Demonstrations.
Every cargo class, verified in this tab.

A sealed interactive session re-derives every state from kilobytes of signed ops — and converges to the same hash on every machine.

An interactive world MODEL, integer all the way down: drive it with the arrow keys, every generated frame hash-verified, every keystroke a signed action op whose trace replays to one portable session hash. A generated world you can put in a receipt.

A film is a sealed camera-on-rails world. The tab reads the world at each frame, projects it through the camera, and re-derives every frame's hash.

A moving Gaussian cloud carried as per-Gaussian keyframed tracks — interpolated and re-hashed frame by frame, in the fixed-point floor.

A digital human as a skeletal pose stream — bone transforms replay to the identical hash and skin a glTF mesh by the deterministic pose.

A ~1.4 KB bitstream from a post-training-quantized learned codec, decoded entirely in pure-i64 wasm — no float, no ML runtime — then hash-verified byte-for-byte against the native reference.

The ISO/IEC 6048 JPEG-AI mANS entropy decode — a published international standard's bitstream — run with the same pure-i64 wasm a native sink runs, its decoded symbols hash-verified byte-for-byte against the native reference.

An integer inter-frame clip — integer motion compensation + quantized residual — decoded and played in-tab, every frame re-checked against the native reference hash. The keyframe can be the learned int_hyper codec.

A learned 1-D audio codec — integer transposed-conv synthesis + integer IGDN over a factorized-rANS latent — decoded to int16 PCM in pure-i64 wasm, hash-verified against the native reference, then played. The audio sibling of int_hyper.

A learned Gaussian-splat codec — integer synthesis over a factorized-rANS latent — decoded to the [14,S,S] attribute tensor in pure-i64 wasm, hash-verified against the native reference, then rasterized. The int_hyper of 3D; WAI pins the attributes, not the pixels.

A prompt and seed generate an image in pure integer arithmetic — no float, no ML runtime — so the same inputs produce the same bytes on every machine. There is no original, yet the hash is portable and verifiable.

A few hundred bytes of gate op-log, classically simulated in pure-i64 wasm — the reconstructed 2ⁿ-amplitude statevector hash-verified byte-for-byte against the native reference. The QFT presets are the quantum Fourier transform, carried as a circuit. No quantum hardware, no speedup — a quantum computation you can put in a receipt.

Object-based audio: sound objects + a scene, mixed to a bit-exact PCM for a declared layout in the deterministic floor.

Music as note events — a trig-free synth in the Fx floor renders the canonical mixdown; a soundfont is the sink's presentation.

Touch as a keyframed intensity/sharpness envelope, reconstructed to actuator samples that hash identically on every sink.

Scoreboards, telemetry, market tape as signed state — converges to one hash regardless of arrival order. Ship state, not pixels.

Two isolated tabs sign skeletal ops over the relay and converge on the identical pose hash — a live world of avatars.

Two tabs co-drive one generative world; each keystroke is a signed action op, both replay the merged log and converge on the identical byte-exact world + session hash. Multiplayer convergence for a generated world.

End-to-end encrypted over the real relay: an MLS group derives a shared SFrame key, object payloads are sealed so the relay forwards + signs a moq-jwp receipt over only ciphertext. A member decrypts; a non-member can't. MLS + SFrame per draft-jennings-moq-e2ee-mls.

One envelope carrying several cargo classes — a cut film and its embedded soundtrack — every part re-derived and checked, played in sync.

A signed, energy-accounted lineage for opaque captured content — content-addressed, Ed25519-sealed, with measured joules per step.

The verify half applied to the quantum-control industry: seal a signed, content-addressed, joule-metered, grant-authorized receipt of a calibration run or a QPU job — then watch it enforce itself in-tab. Tamper a field and verify fails; blow the joule budget and verify fails; a job binds the exact calibration state it ran under. WAI owns the receipt; the control system runs the hardware.