Claude
80b1715cb8
Adds a rendered screenshot of the VEIL management console (dark theme, shield engaged: the room's WiFi identity clusters collapsed to the chance floor, re-ID 4.7%, PROTECTED) as a banner at the top of the crate README. Captured at a 16:11 landscape viewport (2400x1752, 2x). Co-Authored-By: claude-flow <ruv@ruv.net> Claude-Session: https://claude.ai/code/session_01WEXNqzs7UsfNFBcP5yW21p
wifi-densepose-privshield — VEIL
VEIL (Verifiable Emission-shaping for Identity-Leakage prevention) is the compliant-waveform countermeasure counterpart to BFLD (ADR-118/121). BFLD detects when beamforming feedback becomes identifying; VEIL acts — it shapes a node's own outgoing beamforming feedback so that an unauthorized passive sniffer cannot re-identify people or infer activity, while a legitimate receiver (which shares the per-session key) sees an essentially unchanged link.
This crate is a deterministic, dependency-free, WASM-ready reference and
experiment — not a radio driver. It never emits RF. Every number it prints is
SYNTHETIC, reproduced by cargo test -p wifi-densepose-privshield.
See ADR-288
and the research bundle. A per-crate npm
contributor harness lives at
harness/wifi-densepose-privshield/
(ADR-289): npx wifi-densepose-privshield-harness guidance --topic overview.
The idea
Identity leaks through the fine cross-subcarrier phase structure of a compressed beamforming report; data throughput rides the dominant beam direction. These live in (mostly) separable subspaces. VEIL composes extra keyed Givens rotations — the exact primitive the report is already built from — over the fine subspace only:
| Property | Consequence |
|---|---|
| Orthogonal (energy-preserving) | No added transmit power ⇒ not jamming (47 U.S.C. §333/§302a) |
| Keyed per session | The legitimate AP inverts it ⇒ throughput preserved |
| Fresh each session | A sniffer sees a different rotation every time and can't average it back ⇒ re-identification collapses to chance |
Result (hyper-optimized default scene, N = 16 identities)
| Metric | Shield off | Shield on |
|---|---|---|
| Passive re-ID accuracy | 100% | 4.7% (chance = 6.25%) |
| Link throughput ratio | 100% | 97.6% |
| Emission energy ratio | — | 1.000000 (compliant) |
The shipped shield config is not hand-picked — it is the output of the
optimize module (ADR-288 §opt): 96 Givens passes (2× the proven-minimum
48 for robust collapse across both attacker metrics and N∈{16,32}; extra passes
are free because the keyed rotation is never signaled) at 5-bit feedback
resolution (the throughput-best value in the 802.11 {5,7,9} set). The
unconstrained model optimum is 3-bit, matching the DySPAN-2026 finding.
Threat model & scope (stated plainly)
VEIL defends against a third-party passive sniffer capturing plaintext beamforming feedback. It does not hide identity from the AP a node is associated with (that party holds the key by construction) — that is BFLD's detection/policy problem, not this shield's. It is compliant by construction: it only shapes the node's own standards-conformant frames, never transmits to interfere with another station, and never operates an unauthorized emitter. It is not jamming, not RF denial, and not a claim of camera-grade anything.
Run it
cargo test -p wifi-densepose-privshield --no-default-features
Modules
| Module | Purpose |
|---|---|
prng |
Deterministic, WASM-safe PRNG + key derivation |
linalg |
Givens-rotation vector algebra |
identity |
SYNTHETIC two-subspace beamforming-feedback model |
protector |
The compliant waveform controls (the shield) |
attacker |
Passive re-identification adversary (Euclidean + Cosine metrics) |
throughput |
Link-throughput model (residual + feedback-airtime + sounding) |
compliance |
Machine-checkable "not jamming" audit |
experiment |
Attacker-vs-protector head-to-head |
optimize |
Finds the optimal shield config (feedback bits, min passes, Pareto frontier) |
proof |
Byte-stable deterministic witness |