[ChristianPavilonis]

Summary

Run Mocktioneer's real Rust WASM application through the experimental celld adapter instead of Axum.

• Add a thin Worker fetch entrypoint, separate unseeded and local-demo JSON manifests, and local run documentation.
• Generate a verified public BlobEnvelope with CPM 0.37 using the normal typed config loader. The explicit development wrapper awaits a real KV write before invoking the original workers-rs Worker class. No public seed endpoint or application fallback is added.
• Stage the genuine worker-build output inside each celld project directory. Build output, local state, and plaintext public dev setup remain ignored.
• Migrate the required #275 APIs while preserving handler behavior, fallible app assembly, and the 64 KiB JWKS body bound.
• Pin every EdgeZero package to published commit 332092e931821fc89961f85276af214e960cf606. No machine-local Cargo patches remain.
• Include the fixture generator source despite the pre-existing broad bin-directory ignore rule.

Dependencies and draft status

Depends on IABTechLab/edgezero#420, which is stacked on IABTechLab/edgezero#275. Replace the prerequisite commit pin with the agreed merged/released revision before normal adoption.

This remains a local-only experiment. It does not implement secret delivery, remote config publication, deployment, fleet guarantees, or Trusted Server identity/CAS contracts. Trigger adapter lists still do not isolate runtime routes. Sync-route std::env auth/domain guards and signed JWKS verification are not certified by this demo.

Validation

Rechecked against the published Git dependency pin:

• Core: 151 unit, 12 APS, and 9 endpoint tests passed.
• Development wrapper: 6 Node tests passed.
• Core/celld Clippy with warnings denied, formatting, and diff checks passed.
• Cloudflare/Fastly/Spin test compilation passed.
• Actual worker-build --release and prepare-celld-demo completed successfully.
• Cargo metadata/tree confirmed one EdgeZero core source.
• Rebuilt WASM through real celld passed nine HTTP checks: root/introspection, CPM 0.37 OpenRTB bid and config, APS encoded CPM, sizes, malformed JSON 400, and semantic validation 422.

Earlier clean unseeded acceptance against the same runtime source passed five HTTP checks, including missing config 503 and config introspection 404 with no fallback.

Host chunk allocation bounds, production cancellation/teardown, fleet recovery, browser creative rendering, and workload performance remain unsupported or unverified. No full workspace-wide acceptance or cloud deployment was performed.

Linked issue

Closes #123.