Skip to content

docs(proofs): correct claims that say more than the Agda states - #369

Open
hyperpolymath wants to merge 1 commit into
mainfrom
docs/proof-claims-audit-2026-11-09
Open

hyperpolymath wants to merge 1 commit into
mainfrom
docs/proof-claims-audit-2026-11-09

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Summary

A statement-level review (2026-11-09) compared PROOF-STATUS, the Smoke.agda comments and module headers with the Agda statements they describe. This PR changes comments, ledger text and labels only. No proof term changes, and every theorem name and Smoke pin is kept. Strengthening the thin results is a separate follow-up.

Vacuous or hypothesis-restating results, now labelled as such:

Result What it states
bennett-reversible-arbitrary The inj hypothesis is unused; the cost is 0 for every f, because occupancy is 0 or 1 and ⌊log₂⌋ of either is 0.
partial-deniable-restricted = const: the theorem restates its hypothesis.
measure-not-injective Conditional on the measure already agreeing on two distinct echoes; it does not show every measure is lossy.

Overclaims corrected:

  • PROOF-STATUS "Pillars A–D COMPLETE" restated claims that R-2026-05-18 withdrew: graded-comonad laws, the terminal-cone universal property, model-independence, and the conservativity metatheorem.
  • EchoAbstractionBarrier claimed a guarantee, but there is no enforced barrier: Echo is a transparent Σ.
  • EchoEntropy's "blind" results hold by construction (the shadow is constant).
  • EchoLLEncoding holds only for encodings whose linear carrier is a proposition.
  • F5 proves that a comparison iso exists, not that it is unique, and its lifting uses only that one leg is an equivalence.
  • The EchoVariance/F1 Smoke comments overclaimed: there is no graded monad and no adjunction, and F1 is a lossless writer that does not mention Echo.
  • EchoProvenance's Echo-vs-Σ clearance claim does not hold.
  • ImageFactorizationProp is conditional on a TruncInterface that the --safe build does not supply.

Stale text fixed:

  • the nonexistent names const-fibre-↔-domain and aggregate-non-injective;
  • "F5-3 remains the final open slice";
  • the "scaffold" labels in All.agda;
  • σ–π "set equality", which is actually ⇔;
  • the CNO module list in MAP.adoc.

PROOF-STATUS gains a "Design audit (2026-11-09)" table. It also records that every theorem is ungraded under PROOF-POLICY §8: no PWG-3 receipt is in the repo and no Rocq/Lean leg exists.

Verification (local, not CI receipts)

Run with the pinned toolchain from scripts/setup-agda.sh: Agda 2.7.0.1, stdlib 8326c74, absolute-zero f486c29.

  • All, Smoke and AuditSmoke compile under --safe --without-K --cubical-compatible.
  • kernel-guard.sh, check-agda-invocations.sh, check-no-unsafe.sh and tools/check-guardrails.sh pass.
  • Earlier today, all eight CI entrypoints of main passed cold on the same toolchain.

Related

hyperpolymath/absolute-zero#197 records that the active Agda IsCNO is degenerate. That affects every CNO-facing result here (EchoCNOBridge, EchoCNOSemantics, EchoCNOPackaging, EchoThermodynamicsArbitrary).


Generated by Claude Code

A statement-level review (2026-11-09) compared the ledger, Smoke.agda
comments and module headers with the statements they describe. This
commit changes comments, ledger text and labels only; no proof term
changes, and every theorem name and Smoke pin is kept.

Vacuous or hypothesis-restating results, now labelled as such:
- EchoThermodynamicsArbitrary.bennett-reversible-arbitrary: the
  injectivity hypothesis is unused; the cost is 0 for every f.
- EchoDeniability.partial-deniable-restricted: restates its hypothesis.
- NotResourceInstance.measure-not-injective: conditional, not "every
  measure is lossy".

Overclaims corrected:
- PROOF-STATUS "Pillars A–D COMPLETE" restated the claims R-2026-05-18
  withdrew (graded-comonad laws, terminal-cone UP, model-independence,
  conservativity metatheorem).
- EchoAbstractionBarrier (no enforced barrier; Echo is a transparent Σ),
  EchoEntropy (blind by construction), EchoLLEncoding (propositional
  carriers only), F5 (existence of the comparison iso, not uniqueness),
  EchoVariance/F1 Smoke comments (no graded monad, no adjunction; F1 is a
  lossless writer that does not mention Echo), EchoProvenance (the
  Echo-vs-Σ clearance does not hold), ImageFactorizationProp
  (conditional on a TruncInterface the --safe build does not supply).
- Stale names and notes: const-fibre-↔-domain, aggregate-non-injective,
  F5-3 "final open slice", All.agda "scaffold" labels, σ–π "set
  equality", MAP.adoc CNO module list.

PROOF-STATUS gains a "Design audit (2026-11-09)" table and records that
every theorem is `ungraded` under PROOF-POLICY §8 (no PWG-3 receipt in
repo; no Rocq/Lean leg).

Checked: All, Smoke and AuditSmoke compile under
`--safe --without-K --cubical-compatible` with the pinned toolchain
(Agda 2.7.0.1, stdlib 8326c74, absolute-zero f486c29, via
scripts/setup-agda.sh); kernel-guard, check-agda-invocations,
check-no-unsafe and tools/check-guardrails.sh pass. Local, not a CI
receipt.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MF5GeeBBDF6sUzr6pZTjWV
@coderabbitai

coderabbitai Bot commented Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 33 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: a443ec18-0d0b-467e-8bc6-8fd1aeabca18
Commits

Reviewing files that changed from the base of the PR and between ccec4d7 and 834e8ad.

Files selected for processing: 10

  • PROOF-STATUS.adoc
  • docs/echo-types/MAP.adoc
  • proofs/agda/All.agda
  • proofs/agda/Echo/Separation/NotResourceInstance.agda
  • proofs/agda/EchoAbstractionBarrier.agda
  • proofs/agda/EchoDeniability.agda
  • proofs/agda/EchoLossTaxonomy.agda
  • proofs/agda/EchoProvenance.agda
  • proofs/agda/EchoThermodynamicsArbitrary.agda
  • proofs/agda/Smoke.agda
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@chatgpt-codex-connector

Copy link
Copy Markdown
Codex Review Summary: ❌ Failed

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ❌ Failed 2026-11-09T15:51:18.897103Z
We couldn’t complete this review. Comment @codex review to try again.
834e8ad Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

hyperpolymath added a commit that referenced this pull request Nov 9, 2026
Stacked on #369 (the claims audit). Merge that
first; this PR then shows only `51cfb9c`.

## Why

`EchoThermodynamicsArbitrary.bennett-reversible-arbitrary` priced
erasure by fibre *occupancy* (0 or 1), and `⌊log₂⌋` of either is 0. So
the cost was 0 for every map, including the non-injective Boolean
collapse, and the injectivity hypothesis was never used. The 2026-11-09
audit labelled it vacuous.

## What this adds

- **`FiberEnum f y`.** An enumeration of the fibre: a list of preimages
of `y` that contains every echo's domain point and has no repeats.
`enumerated-erasure-cost` is the Landauer bound on its length. Only the
fibre over `y` is enumerated; the domain may be infinite.
- **`bennett-enumerated`.** Injective ⇒ cost 0. `inj` is exactly what
rules out a second element.
- **`landauer-fan-in`.** Two distinct preimages ⇒ cost ≥ k·T, for any
enumeration.
- **`collapse-enum` / `collapse-erasure-cost`.** `Bool → ⊤` costs
exactly T, so the cost is not trivially 0.
- **`bennett-enumerated-cno-identity`.** The faithful form at the
identity on `Program`.

`bennett-reversible-arbitrary` keeps its type and is marked deprecated.
All new names are pinned in `Smoke.agda`. `PROOF-STATUS.adoc` marks the
audit row resolved. `docs/STABILITY_ANALYSIS.adoc` no longer calls the
identity-map instance a CNO result.

## Checks

On Agda 2.7.0.1 with stdlib 2.3 and the pinned absolute-zero
(`f486c29`), all under `--safe --without-K --cubical-compatible`:
- `All.agda` and `Smoke.agda` pass.
- `kernel-guard.sh`, `check-agda-invocations.sh` and
`check-no-unsafe.sh` pass.

No postulates. This file keeps its `--safe --without-K` pragma: it
imports `CNO`, and the pinned absolute-zero does not yet declare
`--cubical-compatible` (hyperpolymath/absolute-zero#199 adds it).

---
_Generated by [Claude
Code](https://claude.ai/code/session_01MF5GeeBBDF6sUzr6pZTjWV)_

---------

Co-authored-by: Claude <noreply@anthropic.com>
@hyperpolymath
hyperpolymath enabled auto-merge (squash) November 9, 2026 23:32

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants