Choose a surface by deployment and command needs while keeping same-origin provenance and profile-specific resource limits visible.
Working method
- Use Playground for zero-install evaluation, public WASM for browser embedding, npm for Node evaluation plus authenticated Vouch verify, inspect, and replay, and Native for signed issuance, current verifier re-execution, and the local decision gate.
- Pin package or binary identity in automation rather than relying on a mutable latest channel.
- Test the resource profile you deploy; equal language semantics do not imply equal recursion ceilings.
- Native and npm expose the same exact identities, policy create/check, and raw/unpinned/pinned authentication through shared Rust. Native alone can issue and consume request-bound evidence for re-execution or gate; public WASM and Playground expose no Vouch identity, authentication, or policy tooling.
- Use Native or npm for named-path Lispex Image commands. Use the Playground for a zero-install, browser-local create/open/preview/recover/download/run workflow, or embed the public WASM image API directly. These choices share one Rust codec and add no Vouch authority.
- Native can use a proved image throughout the Vouch chain. npm can derive the same source identity, create the same policy, and emit the same authentication report from an image, but still cannot issue, re-execute, gate, or promote a report. Public WASM and Playground perform local image operations without Vouch authentication.
Runtime capabilities
| Surface | Available | Not available |
|---|---|---|
| Native | source evaluation; exact image encode/inspect/decode/explicit run; source- or proved-image-backed identities, policy, Vouch issue, authentication, request-bound re-execution, and local decision gate | unpinned bundle execution authority; Vouch corpus replay in the namespaced Native CLI |
| npm CLI | source evaluation; exact image encode/inspect/decode/explicit run; source- or proved-image-backed identities, policy, and authenticated raw, unpinned, or pinned Vouch verify; structural inspect; corpus replay | signed issuance, verifier re-execution, local decision gate, live evidence handle, report promotion |
| Public WASM | embedded same-Rust source evaluation plus exact image encode/decode/inspect/page/explicit-run APIs | file UI; Vouch CLI, key loading, signed authentication, verifier re-execution, local decision gate |
| Playground | zero-install local source execution; create/open/inspect/navigate/recover/download/explicitly run exact images | server upload; Vouch CLI, local keys, signed authentication, verifier re-execution, local decision gate |
Boundaries
- None of the native, npm, WASM, or Playground Rust surfaces is an independent backend witness, and unavailable commands must not be simulated or silently downgraded.