mirror of
https://github.com/morluto/rea
synced 2026-10-27 22:45:19 -04:00
Thang Luu
ffaf2c12f1
* feat(wasm): inspect local artifacts with WABT * fix(wasm): preserve custom names and failed cleanup ownership --------- Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>
25 lines
1.3 KiB
Markdown
25 lines
1.3 KiB
Markdown
# Bring-your-own WABT
|
|
|
|
REA does not bundle, patch, install or download WABT executables. Operators select
|
|
an existing tool directory with `REA_WABT_BIN_DIRECTORY`.
|
|
|
|
- Upstream: https://github.com/WebAssembly/wabt
|
|
- Admitted release: https://github.com/WebAssembly/wabt/releases/tag/1.0.42
|
|
- Source commit: `ff0ef7e0009402740c805a9744c09b05be063e48`
|
|
- Upstream license: Apache-2.0, https://github.com/WebAssembly/wabt/blob/1.0.42/LICENSE
|
|
- Runtime tools: `wasm-validate`, `wasm-objdump`, `wasm2wat`.
|
|
- Verification fixture compiler: `wat2wasm` (not a runtime prerequisite).
|
|
|
|
The adapter requires every version banner to report `1.0.42` and records the
|
|
resolved executable path, SHA-256, exact banner and arguments for each tool.
|
|
Version admission identifies the supported producer profile; it does not certify
|
|
publisher authenticity. Operators remain responsible for trusted executable
|
|
provenance. No `wasm-interp`, decompiler, replacement binary parser or target
|
|
execution is used.
|
|
|
|
Real verification on macOS arm64 used the unchanged official
|
|
`wabt-1.0.42-macos-arm64.tar.gz` release asset, whose SHA-256 was checked against
|
|
GitHub release metadata:
|
|
`3f654779b436c628db3ca4323c51538815f5fbc887a6d5f3bb1c18d36281e240`.
|
|
This identifies that verification archive, not arbitrary operator-supplied tools.
|