Elamur Groupantscycle-pipeline-reservation
The groupant beside tools/cycle/src/pipeline.rs in the Mova repository: what the code computes, what it never does, how to go back from its outputs, its invariants, cost and checks.
Facts
Implementation material. A Mova code model describes this code at one source revision: partial models, finite checks and their stated scope. It is not a reviewed general exposition, and its labels are shown as written, never raised.
Components
| component | label | where |
|---|---|---|
| approximant | partial | approximant |
| ast | partial | ../syntax.json |
| cost | partial | invariant-and-cost |
| descriptant | present | descriptant |
| invariant | partial | invariant-and-cost |
| tests | bounded or representation | tests |
Obernants
The typed relations around the forward model: the behaviour complement (what the code never does), the reverse reconstruction (every input compatible with an output) and specialised views.
| id | type | label | where |
|---|---|---|---|
behavior_complement | behavior_complement | partial source derived model | behavior_complement |
reverse_reconstruction | reverse_reconstruction | partial source derived model | reverse_reconstruction |
line_accounting | line_accounting | partial source derived model | line_accounting |
missing_read | missing_read | partial source derived model | missing_read |
write_sync_prefix | write_sync_prefix | partial source derived model | write_sync_prefix |
concurrent_boundary | concurrent_boundary | partial source derived model | concurrent_boundary |
Model text
descriptant
cycle-pipeline-reservation
Epoch 2026-10-31
Prospective inspection identified this relation before additions: Read attempt ledger; missing means used=0, other read error returns. If used≥budget reject. Open append/create, write round/job line then sync_all.
The production implementation is unchanged; only selected inline tests are appended. Source-bound syntax is generated twice and compared. Native checks exercise bounded helpers; entry orchestration, teacher calls, models and corpora remain source-derived. Partial syntax is not semantic proof. Preserve failure prefixes and ambiguity when refining this model.
approximant
Forward relation
Read attempt ledger; missing means used=0, other read error returns. If used≥budget reject. Open append/create, write round/job line then sync_all.
Composition
This fragment isolates the stated helper relation; parent composition retains surrounding effects and failures.
catalog
Typed observations: cycle-pipeline-reservation
Subject: tools/cycle/src/pipeline.rs, SHA-256 f631f3949f282bea361d58e43e092b1c323b1ec697ce7ad871c3dfcbbf05f336. Domain: bounded source inputs, declared filesystem/environment state and normal allocations. Each view is a partial source-derived relation, not a universal proof. Observation is one helper call or the explicitly described trace. Checks are in tests.md; unexecuted effects remain gaps.
behavior_complement
At used≥budget helper cannot append under single-caller premise. Successful return cannot precede sync_all.
Scope: the bound source interval and stated assumptions. Evidence: source inspection plus the checks explicitly named in tests.md; no finite check establishes all inputs.
reverse_reconstruction
Ledger line admits any matching k/job call; it cannot identify whether teacher launched afterward. Failed sync may still leave a written line.
Scope: the bound source interval and stated assumptions. Evidence: source inspection plus the checks explicitly named in tests.md; no finite check establishes all inputs.
line_accounting
Empty file uses zero; blank existing lines count as attempts. Repeated job path still consumes distinct lines.
Scope: the bound source interval and stated assumptions. Evidence: source inspection plus the checks explicitly named in tests.md; no finite check establishes all inputs.
missing_read
NotFound uniquely maps empty usage; permission/UTF8 read errors propagate before open.
Scope: the bound source interval and stated assumptions. Evidence: source inspection plus the checks explicitly named in tests.md; no finite check establishes all inputs.
write_sync_prefix
Open or write failure precedes sync; write may partially persist. sync failure is error with no rollback.
Scope: the bound source interval and stated assumptions. Evidence: source inspection plus the checks explicitly named in tests.md; no finite check establishes all inputs.
concurrent_boundary
Two unlocked callers can both observe budget room; enrichment lock is necessary composition premise, not guaranteed by this function.
Scope: the bound source interval and stated assumptions. Evidence: source inspection plus the checks explicitly named in tests.md; no finite check establishes all inputs.
tests
Checks and limits
pipeline::wave33_tests::attempt_budget_is_reserved_before_retry: zero budget creates nothing; one success then retry rejection retains exact bytes.
Exact native outcomes and command metadata are retained in the external wave33 cycle receipt bundle. Selected names run twice in debug and release; syntax is independently regenerated twice. Compiled mutations and source restoration receipts distinguish behavior changes from assertion-only controls. These claims are finalized in evidence.md. No live teacher, real model/corpus, benchmark CLI or lesson-learning CLI is run.
invariant-and-cost
Invariant and cost
Count is lines not unique jobs or successful calls. Caller provides serialization lock; helper has no intrinsic concurrent transaction.
O(ledger bytes) memory/time then one append and sync; fsync latency unbounded.
No executable percentage surrogate is claimed: effects, categorical acceptance and report text have no justified approximate metric here. Future profiles require a useful metric, zero case, reference and evidence at caps 1/2/5/10%.
This page in Markdown → https://md.groupants.elamur.ai/free/en/mova/tools/cycle/src/pipeline.rs.groupant/reservation.groupant/