test(seam): cross-verifier conformance for the access-sites carrier (#251 follow-up) (#347)

Runs typed-wasm's **own** `verify_access_sites_from_module` pass (plus
both section parsers, at typed-wasm HEAD) over a real ephapax-emitted
module: **zero errors**. The ADR-0002/ADR-0003 sections ephapax now
emits (#346) are byte-compatible with the independent consumer, and
every recorded offset resolves to a real typed memory op.

- Bumps the `typed-wasm-verify` pin `a1935c1` → `5d67603` (the old rev
predates the access-sites verifier) and enables its additive
`unstable-l2` feature.
- All 6 seam tests + all 19 `ephapax-cli` test binaries green on the new
pin.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Author: hyperpolymath

Cargo.lock

@@ -62,7 +62,7 @@ ephapax-vram-cache = { path = "src/ephapax-vram-cache" }
 # `affinescript.ownership` → `typedwasm.ownership`). This is the
 # canonical C7 pin (cf. CHANGELOG.md "Added" / "C7 (#72)"). Re-bump
 # only if a newer `typed-wasm-verify` API change is needed.
-typed-wasm-verify = { git = "https://github.com/hyperpolymath/typed-wasm", rev = "a1935c16176567e0470de2feedf9c37a87dc0158" }
+typed-wasm-verify = { git = "https://github.com/hyperpolymath/typed-wasm", rev = "5d67603852098561d5f4e967f6d0bdf3d3e10a16", features = ["unstable-l2"] }
 
 # External dependencies
 serde = { version = "1.0", features = ["derive"] }

Cargo.toml

@@ -193,3 +193,67 @@ fn extract_ownership_section(wasm: &[u8]) -> Option<Vec<u8>> {
     }
     None
 }
+
+/// Cross-verifier conformance for the ADR-0002/ADR-0003 carriers
+/// (#251): compile a string-using program with the REAL CLI, then run
+/// typed-wasm's OWN `verify_access_sites_from_module` pass over the
+/// emitted bytes. Zero `AccessSiteError`s means the regions +
+/// access-sites sections ephapax emits are byte-compatible with the
+/// independent consumer AND every recorded offset resolves to a real
+/// typed memory op of the declared field's type.
+#[test]
+fn typed_wasm_verifies_ephapax_access_sites() {
+    let dir = tempfile::tempdir().expect("tempdir");
+    let src_path = dir.path().join("seam_access.eph");
+    std::fs::write(&src_path, "fn echo(s: String): String = s\n").expect("write source");
+    let out = dir.path().join("seam_access.wasm");
+
+    let status = std::process::Command::new(env!("CARGO_BIN_EXE_ephapax"))
+        .args(["compile"])
+        .arg(&src_path)
+        .arg("-o")
+        .arg(&out)
+        .output()
+        .expect("spawn ephapax");
+    assert!(
+        status.status.success(),
+        "compile failed:\nstdout: {}\nstderr: {}",
+        String::from_utf8_lossy(&status.stdout),
+        String::from_utf8_lossy(&status.stderr)
+    );
+    let wasm = std::fs::read(&out).expect("read emitted wasm");
+
+    // Their parsers must accept our payloads...
+    let regions_payload = extract_custom_section(&wasm, "typedwasm.regions")
+        .expect("typedwasm.regions section present");
+    let regions = tw::section::parse_regions_section_payload(&regions_payload)
+        .expect("typed-wasm rejected ephapax's regions payload");
+    assert_eq!(regions.len(), 1, "expected the single ephapax.string region");
+
+    let access_payload = extract_custom_section(&wasm, "typedwasm.access-sites")
+        .expect("typedwasm.access-sites section present");
+    let sites = tw::section::parse_access_sites_section_payload(&access_payload)
+        .expect("typed-wasm rejected ephapax's access-sites payload");
+    assert!(!sites.is_empty(), "no access sites decoded");
+
+    // ...and their full verification pass must report zero errors.
+    let errors = tw::verify::verify_access_sites_from_module(&wasm)
+        .expect("verifier failed to parse the module");
+    assert!(
+        errors.is_empty(),
+        "typed-wasm's access-site verifier rejected ephapax's module: {errors:?}"
+    );
+}
+
+/// Find an arbitrary named custom section in a wasm module.
+fn extract_custom_section(wasm: &[u8], name: &str) -> Option<Vec<u8>> {
+    use wasmparser::{Parser, Payload};
+    for payload in Parser::new(0).parse_all(wasm) {
+        if let Payload::CustomSection(reader) = payload.ok()? {
+            if reader.name() == name {
+                return Some(reader.data().to_vec());
+            }
+        }
+    }
+    None
+}