Two additions on top of the hyper-optimized VEIL shield.
1) Adaptive optimization (v2/crates/wifi-densepose-privshield/src/optimize.rs):
- optimal_bits_across_snr / model_optimal_bits_for_snr: the throughput-
optimal feedback resolution shifts with SNR (unconstrained optimum 4 bits
at 5-10 dB, 3 bits at 20-40 dB); within the spec {5,7,9} set it stays 5,
which is why the shipped shield is SNR-stable.
- adaptive_shield / min_passes_for_n: derive a shield for a specific
deployment. Finding: the collapse budget is N-independent in this model
(48 passes collapses N in {8,64} alike) — it is set by the fine-subspace
dimension, not the candidate count. Defaults unchanged, so the proof
witness is untouched. 38 tests + doctest pass; clippy -D warnings clean.
2) npm metaharness harness/wifi-densepose-privshield/ (ADR-289), mirroring
wifi-densepose-sar-harness (ADR-286) with two improvements:
- @metaharness/* imported dynamically inside the commands that need them, so
`guidance` and `--help` run with ZERO dependencies installed (offline / pre
`npm install`).
- a dependency-free VEIL `guidance` command: a source-cited, evidence-
labelled, read-only capability map (topics: overview, threat,
countermeasure, compliance, optimization, experiment).
Standard router + flywheel (SYNTHETIC) + Darwin wiring, tailored to VEIL
task axes and policy levers. Tests: smoke + router + flywheel (need install)
and guidance (offline). .harness manifest generated with real per-file
hashes. Validated offline: cli syntax, --help, guidance topics, exit codes,
graceful degradation when deps are absent.
Docs: research bundle 08 gains a per-deployment adaptivity section; 07 and the
crate README point at the harness; ADR-289 added and indexed.
Co-Authored-By: claude-flow <ruv@ruv.net>
Claude-Session: https://claude.ai/code/session_01WEXNqzs7UsfNFBcP5yW21p
2.7 KiB
wifi-densepose-privshield-harness
A metaharness (contributor harness) for
wifi-densepose-privshield — VEIL,
the compliant-waveform WiFi-sensing privacy shield (ADR-288). Defined by ADR-289.
Advanced Coding — architect → implement → review → test, plus a dependency-free VEIL guidance surface. Modeled on
wifi-densepose-sar-harness(ADR-286). Multi-host scaffold with a kernel that resolves native → wasm → js.
Install
npm install -g wifi-densepose-privshield-harness
wifi-densepose-privshield-harness doctor
Or run without installing:
npx wifi-densepose-privshield-harness guidance --topic overview
Commands
| Command | Deps needed | Purpose |
|---|---|---|
init |
kernel + host | Boot the kernel + host adapter |
doctor |
kernel + host | Verify the install end-to-end |
guidance --topic <t> |
none | Read-only VEIL capability map (source-cited, evidence-labelled) |
route <e0..e3> |
router + npm run build |
Cost-optimal model routing |
flywheel [gens] |
flywheel + npm run build |
SYNTHETIC self-improvement demo |
guidance topics: overview, threat, countermeasure, compliance,
optimization, experiment. It needs no dependencies or build step, so it
works offline and in CI before npm install.
What VEIL is
VEIL shapes a node's own beamforming feedback with keyed Givens rotations so
a third-party passive sniffer cannot re-identify people, while a keyed receiver
sees an essentially unchanged link. Compliant waveform controls only — never
jamming. Reference results are SYNTHETIC / evidence level L0 (reproduced by
cargo test), never MEASURED until a hardware witness exists. See the crate's
ADR-288 and
research bundle.
Darwin, router, flywheel
npm run evolve/evolve:dry— Darwin Mode self-mutation of the harness config (@metaharness/darwin).npm run route -- <e0> <e1> <e2> <e3>(afternpm run build) — cost-optimal model routing (@metaharness/router).npm run flywheel:dry— the SYNTHETIC@metaharness/flywheeldemo (propose → evaluate → gate → promote, signed + independently replayable).
See CLAUDE.md and the honesty notes atop src/router.ts / src/flywheel.ts
for what is real wiring vs. illustrative/synthetic data.
Scope
The harness is a development aid. It does not run a VEIL radio, does not
emit RF, and cannot jam. It does not replace the crate's own gates — the
authoritative check for a VEIL change is cargo test -p wifi-densepose-privshield.
License
MIT