Skip to content

Inspection Boundary Lab

This lab is a bounded browser consumer of the Tosumu inspection contract. It does not parse pages in JavaScript, unlock stores, or read paths from the host. It sends either a reviewed bundled byte fixture or an uploaded byte buffer to the Tosumu WASM adapter and presents the versioned observation returned by that adapter. JavaScript transports bytes only; it does not parse the database.

Without JavaScript or WASM, this page remains a useful disclosure: the current browser proof reads only the plaintext page-zero header. Page verification, tree traversal, WAL inspection, keyslots, protectors, and decrypted content are intentionally unavailable in this mode.

TOSUMU / BROWSER INSPECTION BOUNDARY

Header-only byte observation

The reviewed fresh-store fixture loads automatically, so this boundary remains useful without asking visitors to bring a database. The reviewed cases exercise the facts this boundary can establish and the errors it must report. Uploads are capped at 16 MiB, remain in this browser session, and are never assigned a host path by the contract.

Reviewed boundary cases

Inspect an uploaded database instead

WASM inspection is loading. Static disclosure remains available if it cannot start.

Choose a reviewed fixture to see a bounded Tosumu observation or explicit rejection.

Unavailable by design in this browser proof:
- protected-store unlocking
- page and tree verification
- WAL and keyslot inspection
- decrypted content preview

Two embedded interfaces

TypeScript semantic interface: browser controls select reviewed or uploaded bytes; the Tosumu Rust/WASM adapter returns a versioned observation; TypeScript renders that observation panel. The browser transports bytes and presents facts, but never parses database pages or invents storage meaning.

Ratatui terminal interface: the same bounded result initializes one interactive Rust/WASM-owned Ratatui session. Ratatui produces normalized terminal cells, the browser canvas draws those cells, and focused browser input is forwarded as bounded events. Rust/WASM owns the prompt, transcript, history, and command outcomes.

Why both exist: the TypeScript interface is the accessible semantic browser presentation. The Ratatui interface is the terminal-provider proof. They share an observation boundary but do not share UI state or make the browser a terminal emulator.

Browser-safe Ratatui command session

Click the terminal to claim keyboard focus, then type HELP, STATUS, or CLEAR and press Enter. The browser releases terminal focus when you click elsewhere. TQL and native storage commands remain deliberately unavailable because raw uploaded bytes are not a reviewed native store session.

Awaiting a reviewed fixture or uploaded byte buffer.