v0.106.1

the checker reaches the browser

published 2026-07-28 · 8 assets

The browser release: the parse + conformance half of nika check compiled to WebAssembly and admitted through the full 12-gate ceremony (ADR-107), including a three-leg adversarial review that found a real engine bug before any browser saw it (a jq nesting bomb that killed the checking instance for good; the guard now refuses at depth 128 on every surface). The artifact debuts on npm as @supernovae-st/nika-check-wasm, packed by the release train itself: manifest projected from cargo metadata, host paths remapped out of the bytes, the tarball attached to the release and attested whether or not a registry credential exists. The registry copy carries npm provenance, byte-verified against the attested asset by the train’s own gate. In-band honesty rides every verdict (wasm: true and a closed legs: list), so the browser half can never be mistaken for the full binary. Around it the ladder tightens: when:/for_each: stop admitting the loop locals, and the audited card stops calling a ceiling a floor. This site’s /play runs the exact attested artifact. Embed it from npm and it judges your files the same way.

vendored from the public release record · re-vendored at the train cadence