@hesohq/verify-wasm 0.1.0-dev.11 → 0.1.0-dev.13

package/heso_wasm.d.ts

@@ -189,8 +189,11 @@ export function validateNoFloorBypass(rules_json: string): void;
  *
  * Never panics — structural failures return an `ActionVerdict` with
  * `verdict = "Malformed:…"`. This is the browser replacement for the
- * `verifyReceipt` function in `crypto.ts`, backed by the identical Rust
- * JCS + BLAKE3 + Ed25519 path so Node and browser get byte-identical results.
+ * `verifyReceipt` function in `crypto.ts`, backed by the SAME Rust JCS +
+ * BLAKE3 + Ed25519 core as Node for canonicalization, hashing, and signature
+ * verification. NOTE: this is NOT byte-identical to Node for EVERY receipt —
+ * the `tsa` feature is OFF here, so a TIME-ANCHORED receipt that Node verifies
+ * against its TSA stack is handled differently on the browser surface.
  */
 export function verifyActionReceipt(receipt_bytes: Uint8Array): ActionVerdict;
 

package/heso_wasm.js

@@ -638,8 +638,11 @@ export function validateNoFloorBypass(rules_json) {
  *
  * Never panics — structural failures return an `ActionVerdict` with
  * `verdict = "Malformed:…"`. This is the browser replacement for the
- * `verifyReceipt` function in `crypto.ts`, backed by the identical Rust
- * JCS + BLAKE3 + Ed25519 path so Node and browser get byte-identical results.
+ * `verifyReceipt` function in `crypto.ts`, backed by the SAME Rust JCS +
+ * BLAKE3 + Ed25519 core as Node for canonicalization, hashing, and signature
+ * verification. NOTE: this is NOT byte-identical to Node for EVERY receipt —
+ * the `tsa` feature is OFF here, so a TIME-ANCHORED receipt that Node verifies
+ * against its TSA stack is handled differently on the browser surface.
  * @param {Uint8Array} receipt_bytes
  * @returns {ActionVerdict}
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hesohq/verify-wasm",
-  "version": "0.1.0-dev.11",
+  "version": "0.1.0-dev.13",
   "description": "HESO Enterprise trust layer — browser WASM verify-only surface (ESM)",
   "type": "module",
   "exports": {