Elamur Groupantswasi-cli
The groupant beside wasi-host/src/main.rs in the Mova repository: what the code computes, what it never does, how to go back from its outputs, its invariants, cost and checks.
Facts
Implementation material. A Mova code model describes this code at one source revision: partial models, finite checks and their stated scope. It is not a reviewed general exposition, and its labels are shown as written, never raised.
Components
| component | label | where |
|---|---|---|
| approximant | partial | approximant |
| ast | partial | syntax.json |
| composition | partial | composition |
| cost | symbolic source derived | invariant |
| descriptant | present | descriptant |
| invariant | partial | invariant |
| tests | executed bounded checks | tests |
Obernants
The typed relations around the forward model: the behaviour complement (what the code never does), the reverse reconstruction (every input compatible with an output) and specialised views.
| id | type | label | where |
|---|---|---|---|
behavior_complement | behavior_complement | partial source derived model | behavior_complement |
reverse_reconstruction | reverse_reconstruction | partial source derived model | reverse_reconstruction |
option_boundary | option_boundary | partial source derived model | option_boundary |
export_gate | export_gate | partial source derived model | export_gate |
journal_failure | journal_failure | partial source derived model | journal_failure |
memory_cast | memory_cast | partial source derived model | memory_cast |
Parts
Model text
descriptant
wasi-cli
CLI parses leading options, reads and validates module, rejects unknown imports, imports host directories to bounded Vfs, runs with echo, conditionally exports, optionally journals/stats, then clamps exit to0..255.
Epoch 2026-10-31
Prospective review recorded before edits. Source review found late output FAULT effects and weaker-than-capability rights metadata; these are modeled as current behavior rather than silently repaired. Only bounded new test blocks were added; production code remains unchanged. Actual finite results and exact restoration receipts live under $MOVA_DATA/runs/octopus-wave31-wasi-2026-10-31. No full mlab guest, frozen suite, GPU or corpus run. This node retains its scoped observations for future refinement.
approximant
Forward relation
CLI parses leading options, reads and validates module, rejects unknown imports, imports host directories to bounded Vfs, runs with echo, conditionally exports, optionally journals/stats, then clamps exit to0..255.
Scope: wasi-cli. State and transitions follow the authoritative source, including partial effects before errors. No executable approximate replacement is attached: categorical errno/effects and module execution lack a useful validated percentage metric; future numerical profiles may only use1/2/5/10% caps after domain/reference evidence.
invariant
Invariant and cost
CLI parses leading options, reads and validates module, rejects unknown imports, imports host directories to bounded Vfs, runs with echo, conditionally exports, optionally journals/stats, then clamps exit to0..255.
The invariant is conditional on the admitted transition: A trapped guest cannot trigger export through the normal gate; missing option value cannot run a module. A journal-write error does not necessarily exclude exit0.
Cost: O(args bytes+module bytes+import/export bytes)+Vfs and engine costs; host IO unbounded by guest fuel.
No wall-time gain, universal resource bound or atomic rollback is inferred. External Vfs/wasmi/native-mlab work remains separately charged.
composition
Composition
CLI parses leading options, reads and validates module, rejects unknown imports, imports host directories to bounded Vfs, runs with echo, conditionally exports, optionally journals/stats, then clamps exit to0..255.
Immediate fragments partition selected mechanisms; their byte ranges refer to this single source and reuse its syntax projection. Memory helper success is a precondition for ABI transport, not proof that all linker wrappers dispatch correctly. WASI path/read/write helpers call real Vfs; mlab remains an external reference. Remaining top-level definitions and test bodies stay covered only by the parent source model.
models
Typed model catalog
behavior_complement
Subject: wasi-host/src/main.rs at SHA-256 2200229297d1dde6d9f8477a577a7320c854d0db4fb3ea450b457a9858107122, scope wasi-cli. Domain: the source transition and bounded fixtures described in approximant.md; readable valid host resources where required. Observation: returned values, byte coordinates, state/effect order, not total-system semantics. Operator/relation: A trapped guest cannot trigger export through the normal gate; missing option value cannot run a module. A journal-write error does not necessarily exclude exit0.
Status: partial source-derived relation; complement is a scoped exclusion hypothesis, reverse preserves all compatible antecedents described rather than a chosen inverse. Assumptions: production branch order, declared coordinate/resource premises; no completeness claim for untested inputs. Evidence: tests.md distinguishes actual execution from source review; finite observations can falsify but not prove the relation.
reverse_reconstruction
Subject: wasi-host/src/main.rs at SHA-256 2200229297d1dde6d9f8477a577a7320c854d0db4fb3ea450b457a9858107122, scope wasi-cli. Domain: the source transition and bounded fixtures described in approximant.md; readable valid host resources where required. Observation: returned values, byte coordinates, state/effect order, not total-system semantics. Operator/relation: Exit2 admits usage/module/import/export failures. Final exit cannot reconstruct options or filesystem history; journal error can coexist with successful guest exit.
Status: partial source-derived relation; complement is a scoped exclusion hypothesis, reverse preserves all compatible antecedents described rather than a chosen inverse. Assumptions: production branch order, declared coordinate/resource premises; no completeness claim for untested inputs. Evidence: tests.md distinguishes actual execution from source review; finite observations can falsify but not prove the relation.
option_boundary
Subject: wasi-host/src/main.rs at SHA-256 2200229297d1dde6d9f8477a577a7320c854d0db4fb3ea450b457a9858107122, scope wasi-cli. Domain: the source transition and bounded fixtures described in approximant.md; readable valid host resources where required. Observation: returned values, byte coordinates, state/effect order, not total-system semantics. Operator/relation: Only leading -- arguments are host options; suffix after module becomes guest argv. stats consumes one token; other flags require value.
Status: partial source-derived relation; complement is a scoped exclusion hypothesis, reverse preserves all compatible antecedents described rather than a chosen inverse. Assumptions: production branch order, declared coordinate/resource premises; no completeness claim for untested inputs. Evidence: tests.md distinguishes actual execution from source review; finite observations can falsify but not prove the relation.
export_gate
Subject: wasi-host/src/main.rs at SHA-256 2200229297d1dde6d9f8477a577a7320c854d0db4fb3ea450b457a9858107122, scope wasi-cli. Domain: the source transition and bounded fixtures described in approximant.md; readable valid host resources where required. Observation: returned values, byte coordinates, state/effect order, not total-system semantics. Operator/relation: Export occurs iff guest code0 and no trap; first export error returns2 before journal/stats, prior exports may persist.
Status: partial source-derived relation; complement is a scoped exclusion hypothesis, reverse preserves all compatible antecedents described rather than a chosen inverse. Assumptions: production branch order, declared coordinate/resource premises; no completeness claim for untested inputs. Evidence: tests.md distinguishes actual execution from source review; finite observations can falsify but not prove the relation.
journal_failure
Subject: wasi-host/src/main.rs at SHA-256 2200229297d1dde6d9f8477a577a7320c854d0db4fb3ea450b457a9858107122, scope wasi-cli. Domain: the source transition and bounded fixtures described in approximant.md; readable valid host resources where required. Observation: returned values, byte coordinates, state/effect order, not total-system semantics. Operator/relation: Journal write errors print but do not alter final exit; no atomic export+journal transaction.
Status: partial source-derived relation; complement is a scoped exclusion hypothesis, reverse preserves all compatible antecedents described rather than a chosen inverse. Assumptions: production branch order, declared coordinate/resource premises; no completeness claim for untested inputs. Evidence: tests.md distinguishes actual execution from source review; finite observations can falsify but not prove the relation.
memory_cast
Subject: wasi-host/src/main.rs at SHA-256 2200229297d1dde6d9f8477a577a7320c854d0db4fb3ea450b457a9858107122, scope wasi-cli. Domain: the source transition and bounded fixtures described in approximant.md; readable valid host resources where required. Observation: returned values, byte coordinates, state/effect order, not total-system semantics. Operator/relation: parse_size returns integer cast to usize; architecture width matters. Seed/fuel parse u64; default mem1GiB.
Status: partial source-derived relation; complement is a scoped exclusion hypothesis, reverse preserves all compatible antecedents described rather than a chosen inverse. Assumptions: production branch order, declared coordinate/resource premises; no completeness claim for untested inputs. Evidence: tests.md distinguishes actual execution from source review; finite observations can falsify but not prove the relation.
tests
Checks and limits
Named actual-source tests run twice per debug/release; exact commands and numeric statuses retained externally. Test success is finite evidence only.
Exact names: wave31_cli_tiny_guest_isolated_effects.
wave31_cli_tiny_guest_isolated_effects invokes actual wasi-run with one tiny empty guest and one unreachable guest, root-local import/export/journal and two usage failures.
Five compiled production/helper-source controls: append offset, virtual clock advance, trap status, CLI export gate and newest-mtime max. Each compiles, fails its selected assertion, restores exact original bytes and passes again. These controls cover their target relations, not every node. No assertion-only mutants. See external source-test-map.json, native-commands.json, verify.rs and numeric/raw receipts in $MOVA_DATA/runs/octopus-wave31-wasi-2026-10-31. The example main and frozen mlab paths are never executed.
This page in Markdown → https://md.groupants.elamur.ai/free/en/mova/wasi-host/src/main.rs.groupant/