# llimphi-wasm-core

Distribution by hash of Tier 3 WASM apps (no GPU).

The pure core of distribution: hash resolution, integrity and Ed25519 grant
verification, effective permissions. It **does not depend on the runner or on
Llimphi** — so a headless service (a relay, a blob server) can use it without
dragging in the graphics stack. The bridge to actually *run* a `VerifiedApp`
lives in `llimphi-wasm-dist` (which adds the runner).

The chain, a host-side mirror of what wawa's kernel does with its apps:

1. **Resolve** the bytecode by its BLAKE3 hash from a `BlobSource` (today
   `DiskStore`, a local CAS; or a P2P backend such as `llimphi-wasm-net`).
2. **Verify integrity**: the retrieved wasm must rehash to the requested hash —
   content addressing, tamper detection.
3. **Verify the Ed25519 grant** (`format::ConcesionCapacidad`): the author must
   live in a loadable `TrustRing` and the signature must cover
   `mensaje_capacidad(bytecode, permissions)`. A grant for bytecode X is never
   valid for Y.

---

Part of **llimphi** — see [llimphi](../README.md).