../README.md).
README.md
llimphi-wasm-core
Distribution by hash of Tier 3 WASM apps (no GPU).
The pure core of distribution: hash resolution, integrity and Ed25519 grant
verification, effective permissions. It does not depend on the runner or on
Llimphi — so a headless service (a relay, a blob server) can use it without
dragging in the graphics stack. The bridge to actually run a VerifiedApp
lives in llimphi-wasm-dist (which adds the runner).
The chain, a host-side mirror of what wawa's kernel does with its apps:
Resolve the bytecode by its BLAKE3 hash from a BlobSource (today
DiskStore, a local CAS; or a P2P backend such as llimphi-wasm-net).
Verify integrity: the retrieved wasm must rehash to the requested hash —
content addressing, tamper detection.
Verify the Ed25519 grant (format::ConcesionCapacidad): the author must
live in a loadable TrustRing and the signature must cover
mensaje_capacidad(bytecode, permissions). A grant for bytecode X is never
valid for Y.