Status

2026-05-19 · current session

Done complete

Living-spec artifact set generated under dist/: index.html, plan.html, architecture.html, design.html, status.html, api.html, compliance.html. All seven files are self-contained — no external assets, no CDN, no webfonts. Each carries <meta name="generated"> stamp and footer date. micro/ gitignored as throwaway scratch directory.

In progress wip

None — the artifact generation was the only task for this session. Next agent run should regenerate status.html with any new session work and plan.html if v0.4 milestones firm up.

Blocked none

No blockers in the spec-generation track.

Next up

Re-run regen when these triggers fire (see html.prompt for the full table): plan.html on scope or milestone change, architecture.html on a new crate or dependency change, api.html on any CLI flag change, compliance.html on a regulation update or new evidence path, status.html at end of each work session.

2026-05-19 · prior session (from git log)

Shipped to main

Commit	Subject
f36febc	Add worldid-verify to docs, install script, OpenCode rules, and tool listings shipped
3a8147b	Bump version to 0.3.2 for WASI HTTP capability release shipped
e777b4f	Update README with WASI HTTP capability details and host filtering shipped
72e28d2	Add WASI HTTP support to runtime with host-based access control shipped
f72effe	Add diffsummary to docs, install script, OpenCode rules, and tool listings shipped
1d998a4	Bump to 0.3.1; add agent shell enforcement to README shipped
7dbe421	Add agent shell enforcement and OpenCode integration guide shipped
f43efc2	Compliance runtime: run log, policy enforcement, signed audit export shipped

Open follow-ups

• WASI HTTP host filter coverage: add integration test that exercises a denied host and asserts the runtime-level rejection happens before any socket open. todo
• Binary size: currently ~26MB unstripped / ~20MB stripped. Target sub-20MB. Try LTO=fat + strip = "symbols" in release profile. todo
• Leptos dashboard (v0.4): crate crates/dashboard not yet created. Ship as a WasmBox tool itself so the web-UI capability path gets dogfooded. planned
• Spin integration (v0.4): backend tools delegate to spin up, mapping WasmBox network grants to Spin allowed_outbound_hosts. planned
• Publisher signatures (v0.5): optional Ed25519 over manifest bytes (excluding signature field). Separate from audit-export signing. planned

Working uncommitted state

At session start: modified AGENTS.md, CLAUDE.md, Cargo.lock in working tree; untracked .prompt/, AGENTS-comp.md, AGENTS.original.md, CLAUDE.original.md. These are unrelated to spec generation — left as-is.