PulseEngine

^{Formally verified WebAssembly toolchain for safety-critical systems}

 

 

  Repositories        Website        Examples  

Kiln · Meld · Loom · Synth · Sigil

 

The Pipeline

Meld fuses. Loom weaves. Synth transpiles. Kiln fires. Sigil seals.

.wasm	→	Meld fuse	→	Loom optimize	→	Synth transpile	→	Kiln fire
sigil · attest · sign · verify

 

Meld Statically fuses multiple WebAssembly components into a single core module. Import resolution, index-space merging, and canonical ABI adapter generation happen at build time — runtime linking eliminated entirely. Every transformation carries mechanized proofs covering parsing, resolution, merging, and adapter correctness.	Loom Twelve-pass WebAssembly optimization pipeline built on Cranelift's ISLE pattern-matching engine. Constant folding, strength reduction, CSE, inlining, dead code elimination — each pass proven correct through SMT translation validation and mechanized proofs. Includes a fused mode purpose-built for Meld output.
Synth Transpiles WebAssembly to native ARM for embedded Cortex-M targets. Not just translation — program synthesis: exploring equivalent implementations for provably optimal native code. Pattern-based instruction selection, AAPCS calling conventions, and ELF generation. Translation validation ensures the transpiled output faithfully preserves WebAssembly semantics.	Kiln WebAssembly runtime for safety-critical systems. Full Component Model and WASI 0.2 support with a modular no_std architecture for embedded, automotive, medical, and aerospace environments. Bounded allocations, deterministic execution, and memory safety through bounded model checking and formal verification.

 

Sigil — Supply Chain Security

The cryptographic backbone of the pipeline. Every stage — fusion, optimization, compilation — creates a signed transformation attestation recording what changed, which tool version ran, and cryptographic hashes of inputs and outputs. The full chain is verifiable end-to-end.

Sigstore keyless signing for CI/CD. SLSA policy enforcement with per-tool version and hash constraints. Hardware security via TPM 2.0. Offline verification for air-gapped embedded environments. IoT device provisioning with pre-provisioned trust bundles. All signatures embedded directly in WebAssembly modules — no external registry required.

 

Note

Correctness at every layer — Rocq mechanized proofs, Kani bounded model checking, Z3 SMT verification, and Verus Rust verification are used across the toolchain — not confined to individual projects. Sigil attestation chains bind it all together. No transformation ships without a proof.

 

Safety-Critical Systems

 

• gale — Formally verified Rust port of Zephyr RTOS kernel primitives for ASIL-D, dual-track Verus and Rocq verification
• spar — AADL v2.2 architecture analysis toolchain — parser, semantic model, 30+ analyses, and LSP server
• rivet — Schema-driven SDLC artifact manager for requirements traceability and safety compliance

Build & Verification

 

• rules_wasm_component — Bazel rules for WebAssembly Component Model across Rust, Go, C++, and JavaScript
• rules_rocq_rust — Bazel rules for Rocq theorem proving and Rust formal verification with hermetic Nix toolchains
• rules_verus — Bazel rules for Verus Rust verification
• rules_moonbit — Bazel rules for MoonBit with hermetic toolchain support
• rules_lean — Bazel rules for Lean 4 with Mathlib and Aeneas integration

AI & MCP

 

• mcp — Rust framework for building Model Context Protocol servers and clients, published to crates.io
• template-mcp-server — Scaffolding template for creating MCP servers in Rust
• timedate-mcp — MCP server for time and date operations with timezone support, published to npm

Developer Tools

 

• temper — GitHub App that hardens repositories to organizational standards
• wasm-component-examples — Working examples for Component Model development in C, C++, Go, and Rust
• bazel-file-ops-component — WebAssembly-based cross-platform file operations for Bazel builds
• moonbit_checksum_updater — Native MoonBit checksum management with GitHub API integration

 

---

_{Rust · WebAssembly Component Model · WASI 0.2 · 0.3 · Bazel · Rocq · Z3 · Kani · Verus · Sigstore}