Skip to content

docs(census): refresh ECHIDNA and proof-burrower; Verus rules; prefer PROOF-STATUS - #34

Open
hyperpolymath wants to merge 2 commits into
mainfrom
claude/zen-brahmagupta-opqqle
Open

hyperpolymath wants to merge 2 commits into
mainfrom
claude/zen-brahmagupta-opqqle

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Summary

This reflects the 2026-11-09 proof audit of ECHIDNA and proof-burrower, and the owner's ruling of the same day to apply PROOF-POLICY §1 strictly. Under that ruling, a statement about a repository's own types or functions is engineering, not theory. Mathesis was stale on both repositories:

  • ECHIDNA was still AGDA-PENDING, with a "funext" note that pointed at the wrong place.
  • proof-burrower had no census row, because its Agda landed after the last census.

Changes

  • docs/status/CROSS-PROVER-RECONCILIATION.adoc:
  • Census refresh. census-repo.sh regenerated the rows for hyperpolymath/echidna and hyperpolymath/proof-burrower at their current main. The other 238 rows are unchanged. catalogue.adoc is re-rendered.
  • scripts/census/build-rows.sh. When choosing a repository's status document, it now prefers PROOF-STATUS over PROOF-NEEDS and proof-debt. Both refreshed rows now point at their proof-status ledgers.
  • scripts/census/proof-holes.sh. Adds Verus rules: assume, admit, external_body and assume_specification. They apply only to files that use vstd or verus!, and comment lines are skipped, as for the other provers.
  • README.adoc. Names Creusot with Pearlite contracts, and Verus, for Rust (PROOF-POLICY §1.2).

Testing

  • Census. census-repo.sh ran for both repositories, followed by summarise.sh and build-rows.sh. The two rows were merged into the committed catalogue-rows.json, which stays sorted by repository (240 rows), and the catalogue was re-rendered.
  • Verus rules, on a fixture. A real assume(false) and #[verifier::external_body] were flagged. A commented assume(x), and an assume(1) in a file without vstd, were not.
  • Shellcheck. build-rows.sh is clean. proof-holes.sh has one existing SC2046 warning, on a find line this PR does not touch.

Generated by Claude Code

… PROOF-STATUS

Reflects the 2026-11-09 proof audit and the owner's strict §1 ruling.

- CROSS-PROVER-RECONCILIATION:
  - The ECHIDNA recon row records the audit result. The meta-checker
    checks 9/9 under the policy flags. The "funext" exception was a
    stale README line, which echidna#479 removes.
  - Only Receipt.agda (10 theorems) is theory.
  - The register row moves to AGDA-VERIFIED on the recorded cone receipt
    and stays BRIDGE-PENDING. The PWG is derived in echidna, not here
    (§8.5).
  - proof-burrower's DOM-1/DOM-2 gain a row: AGDA-PENDING. A local
    re-check passed, but no receipt or CI job exists in that repository.
- Census rows for hyperpolymath/echidna and hyperpolymath/proof-burrower
  are regenerated with census-repo.sh at their current main. Before this,
  proof-burrower had no row: its Agda landed after the last census.
  catalogue.adoc is re-rendered.
- build-rows.sh now prefers a repository's PROOF-STATUS file over
  PROOF-NEEDS and proof-debt when choosing its status document. Both
  repositories now point at their proof-status ledgers.
- proof-holes.sh gains Verus rules (assume, admit, external_body,
  assume_specification). They apply only to files that use vstd or
  verus!, and comments are ignored, as for the other provers.
- README names Creusot with Pearlite contracts, and Verus, for Rust
  (PROOF-POLICY §1.2).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WS4mfQeC3N1DWjcCQJaQqw
@coderabbitai

coderabbitai Bot commented Nov 9, 2026 •

Copy link
Copy Markdown

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 26 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

Run configuration

Commits

Reviewing files that changed from the base of the PR and between a3dbe73 and f8a828a.

Files ignored due to path filters: 4

  • docs/atlas/generated/az.adoc is excluded by !**/generated/**
  • docs/atlas/generated/classes.adoc is excluded by !**/generated/**
  • docs/atlas/generated/index.json is excluded by !**/generated/**
  • docs/atlas/generated/organisations.adoc is excluded by !**/generated/**
Files selected for processing: 8

  • README.adoc
  • docs/architecture/REPOSITORY-MAP.adoc
  • docs/catalogue/catalogue.adoc
  • docs/catalogue/census/catalogue-rows.json
  • docs/status/CROSS-PROVER-RECONCILIATION.adoc
  • scripts/census/build-rows.sh
  • scripts/census/proof-holes.sh
  • tests/atlas/census-atlas.test.mjs
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

…40 sources

The proof-burrower row added in d35fce4 makes 240 census sources. The
generated atlas (az, classes, organisations, index.json) and
REPOSITORY-MAP.adoc are rebuilt with the repo's own tools (`just
atlas-build`, `just repo-map`). The atlas test's fixed source count
moves from 239 to 240. It is kept as a count on purpose, so that any
change to the census shows up in review.

Local: atlas check PASS, census-atlas tests 10/10, repo-map
determinism test PASS.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WS4mfQeC3N1DWjcCQJaQqw
@sonarqubecloud

sonarqubecloud Bot commented Nov 9, 2026

Copy link
Copy Markdown

Copy link
Copy Markdown
Owner Author

Status of the red checks on this PR:

  • Proven 3-outcome test & bench suite and estate-rules: both caused by this PR, both fixed in f8a828a. The new proof-burrower census row made the generated atlas (az, classes, organisations, index.json) and REPOSITORY-MAP.adoc stale. Both are now regenerated with just atlas-build and just repo-map. The atlas test's fixed source count moves from 239 to 240; I kept it a fixed number on purpose, so that any census change shows up in review. Locally the atlas check, all 10 census-atlas tests and the repo-map determinism test pass.
  • Canon lockstep: not caused by this PR. It is red on main too (Dogfood Gate failed on a3dbe73, the main head). This repo's deed pins canon 2.1.3, while metadatastician/standards canon.lock is now 2.1.5 with a new gates sha256. Adopting it takes a separate PR; no fix for it exists yet.

Generated by Claude Code

@hyperpolymath
hyperpolymath marked this pull request as ready for review November 9, 2026 15:44
@chatgpt-codex-connector

Copy link
Copy Markdown
Codex Review Summary: ❌ Failed

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ❌ Failed 2026-11-09T15:44:46.169613Z
We couldn’t complete this review. Comment @codex review to try again.
f8a828a Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants