The inside story of building the largest pure-Rust sovereignty stack
324 posts
OxiCode 0.2.6 hardens the serde bridge, closing an infinite-decode-loop bug and unbounded allocations 0.2.5 missed. A wire-format-relevant fix restores byte compatibility with bincode::serde (migration note included). Adds bounded-length decode entry points and decode contexts in the derive macros. 20,198 tests passing.
OxiCrypto 0.3.0 completes the FIPS 205 SLH-DSA parameter-set matrix (all 12 of 12), ships a new negotiate_aead TLS 1.3 cipher-suite resolver alongside negotiate_mac/negotiate_sig/negotiate_kex, adds coverage-guided fuzzing across AEAD/MAC/PQ/KDF, gives every sub-crate a runnable example, and fixes a byte/char-boundary panic-DoS in bcrypt verification — the sovereign Pure Rust cryptography layer for the COOLJAPAN ecosystem.
OxiFFT 0.4.2 fixes a wrong-answer bug (not a precision bug) in the x86_64 SSE3 SIMD butterfly kernel that every non-AVX2 x86_64 CPU takes — a wrong complex-multiply lane order and twiddle-recurrence drift together failed 93 of 1447 tests by 10-100x the tolerance. Found by running the suite on x86_64 for the first time. Plus a Miri-driven pointer-provenance fix, four new soundness hardenings against attacker-influenceable wisdom strings, and a fuzz-harness tolerance bug of its own. Pure Rust FFT, no FFTW.
OxiFont 0.2.2 ships oxifont-subset::instance() for pinning a variable font to one design location, a drop_variations subset option, TrueType Collection (.ttc) face-index support that unlocks stock Windows CJK fonts like msgothic.ttc, a public SubsetGidMap for PDF CIDFont embedding, and full GSUB/GPOS contextual-lookup remapping — the sovereign Pure Rust font layer for the COOLJAPAN ecosystem.
OxiH5 0.2.3 closes six writer roadmap gaps — compound records, vlen sequences, array/opaque/bitfield types, big-endian/half-precision floats, soft/external/hard links — makes extensible-array chunk indexes readable, fixes five crash/OOM classes. 987 tests passing — COOLJAPAN's sovereign scientific-data layer.
OxiNum 0.1.4 closes an unbounded-allocation class across add/sub, remainder, and binary-splitting transcendentals — a legitimately valid but extreme BigFloat exponent could previously drive memory proportional to the exponent gap, aborting the process. New MAX_EXACT_CONVERSION_BITS-guarded try_* fallible APIs, an enforced BigFloat exponent range (EMAX/EMIN, ilogb), a fixed IEEE-754 subnormal-rounding double-rounding bug, and a Rem correctness fix. Pure Rust, no GMP, no MPFR, no FFI.
OxiProto 0.1.5 ships Editions 2023 support end to end: full feature resolution (field_presence, enum_type, repeated_field_encoding, utf8_validation, message_encoding, json_format), enforcement at decode time, and a downlevel-to-proto2 rewrite so the prost-reflect facade — which panics trying to even format the 'unknown syntax editions' error — can handle Editions files at all. Plus a wrong-buffer bug in generated packed-repeated decode, a proto2 packing default that diverged from protoc, and two new nesting-depth DoS bounds. Pure Rust Protocol Buffers, no protoc required.
OxiQUIC 0.2.1 closes five RFC 9000 security gaps — spoofed-source reflection amplification, unbounded per-stream and CRYPTO-buffer memory growth, and a forgeable Retry handshake — adds bidirectional ECN (RFC 9000 §13.4 / RFC 9002 §7.4) and true per-path congestion control for multipath, and ships runnable QUIC/HTTP-3 examples. 445 tests passing, the sovereign Pure Rust QUIC layer for the COOLJAPAN ecosystem.
OxiSound 0.2.1 ships oxisound-pulse — a brand-new, 100% Pure Rust PulseAudio/PipeWire native-protocol backend with zero C in its Linux audio path — plus three denial-of-service fixes in oxisound-osc's untrusted-UDP decode path (an out-of-bounds read, unbounded nesting, and a 32-bit integer wraparound), a new fuzz workspace, and a stream_stats() correctness fix. The sovereign audio device I/O layer for the COOLJAPAN ecosystem.
OxiText 0.2.2 vendors its own fork of swash to fix a Devanagari reph-duplication bug and an out-of-bounds panic that has sat open and unfixed upstream since April 2025, adds a Pure-Rust PNG decoder to fully remove the `png`/`flate2` dependency chain, and fixes color-glyph misdetection for sbix/CBDT/SVG fonts — 845 tests passing, the sovereign text layer for the COOLJAPAN ecosystem.
OxiTLS 0.3.0 fixes an OCSP staple false-rejection on leaf-only certificate chains, converts an HPKE LabeledExpand panic into a propagated Result, and adds three new fuzz targets covering its own hand-rolled TLS parsers — 364 tests passing, the sovereign Pure Rust TLS layer for the COOLJAPAN ecosystem.
OxiUI 0.2.2 wires the facade's multi-window registry and menu bar into a real rendering path for the first time (egui opens real OS viewports, iced/headless render the bar too), makes oxiui-slint and oxiui-dioxus return an honest error instead of a fabricated Ok(()), fixes GPU device-loss/OOM panics in oxiui-compute-wgpu, and restores wasm32 compilation for oxiui-web. 2,024 tests passing, the sovereign Pure Rust GUI layer for the COOLJAPAN ecosystem.
OxiXML 0.1.1 is a hardening release: a new typed SVG 1.1/2.0 document model, arbitrary-precision xs:integer/xs:decimal by default, and the query/transform tier locked to its W3C suites — XPath and XQuery 100%, XSLT 98.9%, XSD 1.0/1.1 99.9%. Deliberately breaking, no compatibility shims: 0.1.0 is superseded. Pure Rust, 0 external crates in default features.
OxiGeo 0.2.3 fixes GitHub issue #15 — every gdalwarp -of VRT product was rejected at parse time — with a real backward warp engine in oxigeo-vrt, and issue #16 — Dataset::open on a GeoPackage always reported 0 layers — with a new Dataset::layers()/Layer::features() vector API for GeoPackage, Shapefile, and GeoJSON.
OxiProj 0.1.3 is a maintenance release: no public API changes, no behavior changes. It pulls forward real hardening from five upstream COOLJAPAN crates — a 44-agent HDF5 interop audit, a CUDA async-copy race-condition fix, faster zero-copy DEFLATE decoding, and OxiZ's soundness sweep — plus a `wide` 1.6 deprecation cleanup in the SIMD scalar power path. Still 100% Pure Rust, no C, no FFI.
OxiZ 0.3.2 is a soundness release driven by an external differential-testing report: 8 pull requests, 0 merged, every fix independently reimplemented from scratch and backed by a regression test. EUF congruence, Bool/EUF encoding, Arithmetic⇄EUF combination, and NLSAT conflict analysis are all corrected — 168/168 Correct on the Z3 parity suite, 9,953 tests passing. Pure Rust, Apache-2.0.
OxiZ 0.3.1 is a soundness-and-honesty release: five reported GitHub issues plus 40+ bugs of the same silently-wrong-answer shape are fixed, wide (>64-bit) bit-vectors are now exact via BigUint, and MBQI completeness brings the Z3 differential parity suite to 168/168 Correct, 0 Wrong. 9,668 tests passing. Pure Rust, Apache-2.0.
SciRS2 0.6.5 is a defect-hunting release: a workspace-wide audit of every #[ignore]d test found that scirs2-autograd's live backward pass silently identity-passed 223 of 281 differentiable ops instead of computing real gradients, plus real fixes across linalg, stats, graph, io, spatial, ndimage, and special. Pure Rust, Apache-2.0.
OxiArc 0.4.0 rewrites the DEFLATE/zlib decode path for throughput: a two-level Huffman table, a register-resident BitCache, and an output-buffer-as-history design that stops writing every decoded byte twice. New zero-copy inflate_into/zlib_decompress_into APIs, no wire-format change. 2,468 tests passing, Pure Rust.
OxiCode 0.2.5 is a hardening release: fixes decode-time allocation-DoS, decompression-bomb, and checksum-overflow issues across containers, streaming, and derive macros, and replaces a fabricated SIMD speedup claim with real AVX2/SSE2/NEON kernels. No wire-format change for valid input. 20,126 tests passing.
OxiFont 0.2.1 ships oxifont-hinting, a from-scratch Pure Rust TrueType bytecode hinting interpreter (grid-fitting VM) that never panics on hostile input, plus a WOFF2 spec-compliance fix and a closed large-allocation DoS in bundled CJK font resolution. The sovereign font layer for the COOLJAPAN ecosystem.
OxiGeo 0.2.2 fixes GitHub issue #14 — Dataset::read_band silently returned the whole multi-band image instead of one band, a defect pattern found and fixed in a dozen crates. Also ships 1.45-1.79x faster DEFLATE decoding and zero-allocation typed raster readers.
OxiText 0.2.1 fixes COLRv0/COLRv1 color-glyph rendering — previously 0% pixel coverage on every color emoji — into a complete paint-graph interpreter with gradients, transforms, clips, and all 28 composite modes, swaps in a Pure-Rust PNG encoder to clear the last banned dependency, and cuts font-cache overhead by up to 13,000x. The sovereign text layer for the COOLJAPAN ecosystem.
OxiUI 0.2.1 wires on_close/on_resize/on_focus into the real egui and iced event loops for the first time, makes with_persistent_state actually write to disk via oxicode, and closes an integer-overflow bounds bypass plus an unbounded-iteration DoS in the CPU rasterizer. The sovereign GUI layer for the COOLJAPAN ecosystem.