db-src-load

The groupant beside tools/db/src/load.rs in the Mova repository: what the code computes, what it never does, how to go back from its outputs, its invariants, cost and checks.

Facts

Implementation material. A Mova code model describes this code at one source revision: partial models, finite checks and their stated scope. It is not a reviewed general exposition, and its labels are shown as written, never raised.

Components

component	label	where
approximant	partial	approximant
ast	partial	`syntax.json`
composition	partial	composition
cost	partial	invariant-and-cost
descriptant	present	descriptant
invariant	partial	invariant-and-cost
tests	bounded checks partial scope	tests

Obernants

The typed relations around the forward model: the behaviour complement (what the code never does), the reverse reconstruction (every input compatible with an output) and specialised views.

id	type	label	where
`behavior_complement`	behavior_complement	partial source derived model	behavior_complement
`reverse_reconstruction`	reverse_reconstruction	partial source derived model	reverse_reconstruction
`sentence_match_partition`	sentence_match_partition	partial source derived model	sentence_match_partition
`document_key_transition`	document_key_transition	partial source derived model	document_key_transition
`comment_information_projection`	comment_information_projection	partial source derived model	comment_information_projection
`commit_reconciliation_boundary`	commit_reconciliation_boundary	partial source derived model	commit_reconciliation_boundary

Parts

db-src-load-sentence-document-join

Model text

descriptant

CoNLL staging and identity assignment

load_file canonicalizes, reads/hash/parses, rejects empty sentences, queries state, then skips identical path/hash or rejects changed path. Run reuse/new IDs precede six TSV writers. For each sentence, prior-state candidates require sent_id and text equality; Auto/Existing accept exactly one, reject ties, Existing rejects zero, New creates. New document keys track newdoc/file/idprefix policy; repeated newdoc IDs gain ~n. Gate failures are stored as labels. Six flushed tables execute in SQL then counts reconcile.

Prospective epoch — 2026-10-31

Full source was reviewed before edits; external prospective.md records API states, failure order and predicted checks. Production prefix remains byte-identical; test additions are isolated cfg(test)/test items.

Observed epoch — 2026-10-31

2026-10-31 wave31: 16 selected target/name cases passed twice debug and twice release with identical sorted outcomes; six compiled source-behavior mutants failed assertions, exact bytes restored and positive checks passed. Evidence scope is only the named helpers/fixtures. External receipt directory: $MOVA_DATA/runs/octopus-wave31-store-2026-10-31. No DuckDB integration, production loader/corpus, training or GPU run.

Retained limitations

No SQL evaluation was substituted with a mock process. Missing DuckDB is a dependency gap, not passing database evidence. Partial syntax has no macro expansion/name resolution/types; Rust helpers and fixtures do not prove all models.

approximant

CoNLL staging and identity assignment forward relation

Domain

Finite valid-UTF8 inputs, representable counters/IDs, available memory; filesystem fixtures confined to owned temporary root. SQL semantics are conditional and unexecuted. Subject is the source and SHA256 bound in manifest; fragment applies only to declared byte range.

Approximation limits

Categorical parsing, exact identity, transactional effects and resource errors have no useful percentage approximation metric here. No executable surrogate is claimed. Future profiles, if justified, may use only 1%, 2%, 5%, 10% with a defined metric/reference/domain.

composition

Local scope composition

Parent relation: load_file canonicalizes, reads/hash/parses, rejects empty sentences, queries state, then skips identical path/hash or rejects changed path. Run reuse/new IDs precede six TSV writers. For each sentence, prior-state candidates require sent_id and text equality; Auto/Existing accept exactly one, reject ties, Existing rejects zero, New creates. New document keys track newdoc/file/idprefix policy; repeated newdoc IDs gain ~n. Gate failures are stored as labels. Six flushed tables execute in SQL then counts reconcile.

Child fragments isolate selected mechanisms and do not cover the entire file. Invocation order and shared state remain the parent's relation. Costs of a child are included in parent cost, not added a second time; independent branch scopes are tagged. A child reverse relation must preserve intermediate state compatibility, not imply unique whole-file reconstruction.

Children: [{"id":"db-src-load-sentence-document-join","path":"sentence-document-join.groupant"}]

models

CoNLL staging and identity assignment typed model catalog

Observation is one call/trace in the declared scope. Operators below are partial source-derived relations; complement is a proposed inner exclusion relation, reverse an outer compatible-antecedent relation retaining ambiguity. No universal proof follows from finite checks. Each oracle is the relevant named helper check below when it reaches the behavior; remaining SQL/effect cases are source review or proposed real-CLI checks.

behavior_complement

Same canonical path with changed SHA1 cannot reach write execution. Ambiguous exact sentence candidates cannot be arbitrarily tie-broken by Auto/Existing. A non-ok annotation gate does not exclude the load: it is counted and staged.

Domain/assumptions: Finite valid-UTF8 inputs, representable counters/IDs, available memory; filesystem fixtures confined to owned temporary root. SQL semantics are conditional and unexecuted. Subject is the source and SHA256 bound in manifest; fragment applies only to declared byte range.