WorldWideMesh is a pure transport infrastructure platform. It provides heartbeat monitoring, the Route66 handshake protocol, ZIP bundle propagation, and real-time WebSocket communication across seven sovereign AI platforms. It contains no policy logic, no intelligence layer, and no governance mechanisms.
The mesh connects ForgeRun, Intelleza, Scriptara, Vaultalis, Vellatrix, TrendingHot, and WorldWideMesh. Each platform is a sovereign node. Identity is defined canonically in the platform registry and enforced through per-platform HMAC-SHA256 secrets.
All inter-platform communication is authenticated via HMAC-SHA256 signatures. Every request carries X-Mesh-Platform, X-Mesh-Timestamp, and X-Mesh-Signature headers. Replay protection enforces a 60-second window. Signature comparison uses crypto.timingSafeEqual to prevent timing attacks.
The Deployment Bus propagates ZIP bundles through a deterministic 7-state machine: created, pending, sent, received, verified, failed, timeout. Every deployment is verified through 4-layer receipt checks: signature, bundle hash, platform identity, and timestamp skew. No automatic retries. No implicit state transitions.
All mesh operations are recorded in an immutable append-only event log. Seven event types are captured: manifest_created, propagation_started, request_sent, receipt_received, verification_passed, verification_failed, and timeout_occurred. No UPDATE or DELETE operations are permitted on the event log.