Skip to content

ci(kernel-proofs): Agda 2.6.4.3 and the PROOF-POLICY §2.1 invocation - #285

Merged
hyperpolymath merged 2 commits into
mainfrom
claude/new-session-ywdrth-agda-2643
Nov 10, 2026
Merged

hyperpolymath merged 2 commits into
mainfrom
claude/new-session-ywdrth-agda-2643

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Summary

The kernel-proofs gate re-checks the sibling repositories' Agda proofs (resource-algebra, occupancy-types, choreographic-types' K-CUT slice) and checks the kernel transcription table. It ran them on Ubuntu 24.04's Agda 2.6.3. Each sibling pins Agda 2.6.4.3 in its own CI, so this gate checked their proofs on a different prover.

The gate's own Agda checks also ran without --cubical-compatible, the canonical theory invocation in PROOF-POLICY §2.1 (metadatastician/standards, 3-practice/PROOF-POLICY.adoc).

Changes

  • .github/workflows/contract-gate.yml (kernel-proofs job):
    • Runs in debian:trixie-slim with agda-bin=2.6.4.3-1+b2, and asserts the version, as the siblings' proofs.yml do.
    • Idris2 0.8.0 is still built from source at its pinned commit. Debian names the Chez binary chezscheme, so the build uses whichever of chezscheme and scheme exists.
  • tools/check-kernel-proofs.sh:
    • Requires Agda 2.6.4.3 (the whole version line); ALLOW_ANY_AGDA=1 still overrides.
    • Its own Agda checks (choreographic-types' KCut slice and rejects, the transcription table, the negative controls) run under --safe --without-K --cubical-compatible.
    • Sets LC_ALL=C.UTF-8. Without a UTF-8 locale, Agda stops with exit 42 on the Unicode warnings --cubical-compatible prints.
  • CHANGELOG.adoc: entry added.

Not changed: the sibling pins. The siblings' own scripts run at those pins with their own flags. resource-algebra#19 and occupancy-types#18 move those scripts to the canonical flags. A later re-pin here picks them up, together with the stale af95728 citations.

RSR Quality Checklist

Required

  • Tests pass (see Testing)
  • No banned language patterns
  • No banned functions (believe_me, unsafeCoerce, Obj.magic, Admitted, sorry)
  • SPDX license headers present on all new/modified source files
  • No secrets, credentials, or .env files included

As Applicable

  • CHANGELOG updated

Testing

This environment cannot reach the Debian archive or Docker Hub, so it has no Agda 2.6.4.3. What I could check locally:

  • Under the new flags on 2.6.3: ALLOW_ANY_AGDA=1 bash tools/check-kernel-proofs.sh gives OK: kernel proofs — build, 13 rejection(s), table, and 4 negative control row(s).
  • Version guard: without the override, the gate refuses 2.6.3: FAIL: Agda 2.6.4.3 required ....
  • yq parses the workflow.

The run that counts is this PR's Grade kernel proofs (Idris2 0.8.0 + Agda) job, which is the first run on 2.6.4.3.

CI note: scan / gitleaks and the governance, Hypatia and mirror workflows fail on main too, until #284 lands.


Generated by Claude Code

The kernel-proofs job runs in debian:trixie-slim with
agda-bin=2.6.4.3-1+b2, the prover resource-algebra, occupancy-types and
choreographic-types pin in their own CI, so this gate re-checks their
proofs on the same Agda instead of Ubuntu 24.04's 2.6.3. Idris2 0.8.0 is
still built from source at its pinned commit; Debian names the Chez
binary chezscheme, so the build finds whichever is present.

tools/check-kernel-proofs.sh requires Agda 2.6.4.3, runs its own Agda
checks under --safe --without-K --cubical-compatible, and sets
LC_ALL=C.UTF-8: without a UTF-8 locale Agda stops with exit 42 on the
Unicode warnings --cubical-compatible prints.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Y6FD63UrriRBHqmhhEca9t
@coderabbitai

coderabbitai Bot commented Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

Explain Change →

Caution

Review failed

The pull request is closed.

  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

Copy link
Copy Markdown
Owner Author

Secret Scanner, Governance and Hypatia Security Scan fail on this PR, but not because of it. They end in failure with zero jobs (runs 42626472369, 42626472242 and 42626472293), and they fail the same way on main. All three call the standards reusables at the old pin, hyperpolymath/standards@da2c748. This PR changes only the kernel-proofs job and tools/check-kernel-proofs.sh.

The fix is typed-wasm#284, which re-pins those reusables. It is blocked on a repository Actions setting; the comment there explains why. Once #284 lands, a merge from main will pick it up here.

Everything this PR changes is green. Grade kernel proofs ran on Agda 2.6.4.3 with --safe --without-K --cubical-compatible and printed OK: kernel proofs — build, 13 rejection(s), table, and 4 negative control row(s).


Generated by Claude Code

@hyperpolymath
hyperpolymath marked this pull request as ready for review November 9, 2026 15:43
@chatgpt-codex-connector

Copy link
Copy Markdown
Codex Review Summary: ❌ Failed

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ❌ Failed 2026-11-09T15:43:44.386007Z
We couldn’t complete this review. Comment @codex review to try again.
96511e4 Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

@hyperpolymath
hyperpolymath enabled auto-merge (squash) November 9, 2026 22:54
Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>
@hyperpolymath
hyperpolymath merged commit c0f8194 into main Nov 10, 2026
42 checks passed
@hyperpolymath
hyperpolymath deleted the claude/new-session-ywdrth-agda-2643 branch November 10, 2026 01:52
@sonarqubecloud

Copy link
Copy Markdown

# tools/check-kernel-proofs.sh refuses any other Agda. Until 2026-11-09
# this job ran Ubuntu 24.04's Agda 2.6.3.
runs-on: ubuntu-latest
container: debian:trixie-slim
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants