stabilityprotocol · deblanco · Apr 19, 2026 · Apr 20, 2026 · Apr 20, 2026 · Apr 20, 2026
diff --git a/CLAUDE.md b/CLAUDE.md
@@ -45,20 +45,20 @@ npm run copy:profile-evaluator  # Copy profile evaluator from ../profile-evaluat
 
 **`src/lib/types.ts`** — `ConformanceReport` extends `CrJson` with conformance-specific fields: `usedITL`, `usedTestCerts`, and `_conformanceToolVersion` (git metadata injected at build time).
 
-**`src/lib/profileEvaluator.ts`** — Dynamically imports the profile evaluator WASM from `public/profile-evaluator/`. Used by `AssetProfilePage.svelte`.
+**`src/lib/rubrics/`** — Client-side evaluator for YAML-authored C2PA asset rubrics. Ported from the Python reference at `../../c2pa/conformance/asset-rubrics`. See the Rubrics section below for details.
 
 **`src/lib/version.ts`** — Auto-generated before each build/dev start via `scripts/generate-version.js`. Do not edit manually.
 
 ### Routing
-`App.svelte` handles navigation between three pages:
+`App.svelte` handles navigation between two pages:
 - Main validation page (default)
 - Test Certificates (`CertificateManager.svelte`)
-- Asset Profiles (`AssetProfilePage.svelte`)
 
 ### WASM Modules
-Two WASM binaries are committed to `public/`:
+One WASM binary is committed to `public/`:
 - `public/c2pa.wasm` — Official C2PA reader (copied from `@contentauth/c2pa-web` during `postinstall`)
-- `public/profile-evaluator/` — Profile evaluator (from sibling `profile-evaluator-rs` repo, updated via `copy:profile-evaluator` script)
+
+(`public/profile-evaluator/` is a legacy directory — the profile-evaluator page was removed when Rubrics replaced it. Safe to delete when convenient.)
 
 ### Trust Lists
 - **C2PA Trust List**: Fetched at runtime from GitHub

diff --git a/index.html b/index.html
@@ -6,6 +6,9 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <meta name="description" content="C2PA Verify - Content Credentials Validator and Conformance Testing Tool. Verify C2PA manifests against official trust lists." />
     <title>C2PA Verify</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com" />
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
+    <link href="https://fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900&display=swap" rel="stylesheet" />
   </head>
   <body>
     <div id="app"></div>

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -24,6 +24,7 @@
     "@tsconfig/svelte": "^5.0.2",
     "@vitest/ui": "^4.0.18",
     "autoprefixer": "^10.4.23",
+    "gh-pages": "^6.2.0",
     "happy-dom": "^20.4.0",
     "jsdom": "^27.4.0",
     "postcss": "^8.5.6",
@@ -36,8 +37,10 @@
     "vitest": "^4.0.18"
   },
   "dependencies": {
+    "@adobe/json-formula": "^2.0.0",
     "@contentauth/c2pa-web": "^0.6.1",
     "@peculiar/x509": "^1.14.3",
-    "highlight.js": "^11.11.1"
+    "highlight.js": "^11.11.1",
+    "yaml": "^2.8.3"
   }
 }
diff --git a/public/local-c2pa/c2pa_local.d.ts b/public/local-c2pa/c2pa_local.d.ts
@@ -10,23 +10,59 @@ export function init(): void;
 
 export function read_manifest_store(file_bytes: Uint8Array, format: string, settings_json?: string | null): Promise<string>;
 
+/**
+ * Inspect a detached (`.c2pa`) manifest store without an asset.
+ *
+ * Used when the user drops a sidecar without the matching asset. We feed
+ * the manifest bytes to `with_manifest_data_and_stream_async` paired with
+ * an empty stream. The signature, certificate chain, and JUMBF structure
+ * are validated normally; the asset-hash bindings will report
+ * `assertion.dataHash.mismatch` because there is no asset to bind to —
+ * that is expected, and callers should label this as an integrity-only
+ * inspection in the UI.
+ *
+ * * `manifest_bytes` - raw bytes of the `.c2pa` sidecar (JUMBF manifest store).
+ * * `settings_json` - trust settings (same shape as `read_manifest_store`).
+ */
+export function read_sidecar_integrity_only(manifest_bytes: Uint8Array, settings_json?: string | null): Promise<string>;
+
+/**
+ * Validate a detached (`.c2pa`) manifest store against its referenced asset.
+ *
+ * This is the sidecar-with-asset case: the C2PA manifest lives in its own file
+ * (`manifest_bytes`) and the asset whose hash-bindings the manifest claims
+ * lives separately (`asset_bytes`). We feed both into c2pa-rs's
+ * `with_manifest_data_and_stream_async`, which evaluates the asset-hash
+ * assertions *against the actual asset bytes* — something we cannot do with
+ * the single-blob `read_manifest_store` path.
+ *
+ * * `manifest_bytes` - raw bytes of the `.c2pa` sidecar (JUMBF manifest store).
+ * * `asset_bytes` - raw bytes of the referenced asset.
+ * * `asset_format` - MIME type of the asset (e.g. "image/jpeg"). The
+ *   sidecar's own format is always `application/c2pa` and the SDK infers that.
+ * * `settings_json` - trust settings (same shape as `read_manifest_store`).
+ */
+export function read_sidecar_manifest_store(manifest_bytes: Uint8Array, asset_bytes: Uint8Array, asset_format: string, settings_json?: string | null): Promise<string>;
+
 export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;
 
 export interface InitOutput {
     readonly memory: WebAssembly.Memory;
-    readonly get_version: () => [number, number];
     readonly init: () => void;
     readonly read_manifest_store: (a: number, b: number, c: number, d: number, e: number, f: number) => any;
-    readonly wasm_bindgen__closure__destroy__h0667ea7aa0a255a7: (a: number, b: number) => void;
-    readonly wasm_bindgen__convert__closures_____invoke__hca39902318df4249: (a: number, b: number, c: any) => [number, number];
-    readonly wasm_bindgen__convert__closures_____invoke__h2986024ebf27e018: (a: number, b: number, c: any, d: any) => void;
-    readonly wasm_bindgen__convert__closures_____invoke__hdd2e4c5eb311bd94: (a: number, b: number) => void;
+    readonly read_sidecar_manifest_store: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => any;
+    readonly read_sidecar_integrity_only: (a: number, b: number, c: number, d: number) => any;
+    readonly get_version: () => [number, number];
+    readonly wasm_bindgen__convert__closures_____invoke__h1aa715c00eec31bd: (a: number, b: number, c: any) => [number, number];
+    readonly wasm_bindgen__convert__closures_____invoke__h0ef758fe9ac3980a: (a: number, b: number, c: any, d: any) => void;
+    readonly wasm_bindgen__convert__closures_____invoke__h2b3ed67cbe4afe0c: (a: number, b: number) => void;
     readonly __wbindgen_malloc: (a: number, b: number) => number;
     readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
     readonly __wbindgen_exn_store: (a: number) => void;
     readonly __externref_table_alloc: () => number;
     readonly __wbindgen_externrefs: WebAssembly.Table;
     readonly __wbindgen_free: (a: number, b: number, c: number) => void;
+    readonly __wbindgen_destroy_closure: (a: number, b: number) => void;
     readonly __externref_table_dealloc: (a: number) => void;
     readonly __wbindgen_start: () => void;
 }