Browser compiler notices

The browser compiler uses direct WASI assets from oligamiq/rust_wasm release v0.2.1-release, pinned to source commit 517de68447f38f2dc12304f34d8a51929a19be82. The compiler reports rustc 1.83.0-dev. The selected release inputs are Rust compiler WASM (rustc_opt.wasm.br, 19,774,341 bytes; SHA-256 10f06919521c61f177b432ae7fd08cc3d4547efc3b13c2f547560fb53cf05ca6; decompressed 95,343,874 bytes, SHA-256 bfa0423877e4f9821f728524aaa8c0eec252cf6aec7ce1fafaf281fc063a0f67) and wasm32-wasip1.tar.br sysroot (18,933,366 bytes; SHA-256 bf29ba33cbf6267c10a1c1838edfff76d19750287159adfa08ab308db922bfdb; decompressed 74,096,640 bytes, SHA-256 c177ce2fed463d9bee1c50808f210f5a255e604064d0950e6dfd21e2f5018881). These hashes were checked locally against the pinned release assets; the decompressed sysroot tar contains 30 regular files. A separate LLVM/LLD module is available in that release but is not loaded by this route. This notice record identifies available source-linked materials; it does not establish completeness or make a legal determination.

License and notice copies

• Rust compiler and standard-library project texts: Rust COPYRIGHT, Apache License, and MIT License, from Rust source commit cf327c2068549194a29160499c2ecafa9061e46e. The exact COPYRIGHT text includes LLVM, Clay-derived FFI, and Unicode terms. Rust's pinned generator reads in-tree license metadata and Cargo dependency metadata to build release notices; the selected WASM and sysroot do not include generated COPYRIGHT.html or COPYRIGHT-library.html, so these copies are not complete attribution coverage.
• Rust's pinned LLVM submodule text: LLVM license from LLVM commit 69bd8547e9cc1268ca41339c98b2b17d13d69be3.
• Rust's source pins LLVM submodule commit 69bd8547e9cc1268ca41339c98b2b17d13d69be3. The corresponding LLVM license copy is included as an applicable source notice; exact byte-level LLVM linkage within Rustc is not independently established.
• WASI sysroot source notice copies: WASI SDK license from SDK source; wasi-libc license index, Apache text, Apache/LLVM text, MIT text, musl notice, cloudlibc notice, and dlmalloc notice from wasi-libc source. The extracted sysroot self-contained/libc.a has a dlmalloc.o member and no emmalloc or fts member or symbol strings. This matches the pinned wasi-libc Makefile's default MALLOC_IMPL=dlmalloc; its source header provides the dlmalloc notice. The SDK archive digest and complete sysroot source-member map remain unknown.
• The browser host imports @bjorn3/browser_wasi_shim 0.4.2, declared MIT OR Apache-2.0: MIT text, Apache text, and pinned upstream source.
• The selected Brotli asset loader includes brotli-dec-wasm 2.3.0, declared MIT OR Apache-2.0: MIT text, Apache text, and pinned upstream source. The candidate decoder file is compiler/brotli-dec-wasm/pkg/brotli_dec_wasm_bg.wasm, 206,243 bytes, SHA-256 7cb4663fd0b11185b88177d0b3b3048136572faf49e81c4c78dccafe37bb68d7. The source tag's Cargo manifest reports crate version 2.2.0, and its lockfile lists Rust dependencies; the exact source-to-npm-WASM build relation and dependency-specific notices are not established.

Provenance limits

The exact upstream release hashes and decompressed module/sysroot hashes are recorded in the private review inventory. Rustc reports 1.83.0-dev; the Rust build workflow names the pinned Rust source and its LLVM submodule described above. The workflow leaves some build inputs unpinned, including a helper toolchain revision and the WASI SDK archive digest. The pinned release process says it packages the latest successful workflow artifacts, without identifying those workflow-run IDs in the tag metadata. The repository has no root license, copying, or notice file, so this record relies on component source notices and does not establish a separate grant for every upstream release artifact.

The target sysroot archive contains 30 regular files, including Rust standard-library archives and self-contained/libc.a. Its archive bytes are pinned, but there is no per-file source/build receipt or complete generated Rust dependency attribution. The pinned wasi-libc license index identifies dlmalloc, emmalloc, cloudlibc, and musl; it does not identify musl-fts. Binary inspection identifies dlmalloc.o; it found no emmalloc or musl-fts object or symbol string in the selected libc.a. This does not replace a full source-to-binary record. Exact source-to-binary and full third-party notice coverage remain incomplete.

The discarded Rubrc VFS, Cargo, LSP, and wasi_virt_layer assets are not part of this selected compiler route. No legal determination or notice-completeness claim is made.