Skip to main content
Version: 0.1.0-alpha.3 (alpha)

Contracts and bindings

The current node validates component metadata and dispatches supported exported contracts/functions through the generic Wasmtime backend. Phase 2 adds verified package association and bounded release compatibility comparison. Guest imports remain limited to declared context, log and clock bindings. SDK interface projections compile; general SDK transports remain unimplemented. Phase 3 plans the exact host ABI, capability broker and bounded isolated local service calls. Binding-graph compilation, remote/inline modes and automatic compatibility migration below remain design contracts; an open Phase 3 proposal does not make them available. See the roadmap.

Contract authority​

WIT is authoritative for capsule-visible types, functions, resources, futures, streams, imports, and exports. Language SDK surfaces are generated or handwritten projections and must not change semantics.

Version identity​

A release has separate identities for:

  • implementation semantic version,
  • release content digest,
  • exported contract versions,
  • imported contract requirements,
  • minimum fabric version.

Implementation version and contract version are not interchangeable.

Planned binding graph​

A binding connects one consumer import to one provider export or host capability:

consumer revision + imported contract + caller policy
    → binding
    → host capability | local provider | remote provider | derived composition

Planned physical modes​

  • host: import is supplied by the capability broker.
  • inline: provider is composed into the same activation.
  • isolated-local: provider runs as a separate activation on the same node.
  • remote: provider runs on another node.
  • auto: runtime selects a permitted mode.

Inline eligibility​

Inline composition requires compatible trust, state, transaction, budget, and observability semantics. A deployment may forbid inline mode even when technically possible.

Error semantics​

Domain errors remain declared by WIT. Fabric errors use the platform-error envelope. Generated clients must expose both layers and must not make isolated or remote calls appear infallible.

Compatibility direction​

Compatibility checks consider removed functions, changed parameter/result types, changed variant cases, resource semantics, async behavior, and transitive package dependencies. Breaking contracts require a new major contract version and explicit migration or parallel routing.

Current preparation checks agreement between the supplied manifest/contract metadata and actual component imports, exports and supported value signatures. Phase 2 adds bounded release comparison using the exact pinned WIT definitions of checked packages, plus actual-node runtime requirements. Descriptor-only analysis cannot establish named record or variant structure. Unsupported and unknown results deny compatibility approval; general WIT migration and binding-graph compilation remain future work. WIT versions remain distinct from workspace and SDK package release versions.