Elamur Groupantslangseg-command-guard
The groupant beside tools/langseg/src/main.rs in the Mova repository: what the code computes, what it never does, how to go back from its outputs, its invariants, cost and checks.
Facts
Implementation material. A Mova code model describes this code at one source revision: partial models, finite checks and their stated scope. It is not a reviewed general exposition, and its labels are shown as written, never raised.
Components
| component | label | where |
|---|---|---|
| approximant | partial | approximant |
| ast | partial | ../syntax.json |
| cost | symbolic source derived | invariant |
| descriptant | present | descriptant |
| invariant | partial | invariant |
| tests | unexecuted source derived scope | tests |
Obernants
The typed relations around the forward model: the behaviour complement (what the code never does), the reverse reconstruction (every input compatible with an output) and specialised views.
| id | type | label | where |
|---|---|---|---|
behavior_complement | behavior_complement | partial source derived model | behavior_complement |
reverse_reconstruction | reverse_reconstruction | partial source derived model | reverse_reconstruction |
bypass | bypass | partial source derived model | bypass |
key | key | partial source derived model | key |
failure_order | failure_order | partial source derived model | failure_order |
caller | caller | partial source derived model | caller |
Model text
descriptant
Descriptant
Prospective epoch
2026-10-31 source review predicted: Non-test returns; test reads log, serializes what+argv[1..], rejects duplicate without again, opens append/date/writes. Resource model: O(log+argv bytes), process/date/open/write effects; unexecuted. External prospective.md predates test additions and preserves APIs, effect order, hazards and interaction hypotheses.
Observed epoch
Bounded real helper checks in tests.md constrain these models; syntax is a partial lexical projection with no macro expansion, name resolution or proof. Production expressions unchanged; five inline test modules added. Compiled mutants are temporary and exactly restored. Existing malformed-input and nonfinite domains remain explicit, not silently repaired. Parent composes this scope with siblings without adding overlapping costs twice.
Exact byte scope; finite correspondence only. Untested branches source-derived.
approximant
Forward relation
Non-test returns; test reads log, serializes what+argv[1..], rejects duplicate without again, opens append/date/writes.
Domain: Not lock/atomic; read failure empty, date failure empty timestamp; argv nonempty needed on test.
invariant
Invariant and cost
Invariant
Not lock/atomic; read failure empty, date failure empty timestamp; argv nonempty needed on test.
Cost
O(log+argv bytes), process/date/open/write effects; unexecuted.
Limits
Exact byte scope; finite correspondence only. Untested branches source-derived. No percentage surrogate is implemented: categorical parsing/effect observations lack an admitted numerical error metric. Any future profile must define its metric/domain and use only1/2/5/10 percent caps.
models
Typed source-bound relations
Subject: exact source SHA-256 in manifest. Domain and resource premises are in invariant.md. Each model is partial, source-derived, over a single helper invocation or the described finite trace. Complements are proposed inner exclusions under those premises; reverse relations retain all compatible antecedents, with no unique inverse claim. The oracle is the named checks in tests.md; unexecuted cases remain hypotheses. No numerical approximation certificate.
behavior_complement
Duplicate cannot append absent --again in single-process successful-read domain; earlier caller effects not undone.
reverse_reconstruction
Successful line admits no prior duplicate or --again; timestamp cannot prove workload success.
bypass
Non-test bypasses argv slicing and I/O.
key
Exact command string after first tab; --again also changes serialized command.
failure_order
Duplicate before open; date spawn failure tolerated, write errors returned.
caller
Eval guard before load, audit load before guard; no global preread guarantee.
tests
Checks and evidence
Named source/helper checks: None (unexecuted scope).
Wave31 on2026-10-31:30 distinct exact tests passed twice debug and twice release, with equal sorted named outcomes. This node claims only its listed subset; empty subset means source review only. Six actual source-behavior mutants compiled, failed assertions, restored exact bytes/hash, and passed focused green reruns. No assertion-only mutants; existing swapped-input controls are separate. Receipt bundle: $MOVA_DATA/runs/octopus-wave31-corpus-2026-10-31 (native-commands.json, source-test-map.json, mutation-results.json, .status/.log). No live corpus, teacher, frozen assessment, download or production data used.
Exact byte scope; finite correspondence only. Untested branches source-derived.
This page in Markdown → https://md.groupants.elamur.ai/free/en/mova/tools/langseg/src/main.rs.groupant/guard.groupant/