Wallet Attached Storage specification

Wallet Attached Storage is a general-purpose permissioned cloud storage API: CRUD over an HTTP hierarchy of Spaces, Collections, and Resources, secured by object-capability (zCap) authorization. Storage is private by default -- only a Space's controller may act on it unless a policy grants otherwise -- and requests that are not authorized return "not found" rather than "not authorized", so the existence of a resource is never leaked. The specification is layered: a minimal conformant server implements only Resource CRUD plus the authorization profile, while listing, collection and space management, multi-tenancy, and extensions (linksets, policies, metadata, export, backends, query, quotas) are each optional.

This repository contains the Wallet Attached Storage specification (in ReSpec Markdown format)

For LLM consumption, llms.txt summarizes the spec and links to its full text, following the llmstxt.org convention.

Table of Contents

• Background
• Code of Conduct
• Contributing
• Status
• Usage
  • Editing
  • Testing
  • Publishing

Background

You can access the latest version of this specification at:

https://w3c-ccg.github.io/wallet-attached-storage-spec/

The W3C Community Group working on this specification can be found here:

https://w3c-ccg.github.io/

Code of Conduct

W3C functions under a code of conduct.

Contributing

We encourage contributions meeting the Contribution Guidelines. While we prefer the creation of issues and Pull Requests in the GitHub repository, discussions often occur on the public-credentials mailing list as well.

Status

This document is a draft technical specification produced by the W3C Credentials Community Group, with the intent of progressing toward a W3C standard. Feedback is welcome via the issue tracker or the public-credentials mailing list.

Usage

Editing

The specification source is in spec.md, in ReSpec Markdown format.

Testing

For testing locally, you can npm i -g http-server, and then:

http-server ./

Publishing

The published site is built by .github/workflows/publish.yml on every push to main, and deployed to GitHub Pages. The workflow runs the ReSpec CLI over index.html and publishes:

Path	Contents
/	A static, pre-rendered snapshot of the spec. Readable without JavaScript, so search engines, curl, and agents see the full text.
/live/	The original ReSpec page, rendered client-side from spec.md at view time.
/spec.md	The Markdown source.
/llms.txt	The llmstxt.org index.

Pull requests build the snapshot as a check but do not deploy it. To render a snapshot yourself:

npx respec@latest --src index.html --out snapshot.html --localhost

The repository's Pages source must be set to GitHub Actions (rather than "Deploy from a branch") for the workflow to publish.