rea/third_party/wabt
Thang Luu ffaf2c12f1
feat(wasm): inspect local artifacts with WABT (#1533)
* feat(wasm): inspect local artifacts with WABT

* fix(wasm): preserve custom names and failed cleanup ownership

---------

Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>
2026-10-11 19:49:00 +08:00
..
README.md feat(wasm): inspect local artifacts with WABT (#1533) 2026-10-11 19:49:00 +08:00

README.md

Bring-your-own WABT

REA does not bundle, patch, install or download WABT executables. Operators select an existing tool directory with REA_WABT_BIN_DIRECTORY.

The adapter requires every version banner to report 1.0.42 and records the resolved executable path, SHA-256, exact banner and arguments for each tool. Version admission identifies the supported producer profile; it does not certify publisher authenticity. Operators remain responsible for trusted executable provenance. No wasm-interp, decompiler, replacement binary parser or target execution is used.

Real verification on macOS arm64 used the unchanged official wabt-1.0.42-macos-arm64.tar.gz release asset, whose SHA-256 was checked against GitHub release metadata: 3f654779b436c628db3ca4323c51538815f5fbc887a6d5f3bb1c18d36281e240. This identifies that verification archive, not arbitrary operator-supplied tools.