Skip to main content
wr.fi

Protocol conformance

The protocol proves itself: every guarantee below maps to a named probe in the end-to-end run against this deployment, published to a versioned status relay. Nothing here is asserted — null means unverified, never assumed. Machine-readable at /api/conformance.

Protocol 1.2.0Verified 11 hours ago · 24/24 probes green
Replace updates require expectedVersion (428 when missing)probe: update without expectedVersion refused (428) · 37ms · last run 11 hours agoverified
Stale writes are refused (409, never a silent overwrite)probe: version conflict detected (409) · 17ms · last run 11 hours agoverified
Forced overwrites are explicit and auditedprobe: force overwrite is explicit and audited · 20ms · last run 11 hours agoverified
Review decisions are version-bound (428 when missing)probe: review decision without expectedVersion refused (428) · 18ms · last run 11 hours agoverified
Appends are server-serialized — never conflictprobe: append is server-serialized · 24ms · last run 11 hours agoverified
Append retries replay (Idempotency-Key)probe: append Idempotency-Key replays · 41ms · last run 11 hours agoverified
Credential-bearing URLs are no-referrer + no-storeprobe: security headers on credentialed URL · 16ms · last run 11 hours agoverified
User deletion never blocklists content for othersprobe: delete then re-push same bytes succeeds (blocklist is moderation-only) · 85ms · last run 11 hours agoverified
Latest probe run — 24/24 green, 11 hours ago
  • pass ping
  • pass llms.txt served
  • pass machine view on /
  • pass anonymous push
  • pass ?h handoff view
  • pass ?format=json
  • pass update with edit token + expectedVersion
  • pass version conflict detected (409)
  • pass update without expectedVersion refused (428)
  • pass force overwrite is explicit and audited
  • pass append is server-serialized
  • pass append Idempotency-Key replays
  • pass review decision without expectedVersion refused (428)
  • pass security headers on credentialed URL
  • pass security headers on credentialed URL (invalid token)
  • pass ?since catch-up
  • pass ?diff=1
  • pass history JSON
  • pass RSS feed
  • pass ?h&for=chatgpt dialect
  • pass ?h&budget=2000 fits
  • pass push response carries lint
  • pass openapi spec
  • pass delete then re-push same bytes succeeds (blocklist is moderation-only)

The probe source is scripts/matrix-probe.mjs in the wr.fi repository — reproducible against any instance. History lives in the status relay’s own version history. Operational health is a separate question: /api/health. Compatibility per tool: the matrix.