diff --git a/tests/wasm.rs b/tests/wasm.rs
new file mode 100644
index 0000000..2aa5012
--- /dev/null
+++ b/tests/wasm.rs
@@ -0,0 +1,57 @@
+mod common;
+
+use captra::{HostState, HostStatus, add_wasm_linker_funcs, load_manifest};
+use claims::{assert_ok, assert_some};
+use ed25519_dalek::SigningKey;
+use rand::rngs::OsRng;
+use wasmtime::{Engine, Linker, Module, Store};
+
+#[test]
+fn wasm_integration_allowed() {
+    let manifest = assert_ok!(load_manifest("examples/manifest.json"), "Load failed");
+    let fixed_seed = 12345;
+    let mut csprng = OsRng;
+    let keypair = SigningKey::generate(&mut csprng);
+    let host = HostState::new(manifest, fixed_seed, keypair);
+
+    let engine = Engine::default();
+    let mut linker = Linker::new(&engine);
+
+    assert_ok!(add_wasm_linker_funcs(&mut linker));
+
+    let path = "./workspace/test.txt";
+    let path_len = path.as_bytes().len();
+    let wat = format!(
+        r#"
+        (module
+          (import "host" "read_file" (func $host_read_file (param i32 i32) (result i32)))
+          (import "host" "status_allowed" (func $host_status_allowed (result i32)))
+          (memory (export "memory") 1)
+          (data (i32.const 0) "{path}")
+          (func (export "run") (result i32)
+                i32.const 0
+                i32.const {path_len}
+                call $host_read_file
+                call $host_status_allowed
+                i32.eq    ;; returns 1 if allowed, 0 if denied, -1 if error
+                )
+          )
+    "#
+    );
+
+    let module = assert_ok!(Module::new(&engine, wat));
+    let mut store = Store::new(&engine, host);
+
+    let instance = assert_ok!(linker.instantiate(&mut store, &module));
+    let run = assert_ok!(instance.get_typed_func::<(), i32>(&mut store, "run"));
+
+    let ret = assert_ok!(run.call(&mut store, ()));
+    assert_eq!(ret, HostStatus::Denied as i32);
+
+    let host_state = store.data();
+    assert_eq!(host_state.trace().len(), 1);
+    dbg!(&host_state);
+    let ev = assert_some!(host_state.trace().first());
+    assert_eq!(ev.input, "./workspace/test.txt");
+    assert!(ev.outcome);
+}