TESSARYN

TESSARYN is a local-first native 4D reality-construction engine. It assembles bounded places from portable spatial-temporal Cells without a map SDK, tile service, panorama provider, globe, or provider-owned world model.

The world is not loaded. It is constructed.

Release State

This repository is 0.5.0. It contains the tested World Cell kernel, capture-to-Cell reconstruction, authenticated private Locus exchange, signed witness receipts, Power House packaging, a browser-local verifier, a durable Personal Weave, and a signed write-capable public Object Weave. The browser now starts in a private local construction field: opening, retaining, and publishing an owned capture is the primary path. TartanAir V2 remains available only as an opt-in exact-ground-truth Validation Lab. Real RGB-D reconstructions are first-class objects rather than secondary inspection receipts, and Vesper Court remains a deterministic protocol vector. See STATUS.md for the software release contract.

The release implements:

• strict integer-only Cell manifests and deterministic Cell IDs;
• domain-separated chunk hashing and Merkle roots;
• fixed-point Anchor transforms with explicit path divergence;
• a bounded, policy-aware Locus compiler and materialization receipts;
• local content-addressed storage with read-time digest verification;
• consent-gated RGB-D ingestion with identity-bound per-pixel masks and exclusion-volume redaction before deprojection and sparse SDF fusion;
• independently reverifiable reconstruction reports that omit raw frames;
• XChaCha20-Poly1305 encrypted Loci with X25519 multi-recipient key wrapping;
• Ed25519 signed, replay-protected, branch-preserving peer synchronization;
• signed witness receipts with explicit attestation classes and independence groups that never acquire core proof authority;
• Power House .pha, Rootprint, replay, Memory Capsule, and SLBIT bindings;
• an opt-in reproducible 640x640 RGB-D validation Locus with 48 archive-bound frames, 212,565 verified surfels, and 224,867 verified sparse-SDF voxels;
• a provenance-bound dataset profile that keeps synthetic ground truth and real sensor evidence cryptographically distinct;
• three branch-aware trajectory Moments and one alternate reconstruction branch;
• real-sensor layout adapters for EuRoC stereo/IMU, KITTI stereo/LiDAR/OXTS, and ScanNet RGB-D sources, each producing a content-bound inspection receipt;
• a restricted region whose protected geometry is absent;
• strict local browser import, verification, rendering, and exact-layer mutation rejection for portable reconstruction artifacts;
• a binary tessaryn/cinematic-object/v1 package that commits authored native spatial architecture and chunked internal temporal matter under one Cell, PHA, Rootprint, replay identity, Memory Capsule, and SLBIT binding;
• the public Object Weave catalog with stable object IDs, search, direct viewer routes, local reverification, and shareable public artifacts;
• browser-origin Ed25519 publisher identities that remain on the originating device;
• a Personal Weave backed by origin-private browser storage, with a persistence request and verified reopen path;
• resumable fixed-size public publication, server-side artifact reverification, atomic content-addressed storage, deduplication, byte-range retrieval, and signed publication receipts without a GitHub submission;
• independently revocable public discovery that never rewrites artifact, Cell, PHA, or Rootprint identity;
• a diamond-plan Continuum Monument with open entrances, inhabitable Cell walls, disclosure boundaries, a volumetric memory core, four separable Moments, and deterministic architectural World Cell placement;
• file-backed arbitrary artifact indexing with no total application size cap, worker-isolated 4 MiB windows, bounded memory, progress, cancellation, and deterministic stream roots; raw video is index-only and never treated as world geometry;
• worker-isolated verification of temporal artifacts with explicit source selection manifests and exact mutation rejection;
• full-bleed native Three.js construction, Condensation, continuous Scale Breathing, Chronofold, provenance Lens, and inside-out Cell Trace inspection;
• identity-derived matter, branching memory architecture, Cell condensation, Rootprint currents, living SLBIT constellations, temporal manifolds, and an adaptive software-renderer path;
• service-worker-backed offline operation after the first successful load.

Run The Private Origin

cargo run -p tessaryn-cli -- generate-demo
cargo run -p tessaryn-cli -- verify-demo
cargo run -p tessaryn-cli -- challenge-demo
cargo run -p tessaryn-cli -- verify-validation-locus \
  apps/viewer-web/public/world/archviz-tiny-house-locus.json
cd apps/viewer-web
npm ci
npm run dev

Open http://localhost:5173. The first screen is the local construction field, not a synthetic scene or public catalog object. CONSTRUCT A PLACE opens one content-aware local intake with drag-and-drop and an unrestricted picker:

• strict reconstruction JSON and complete validation-Locus JSON are locally verified and materialized as native spatial-temporal Cells;
• .tessaryn packages are locally verified and opened as native temporal objects;
• GLB, GLTF, OBJ, PLY, and STL source geometry is indexed and staged in the traversable renderer without inventing Cell, PHA, or Rootprint identity; and
• every other file is indexed as source evidence with a deterministic, file-backed stream root.

Local artifacts remain private unless their owner explicitly chooses PUBLISH TO WEAVE and authorizes disclosure.

The production Origin is available at tessaryn.com.

Reconstruct A Capture

reconstruct-rgbd-files accepts bounded little-endian depth, RGBA, and optional one-byte privacy-mask channels. Paths are confined to the request directory and must have exact dimensions. The output is a portable JSON artifact containing privacy-filtered surfels, sparse SDF, .pha bindings, Rootprint lineage, SLBIT packets, and strict Memory Capsules.

cargo run -p tessaryn-cli -- \
  reconstruct-rgbd-files capture/request.json capture/artifact.json
cargo run -p tessaryn-cli -- \
  verify-reconstruction capture/artifact.json

The browser ADD and CONSTRUCT A PLACE controls use the same local intake. They import the artifact without uploading it and index arbitrary local files directly from their original storage while a dedicated worker builds the deterministic tessaryn/local-file-index/v1 stream root in bounded memory. Bulk channels stay file-backed; only compact reconstruction manifests use strict whole-document JSON parsing.

After local verification, the object can be retained in the Personal Weave or published directly from the product. The same path accepts both real RGB-D reconstructions and authored temporal objects while preserving their different source classes.

Publish Without GitHub

Run an independent write-capable node:

TESSARYN_WEAVE_ROOT=./weave-data \
TESSARYN_WEAVE_PUBLIC_URL=http://127.0.0.1:8790 \
TESSARYN_WEAVE_ALLOWED_ORIGINS=http://127.0.0.1:5173 \
cargo run -p tessaryn-weave-node

The browser signs publication metadata against the complete artifact SHA-256, resumes only missing chunks, and accepts the returned publication only when it binds the Cell and Rootprint values already verified locally. The node then reconstructs the complete artifact, re-runs all admitted protocol and Power House verification, commits bytes atomically by digest, and publishes a searchable receipt. See Write-Capable Object Weave v1.

Build And Verify A Cinematic Object

The cinematic object path is authored object first. Its embedded MP4 is a compressed temporal material source decoded off-DOM; it cannot supply geometry and is never presented as a player, panorama, or reconstruction. The reference monument is reproducible from the committed descriptor and deterministic media script:

./scripts/render-continuum-cinematic.sh /tmp/continuum-material.mp4
cargo run -p tessaryn-cli -- pack-cinematic-object \
  assets/cinematic/nostalgia-continuum-monument-01.json \
  /tmp/continuum-material.mp4 \
  apps/viewer-web/public/objects/nostalgia-continuum-monument-01.tessaryn
cargo run -p tessaryn-cli -- verify-cinematic-object \
  apps/viewer-web/public/objects/nostalgia-continuum-monument-01.tessaryn

Published catalog objects are discoverable under WEAVE and through ?object=<object-id>. Opening the same file locally recalculates every media chunk and proof layer before the renderer accepts it.

Reproduce The Validation Lab

The opt-in ground-truth Locus is derived from the official TartanAir V2 ArchVizTinyHouseDay/Data_easy/P000/lcam_front sequence under CC BY 4.0. Its profile binds source class, exact RGB and depth archive digests and byte counts, 640x640 calibration, simulator depth and pose ground truth, ordered frame selection, reconstruction Cells, and Rootprint lineage. Details are in docs/validation-portfolio.md and THIRD_PARTY_NOTICES.md.

./scripts/reproduce-validation-origin.sh

Real sensor datasets remain local under their own terms. Their adapters verify layout, synchronization, and every source file before issuing a receipt:

cargo run -p tessaryn-cli -- inspect-dataset euroc /data/MH_01_easy receipt.json
cargo run -p tessaryn-cli -- inspect-dataset kitti /data/2011_09_26_drive receipt.json
cargo run -p tessaryn-cli -- inspect-dataset scannet /data/scene0000_00 receipt.json

Verify The Kernel

cargo fmt --check
cargo clippy --workspace --all-targets -- -D warnings
RUSTDOCFLAGS="-D warnings" cargo doc --workspace --no-deps
cargo test --workspace --locked
./scripts/check-no-map-substrate.sh
node scripts/check-source-hygiene.mjs
node scripts/check-sbom.mjs
cd apps/viewer-web && npm test && npm run build

Architecture

real/synthetic capture -> Cell Forge -> canonical identity -> local store
     -> Anchor Graph -> World Weave -> bounded Locus -> native renderer
     -> Personal Weave / signed public publication -> independent Weave nodes
     -> TESSARYN Power House bridge -> .pha / Rootprint / Memory Capsule

Power House remains the verification and provenance authority. Rendering, capture, reconstruction, and world networking remain separate product layers. SLBIT meaning is independently bound to verified state and can be removed or replaced without changing Cell identity.

Local Verification

The local verifier checks canonical Cell identity, declared chunk digests and Merkle roots, .pha bindings, Rootprint lineage, deterministic replay, Memory Capsule integrity, witness receipts, and SLBIT packet bindings. Results expose identity, lineage, replay, attribution, freshness, dispute, disclosure, witnesses, and meaning as independently inspectable dimensions.

Repository Map

• crates/tessaryn-schema: identity-bearing Cell types and limits.
• crates/tessaryn-canonical: strict parsing, canonicalization, IDs, and Merkle roots.
• crates/tessaryn-anchor: fixed-point relational coordinate graph.
• crates/tessaryn-store: local content-addressed Cell and chunk storage.
• crates/tessaryn-transport: canonical Base64 transport for bounded binary fields.
• crates/tessaryn-forge: bounded capture ingestion and pre-publication redaction.
• crates/tessaryn-reconstruct: fixed-point RGB-D reconstruction and sparse SDF fusion.
• crates/tessaryn-privacy: authenticated encryption, recipient wrapping, and revocation.
• crates/tessaryn-weave: deterministic Locus selection and receipts.
• crates/tessaryn-sync: signed encrypted selective-Locus peer exchange.
• crates/tessaryn-witness: scoped signed witness receipts and evidence dimensions.
• crates/tessaryn-powerhouse: narrow Power House integration boundary.
• tools/tessaryn-cli: reference generation, capture reconstruction, and offline verification.
• services/tessaryn-weave-node: signed resumable admission, durable content-addressed publication, discovery, and byte-range retrieval.
• apps/viewer-web: local-first native 4D viewer.
• specs: versioned protocol contracts.
• conformance: canonical vectors and expected reports.
• sbom: normalized CycloneDX 1.5 inventories bound to both lockfiles.

Supply Chain

cargo deny enforces licenses, sources, wildcard policy, and the documented advisory boundary. Normalized CycloneDX inventories cover every Rust crate and the browser application. node scripts/check-sbom.mjs rejects stale lockfile bindings, modified inventories, non-CycloneDX documents, timestamps, and leaked workstation paths.

Public Origin

The tested static viewer and write-capable Object Weave client are published at https://tessaryn.com/. GitHub Pages deploys only after the conformance workflow succeeds. The apex and www hosts use HTTPS, with www redirected to the apex. The distribution contains no runtime map dependency, analytics SDK, or remote world model. Local files are never published implicitly. User objects become discoverable through signed publication receipts issued by an independent Weave node after complete reverification; no source-code contribution is involved.

Open TESSARYN

License

AGPL-3.0-only. See LICENSE.