Repository navigation
docs(census): refresh ECHIDNA and proof-burrower; Verus rules; prefer PROOF-STATUS - #34
hyperpolymath wants to merge 2 commits into
Conversation
… PROOF-STATUS
Reflects the 2026-11-09 proof audit and the owner's strict §1 ruling.
- CROSS-PROVER-RECONCILIATION:
- The ECHIDNA recon row records the audit result. The meta-checker
checks 9/9 under the policy flags. The "funext" exception was a
stale README line, which echidna#479 removes.
- Only Receipt.agda (10 theorems) is theory.
- The register row moves to AGDA-VERIFIED on the recorded cone receipt
and stays BRIDGE-PENDING. The PWG is derived in echidna, not here
(§8.5).
- proof-burrower's DOM-1/DOM-2 gain a row: AGDA-PENDING. A local
re-check passed, but no receipt or CI job exists in that repository.
- Census rows for hyperpolymath/echidna and hyperpolymath/proof-burrower
are regenerated with census-repo.sh at their current main. Before this,
proof-burrower had no row: its Agda landed after the last census.
catalogue.adoc is re-rendered.
- build-rows.sh now prefers a repository's PROOF-STATUS file over
PROOF-NEEDS and proof-debt when choosing its status document. Both
repositories now point at their proof-status ledgers.
- proof-holes.sh gains Verus rules (assume, admit, external_body,
assume_specification). They apply only to files that use vstd or
verus!, and comments are ignored, as for the other provers.
- README names Creusot with Pearlite contracts, and Verus, for Rust
(PROOF-POLICY §1.2).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WS4mfQeC3N1DWjcCQJaQqw
|
Warning Review limit reachedYou've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. Next included review available in 26 minutes. View limit details
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. |
…40 sources The proof-burrower row added in d35fce4 makes 240 census sources. The generated atlas (az, classes, organisations, index.json) and REPOSITORY-MAP.adoc are rebuilt with the repo's own tools (`just atlas-build`, `just repo-map`). The atlas test's fixed source count moves from 239 to 240. It is kept as a count on purpose, so that any change to the census shows up in review. Local: atlas check PASS, census-atlas tests 10/10, repo-map determinism test PASS. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WS4mfQeC3N1DWjcCQJaQqw
|
|
Status of the red checks on this PR:
Generated by Claude Code |
Codex Review Summary: ❌ FailedThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |



Summary
This reflects the 2026-11-09 proof audit of ECHIDNA and proof-burrower, and the owner's ruling of the same day to apply PROOF-POLICY §1 strictly. Under that ruling, a statement about a repository's own types or functions is engineering, not theory. Mathesis was stale on both repositories:
AGDA-PENDING, with a "funext" note that pointed at the wrong place.Changes
docs/status/CROSS-PROVER-RECONCILIATION.adoc:Receipt.agda(10 theorems) is theory.AGDA-VERIFIEDon the recorded cone receipt and staysBRIDGE-PENDING. The receipt lands with docs(proofs): PROOF-STATUS under strict §1, a §8.2 cone receipt, and a PWG census echidna#479. The grade,PWG-3, is derived in echidna's own ledger, not here (§8.5).AGDA-PENDING. A local re-check passed, but that repository has no committed receipt and no CI job.census-repo.shregenerated the rows forhyperpolymath/echidnaandhyperpolymath/proof-burrowerat their current main. The other 238 rows are unchanged.catalogue.adocis re-rendered.scripts/census/build-rows.sh. When choosing a repository's status document, it now prefersPROOF-STATUSoverPROOF-NEEDSandproof-debt. Both refreshed rows now point at their proof-status ledgers.scripts/census/proof-holes.sh. Adds Verus rules:assume,admit,external_bodyandassume_specification. They apply only to files that usevstdorverus!, and comment lines are skipped, as for the other provers.README.adoc. Names Creusot with Pearlite contracts, and Verus, for Rust (PROOF-POLICY §1.2).Testing
census-repo.shran for both repositories, followed bysummarise.shandbuild-rows.sh. The two rows were merged into the committedcatalogue-rows.json, which stays sorted by repository (240 rows), and the catalogue was re-rendered.assume(false)and#[verifier::external_body]were flagged. A commentedassume(x), and anassume(1)in a file withoutvstd, were not.build-rows.shis clean.proof-holes.shhas one existing SC2046 warning, on afindline this PR does not touch.Generated by Claude Code