MALT Web

Public website, design documentation, and browser proof-verification tools for MALT. The managed account and Bucket UI lives in DeWebProtocol/gateway/console; this repository does not ship the Gateway Console.

Website: dewebprotocol.github.io/malt-web.

MALT is a general arc-granularity data-authentication system for graph-shaped relations. Vector-commitment backends authenticate arcs, immutable payloads remain in content-addressed storage (CAS), and untrusted execution components locate and serve proofs. UnixFS is one application model over that core. The user-controlled local runtime supports flat-v1, hybrid-v1 and rooted-v1 UnixFS layouts. Layout selection and payload handling remain runtime application concerns.

Current Source and Verifier Pin

Current source uses explicit typed authentication through malt.authentication/5, with Prefix and Positional trees. Retired Map/List, Resolve/Read and Artifact compatibility adapters are removed. Applications select every traversal input as opaque label bytes, including the ordinary @payload label where required by their layout. Core also offers optional sdk/object Map/List/Immutable constructors over these current contracts.

The public verifier uses the supported @dewebprotocol/malt/verifier API and copies WASM assets from the exact malt-ts commit pinned in package-lock.json. verifier-source.json binds the SDK commit, its Core source identity, the verifier asset-set digest, and the portable corpus digest. Run npm run sync:verifier after deliberately updating those pins; this website does not compile WASM or manage its own browser runtime. The current pin is SDK 0.0.3 at 735c894cb7dd4bbdfa7032c75f48f5f23820fd14, bound to Core v0.0.10 at aaa78737c35f82fe91bb3f749cfddbcb7953ed2b. The portable authentication-v3.json corpus is copied unchanged from that Core release.

The Resolve tool calls the current Gateway typed query route. The Verify tool imports proof JSON locally and verifies only a query whose Root and request the user confirms; it does not establish freshness or verify downloaded payload bytes. See the tool documentation.

Prerequisites

• Node.js 22 or newer
• npm (comes with Node.js)

Development

npm install
npm run dev

The dev server starts at http://127.0.0.1:5173.

Build

npm run build

Preview the production build locally:

npm run preview

Deployment

GitHub Actions tests and builds pull requests and each push to main. Main builds publish the static artifact to GitHub Pages. Pages uses the Actions publishing source and the github-pages environment. The public site's base path is /malt-web/; local development defaults to /.

To reproduce the deployed path locally:

BASE_PATH=/malt-web/ npm run build
BASE_PATH=/malt-web/ npm run preview

The managed Gateway Console has its own deployment in the Gateway repository.

Test

Run documentation, browser-query, local import, asynchronous state, and actual WASM conformance checks:

npm test

Documentation Ownership

Protocol behavior, verifier-facing schemas, wire-format notes, compatibility policy, and MIPs live in DeWebProtocol/malt-core/docs. Reproducible benchmark runners, comparison adapters, plans, and research-grade result generation live in DeWebProtocol/malt-evaluation. This site summarizes concepts, tutorials, and public narrative, and links back to the implementation repository for source-of-truth technical details. Managed-service behavior and the same-origin Console are defined by DeWebProtocol/gateway.

Related Repositories

• DeWebProtocol/malt-core — application-neutral authentication SDK, normative contracts, MIPs, and verifier
• DeWebProtocol/malt-ts — supported TypeScript/JavaScript API, browser Workers, and WASM assets bound to an exact published Core release
• DeWebProtocol/gateway (private) — optional untrusted hosted executor, Bucket/CAS gateway, same-origin Console, and managed-service integration
• DeWebProtocol/malt — user-controlled MALT local runtime, CLI/daemon, trusted-root policy, UnixFS, and Merkle DAG compatibility; its Go module remains github.com/dewebprotocol/malt-client during the initial refactor
• DeWebProtocol/malt-evaluation (private) — the malt-eval-next experiment protocol, explicit Core/product measurement boundaries, replay accounting, and result provenance
• DeWebProtocol/malt-web — public website, conceptual docs, tutorials, and browser proof-verification tools
• DeWebProtocol/.github — organization profile and community defaults

License

MIT — see LICENSE.