Inspection Boundary Lab
This lab is a bounded browser consumer of the Tosumu inspection contract. It does not parse pages in JavaScript, unlock stores, or read paths from the host. It sends either a reviewed bundled byte fixture or an uploaded byte buffer to the Tosumu WASM adapter and presents the versioned observation returned by that adapter. JavaScript transports bytes only; it does not parse the database.
Without JavaScript or WASM, this page remains a useful disclosure: the current browser proof reads only the plaintext page-zero header. Page verification, tree traversal, WAL inspection, keyslots, protectors, and decrypted content are intentionally unavailable in this mode.
TOSUMU / BROWSER INSPECTION BOUNDARY
Header-only byte observation
The reviewed fresh-store fixture loads automatically, so this boundary remains useful without asking visitors to bring a database. The reviewed cases exercise the facts this boundary can establish and the errors it must report. Uploads are capped at 16 MiB, remain in this browser session, and are never assigned a host path by the contract.
Reviewed boundary cases
Inspect an uploaded database instead
WASM inspection is loading. Static disclosure remains available if it cannot start.
Choose a reviewed fixture to see a bounded Tosumu observation or explicit rejection. Unavailable by design in this browser proof: - protected-store unlocking - page and tree verification - WAL and keyslot inspection - decrypted content preview
Two embedded interfaces
TypeScript semantic interface: browser controls select reviewed or uploaded bytes; the Tosumu Rust/WASM adapter returns a versioned observation; TypeScript renders that observation panel. The browser transports bytes and presents facts, but never parses database pages or invents storage meaning.
Ratatui terminal interface: the same bounded result initializes one interactive Rust/WASM-owned Ratatui session. Ratatui produces normalized terminal cells, the browser canvas draws those cells, and focused browser input is forwarded as bounded events. Rust/WASM owns the prompt, transcript, history, and command outcomes.
Why both exist: the TypeScript interface is the accessible semantic browser presentation. The Ratatui interface is the terminal-provider proof. They share an observation boundary but do not share UI state or make the browser a terminal emulator.
Browser-safe Ratatui command session
Click the terminal to claim keyboard focus, then type HELP,
STATUS, or CLEAR and press Enter. The browser
releases terminal focus when you click elsewhere. TQL and native storage
commands remain deliberately unavailable because raw uploaded bytes are
not a reviewed native store session.
Awaiting a reviewed fixture or uploaded byte buffer.