Elamur Groupantssources-cli-check
The groupant beside tools/sources/src/main.rs in the Mova repository: what the code computes, what it never does, how to go back from its outputs, its invariants, cost and checks.
Facts
Implementation material. A Mova code model describes this code at one source revision: partial models, finite checks and their stated scope. It is not a reviewed general exposition, and its labels are shown as written, never raised.
Components
| component | label | where |
|---|---|---|
| approximant | partial | approximant |
| ast | partial | ../syntax.json |
| cost | symbolic source derived | invariant-and-cost |
| descriptant | present | descriptant |
| invariant | partial | invariant-and-cost |
| tests | bounded evidence and explicit gaps | tests |
Obernants
The typed relations around the forward model: the behaviour complement (what the code never does), the reverse reconstruction (every input compatible with an output) and specialised views.
| id | type | label | where |
|---|---|---|---|
behavior_complement | behavior_complement | partial source derived model | behavior_complement |
reverse_reconstruction | reverse_reconstruction | partial source derived model | reverse_reconstruction |
multipart_gate | multipart_gate | partial source derived model | multipart_gate |
magic_partition | magic_partition | partial source derived model | magic_partition |
failure_order | failure_order | partial source derived model | failure_order |
buffer_bound | buffer_bound | partial source derived model | buffer_bound |
Model text
descriptant
sources-cli-check
Metadata and optional size guard precede stream hash. Compare active MD5, then SHA1, then magic selected by lowercase extension.
Epoch 2026-10-31
Prospective full-source read preceded edits. Model separates source-derived effects from bounded actual-helper evidence. Bibliography host identity old code admitted foreign authorities; a failing fixture motivated the narrow HTTP(S) exact-authority repair. Other production bytes were retained; added test modules are cfg(test). Topic run now uses the same canonical ID guard for JSONL admission; an old-code failing fixture confirms foreign matched entries remain only in abstract listings. Namespace compilation is representation evidence, not independent runtime coverage. Value workflow and bench transport remain unexecuted. No live data, network, model, DB or benchmark invocation was used.
approximant
Forward model
Metadata and optional size guard precede stream hash. Compare active MD5, then SHA1, then magic selected by lowercase extension.
Domain and assumptions: Success means enabled checks passed on observed bytes; concurrent file changes not excluded. Multipart ETag skip is not integrity evidence.
This source-derived relation abstracts allocation, formatting and external failures; no executable percentage surrogate is asserted. Categorical decisions/effects have no supported error metric yet. Future budget caps are 1%, 2%, 5%, 10% only.
catalog
Typed model catalog
Subject: exact manifest source SHA-256 and optional byte scope. Domain/assumptions: forward and invariant companion. Observation is one completed helper transition or the stated IO prefix; external interference is excluded for finite fixtures. All models are partial source-derived specifications; the complement is an inner set of excluded behaviors, the reverse a compatible-antecedent relation. Evidence: tests.md; unsampled branches are not proven.
behavior_complement
Wrong known size excludes hash stage; MD5 failure excludes later SHA1/magic success. Checked file is not mutated.
Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.
reverse_reconstruction
Success admits all files satisfying enabled size/digest/prefix constraints; absent constraints enlarge compatible fiber, not unique download.
Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.
multipart_gate
Empty MD5 or any hyphen disables only MD5 comparison, not SHA1.
Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.
magic_partition
pdf,djvu,zip,gz/tgz,bz2,xz,zst have fixed prefixes; others have empty requirement.
Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.
failure_order
metadata/read errors precede content comparison; MD5 precedes SHA1 precedes signature.
Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.
buffer_bound
Reads at most 1<<20 per chunk; first-head append happens only while head length<16, at most 16 bytes per append.
Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.
tests
Checks and limits
Exact target-qualified native names for this source family:
- tests::names_and_hosts
- path_tests::disambiguated_names
- script_tests::script_names
- wave33_tests::bibliography_row_load_plan_check_join
- wave33_tests::check_size_then_digest_then_magic
- wave33_tests::merge_subset_and_first_partial_owner
Run each selected exact name twice debug and twice release, one test thread, offline/locked dependencies. External wave33 sources receipts contain numeric statuses/raw logs and sorted outcome comparisons. Scoped children inherit only relevant evidence: parse/IDs directly exercised; admission/check/merge actual helpers exercised; subprocess actual helper exercised. bench_transport has source-derived evidence only, never an executed benchmark. Library namespace is compile/representation evidence.
Compiled source controls change bibliography license threshold, sources size guard and value status guard; targeted assertions must reject, then exact backup restoration and positive rerun. Finite controls are not comprehensive fault coverage. See evidence.md at source root for receipts summary.
invariant-and-cost
Invariants and costs
Success means enabled checks passed on observed bytes; concurrent file changes not excluded. Multipart ETag skip is not integrity evidence.
O(file bytes) with 1 MiB buffer, small head and digest states; early errors cheaper.
Bounds are symbolic, conditional on stated domain and successful allocation. No unmeasured speedup or universal finite-test guarantee.
This page in Markdown → https://md.groupants.elamur.ai/free/en/mova/tools/sources/src/main.rs.groupant/check.groupant/