Elamur Groupantssources-cli-admission
The groupant beside tools/sources/src/main.rs in the Mova repository: what the code computes, what it never does, how to go back from its outputs, its invariants, cost and checks.
Facts
Implementation material. A Mova code model describes this code at one source revision: partial models, finite checks and their stated scope. It is not a reviewed general exposition, and its labels are shown as written, never raised.
Components
| component | label | where |
|---|---|---|
| approximant | partial | approximant |
| ast | partial | ../syntax.json |
| cost | symbolic source derived | invariant-and-cost |
| descriptant | present | descriptant |
| invariant | partial | invariant-and-cost |
| tests | bounded evidence and explicit gaps | tests |
Obernants
The typed relations around the forward model: the behaviour complement (what the code never does), the reverse reconstruction (every input compatible with an output) and specialised views.
| id | type | label | where |
|---|---|---|---|
behavior_complement | behavior_complement | partial source derived model | behavior_complement |
reverse_reconstruction | reverse_reconstruction | partial source derived model | reverse_reconstruction |
validation_order | validation_order | partial source derived model | validation_order |
nullable_text | nullable_text | partial source derived model | nullable_text |
manual_slug | manual_slug | partial source derived model | manual_slug |
name_filter | name_filter | partial source derived model | name_filter |
Model text
descriptant
sources-cli-admission
Deserialize nonblank lines; filter kind/status; reserve slug; skip manual; check URLs/names; return Planned only if accumulated errors empty.
Epoch 2026-10-31
Prospective full-source read preceded edits. Model separates source-derived effects from bounded actual-helper evidence. Bibliography host identity old code admitted foreign authorities; a failing fixture motivated the narrow HTTP(S) exact-authority repair. Other production bytes were retained; added test modules are cfg(test). Topic run now uses the same canonical ID guard for JSONL admission; an old-code failing fixture confirms foreign matched entries remain only in abstract listings. Namespace compilation is representation evidence, not independent runtime coverage. Value workflow and bench transport remain unexecuted. No live data, network, model, DB or benchmark invocation was used.
approximant
Forward model
Deserialize nonblank lines; filter kind/status; reserve slug; skip manual; check URLs/names; return Planned only if accumulated errors empty.
Domain and assumptions: No target writes. Slug/URL/name checks do not ensure arbitrary path confinement. Empty manifests return empty.
This source-derived relation abstracts allocation, formatting and external failures; no executable percentage surrogate is asserted. Categorical decisions/effects have no supported error metric yet. Future budget caps are 1%, 2%, 5%, 10% only.
catalog
Typed model catalog
Subject: exact manifest source SHA-256 and optional byte scope. Domain/assumptions: forward and invariant companion. Observation is one completed helper transition or the stated IO prefix; external interference is excluded for finite fixtures. All models are partial source-derived specifications; the complement is an inner set of excluded behaviors, the reverse a compatible-antecedent relation. Evidence: tests.md; unsampled branches are not proven.
behavior_complement
Filtered rows never reserve slugs or URLs; manual accepted rows reserve slug but not URLs.
Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.
reverse_reconstruction
Same Planned admits skipped rows and alternate JSON encodings normalized by text/strings; raw formatting lost.
Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.
validation_order
Invalid JSON aborts and may mask prior duplicate errors; name checks only run for accepted nonmanual rows.
Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.
nullable_text
text(null)=empty, strings(string)=singleton; array nonstrings stringify, nonarray/nonstring languages become empty.
Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.
manual_slug
Two accepted no-file rows with same slug reject despite no planned downloads.
Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.
name_filter
Reject empty, slash-containing or leading-dot filename; platform-specific cases outside these tests remain gaps.
Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.
tests
Checks and limits
Exact target-qualified native names for this source family:
- tests::names_and_hosts
- path_tests::disambiguated_names
- script_tests::script_names
- wave33_tests::bibliography_row_load_plan_check_join
- wave33_tests::check_size_then_digest_then_magic
- wave33_tests::merge_subset_and_first_partial_owner
Run each selected exact name twice debug and twice release, one test thread, offline/locked dependencies. External wave33 sources receipts contain numeric statuses/raw logs and sorted outcome comparisons. Scoped children inherit only relevant evidence: parse/IDs directly exercised; admission/check/merge actual helpers exercised; subprocess actual helper exercised. bench_transport has source-derived evidence only, never an executed benchmark. Library namespace is compile/representation evidence.
Compiled source controls change bibliography license threshold, sources size guard and value status guard; targeted assertions must reject, then exact backup restoration and positive rerun. Finite controls are not comprehensive fault coverage. See evidence.md at source root for receipts summary.
invariant-and-cost
Invariants and costs
No target writes. Slug/URL/name checks do not ensure arbitrary path confinement. Empty manifests return empty.
Input bytes and expected hashing plus O(FĀ²) collision/name scans and retained strings.
Bounds are symbolic, conditional on stated domain and successful allocation. No unmeasured speedup or universal finite-test guarantee.
This page in Markdown ā https://md.groupants.elamur.ai/free/en/mova/tools/sources/src/main.rs.groupant/admission.groupant/