- Spec-first implementation from explicit behavior docs.
- Strict/hardened mode split at compatibility boundaries.
- Fail-closed on unknown incompatible features in strict mode.
- Profile-first optimization with behavior-isomorphism proofs.
- RaptorQ sidecar durability for long-lived evidence artifacts.
fj-core: canonical data model, tensor value model, Trace Transform Ledger (TTL), transform composition proofs.fj-trace: trace context, abstract values, nested trace lifecycle, andmake_jaxprmaterialization.fj-lax: scoped primitive execution semantics (scalar + tensor subset).fj-interpreters: interpreter path over canonical IR and runtime values.fj-ad: forward/reverse automatic differentiation rules and higher-order derivative helpers.fj-cache: deterministic cache-key derivation + compatibility gates.fj-ledger: decision/evidence ledger artifacts.fj-dispatch: dispatch pipeline integrating trace, cache, interpreter, AD, ledger, backend, and transform wrappers.fj-runtime: runtime admission model and integration bridges.fj-egraph: e-graph optimization sandbox and IR round trip.fj-api: V1 user-facing facade forjit,grad,vmap,value_and_grad,jacobian,hessian, andmake_jaxpr.fj-backend-cpu: dependency-wave CPU backend.fj-ffi: C FFI boundary and the only crate allowed to host native interop safety obligations.fj-conformance: fixture manifests, transform parity runner, and durability pipeline.fj-test-utils: shared test scaffolding and fixture helpers.
Boundary evidence:
./scripts/run_architecture_boundary_gate.sh --enforceartifacts/conformance/architecture_boundary_decision.v1.jsonartifacts/e2e/e2e_architecture_boundary_gate.e2e.json
fj-api request -> trace/Jaxpr -> TTL proof -> cache key -> transform wrappers -> interpreter/backend -> decision ledger -> response
user API -> trace -> canonical IR -> transform stack -> lowering -> runtime backend
- Strict mode:
- maximize compatibility
- reject unknown incompatible metadata
- no behavior-changing repairs
- Hardened mode:
- preserve outward contract
- allow bounded defensive handling
- log compatibility events to evidence ledger
Runtime integration points include:
- cancellation-aware checkpoints during long-running compile/dispatch operations
- budget/deadline propagation for controlled degradation
- deterministic outcome capture for policy decisions and auditability
Operational UI integration points include:
- real-time display of transform stack and cache decision state
- progressive disclosure of evidence ledger details
- parity/benchmark status dashboards for operator workflows
Conformance:
- fixture bundle (
transform-fixtures.v1) -> case runner ->fj-dispatchexecution -> tolerance comparison -> parity report
Benchmark:
- criterion benchmark (
dispatch/simple_add) tracked inartifacts/performance/dispatch_baseline_2026-02-13.md - warm/cold cache and transform overhead deltas to be expanded per family
Implemented durability module: fj-conformance::durability.
Pipeline:
- Encode artifact bytes to RaptorQ symbols via Asupersync
EncodingPipeline. - Persist sidecar manifest with symbol payloads.
- Scrub by decoding and comparing SHA-256 to original bytes.
- Emit decode proof artifacts under simulated symbol loss.
Current committed durability artifacts:
artifacts/durability/legacy_transform_cases.v1.sidecar.jsonartifacts/durability/legacy_transform_cases.v1.scrub.jsonartifacts/durability/legacy_transform_cases.v1.decode-proof.jsonartifacts/durability/dispatch_baseline_2026-02-13.sidecar.jsonartifacts/durability/dispatch_baseline_2026-02-13.scrub.jsonartifacts/durability/dispatch_baseline_2026-02-13.decode-proof.json
Operational CLI:
cargo run -p fj-conformance --bin fj_durability -- generate ...cargo run -p fj-conformance --bin fj_durability -- scrub ...cargo run -p fj-conformance --bin fj_durability -- proof ...cargo run -p fj-conformance --bin fj_durability -- pipeline ...
- Preserve crate boundaries while expanding primitive/transform coverage.
- Keep
fj-api,fj-backend-cpu,fj-ffi, andfj-conformanceas explicit V1 boundaries. - Defer dedicated
fj-transformsandfj-loweringcrates until transform/control-flow parity and public facade replay evidence are green. - Add legacy-oracle strict capture runs when fixture families need refresh.
- Expand drift-gate compatibility matrix to cover cache-key and transform semantics at subsystem granularity.
- Add future lowering/backend extraction beads only when a real compiler/lowering IR or multiple backend contracts exist.