Repository navigation
spike(W-003): capability types + one runtime ownership bit - feasibility prototype for #193 - #1071
Open
zidirahim617-del wants to merge 1 commit into
Open
zidirahim617-del wants to merge 1 commit into
zidirahim617-del wants to merge 1 commit into
Conversation
Contributor
Author
|
CI note: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Ledger ID:
W-003(Slot 3, Family A, 2026-11-01 review window per #365) — Source Proposal: #193 — maintainer verification pending, like the other family spikes (#336, #370, #381).Bounded, zero-dependency Go prototype of the runtime half of W-003: linear capability types backed by one ownership bit per composite, so every accept-then-race seam fails closed at the boundary instead of racing.
Pre-registered falsifiers — all three stand against the running spike:
Moverejects,hyb: use of moved value ... (fail-closed))-count=3), including the capability re-mintRegression mapping (why this is the seam, not a seam): #37/#44 const-write family → T1 (second use of a consumed bit rejects); PR #214..#218 slot-loan/backedge family → T2 (the freeze becomes one shared flag); #110/#111/#123/#126 frame-ownership class → removed by construction (one owner-transition).
A fourth seam declared out of reach before running (honest scope note):
View[T]stored-in-field is the type-level half; not enforced in this prototype (L2).Full falsifier log, benchmark results with baselines, the three "review will press on" answers with measured numbers, and limitations L1–L4:
RESULTS.md