Skip to content

[anneal][v1] Generate and verify workspaces against their bound Lean SDK - #3819

Open
joshlf wants to merge 1 commit into
Gj4lmlguokmydnwe4qr3px5lanlzfplvgfrom
Gfzrninkdoypc72akmjdclivmmarjkcyi
Open

joshlf wants to merge 1 commit into
Gj4lmlguokmydnwe4qr3px5lanlzfplvgfrom
Gfzrninkdoypc72akmjdclivmmarjkcyi

Conversation

@joshlf

@joshlf joshlf commented Oct 8, 2026 •

Copy link
Copy Markdown
Member

Generated projects currently require Aeneas and its inherited path
packages, so Lake must load shared package configurations even when
their outputs are prebuilt. Route generation and verification through
the admitted SDK APIs. Use only local Lake libraries and an empty
dependency manifest, and import shared modules from the immutable
installation. Reuse precompiled AnnealSupport while keeping each
consumer's proof policy in its local facade. Lake continues to schedule
and compile the workspace's local modules.

Validate SDK metadata when installing or reusing a toolchain. Capture
the admitted physical installation before selecting workspace and
managed translator paths. Place Lean workspaces under their SDK identity
so a Lean upgrade starts with fresh private outputs. When a new
distribution has the same Lean identity, preserve an existing
workspace's original physical binding.

Regenerate in a private stage, preserving user sources and unchanged
source mtimes. Transfer only the same owner's complete output/runtime
trees. Check saved inputs around replacement and prune deleted-module
artifacts. If a swap fails, retain recoverable sources and outputs.

Build saved transitive imports before checking proof bodies with direct
Lean; starting Lean alone can otherwise consume stale private OLeans.
Use the finite Lake helper to batch import preparation and share
configuration loading across bounded groups of roots, with stock Lake
commands for installations or requests outside the helper's input
limits. Accept its status protocol only with complete ordered root
coverage, EOF and a matching exit status. Keep direct compiler failures,
malformed diagnostics and saved-input changes from becoming verification
success, including changes while forwarding the result. Commit reusable
output provenance only after successful preparation of the unchanged
saved state.

Hold one writer and cancellation scope through preparation, proof checks
and final acceptance. Run finite Lean/Lake producers in owned process
groups that inherit a protected lifetime lease at spawn. Leader exit is
insufficient. Wait for the independently opened lease barrier before
accepting outputs or starting another producer. Cancellation stops the
group, while surviving lease holders continue to block successor
writers. At CLI startup, retain the writer reservation until existing
native producers stop and their outputs can be admitted.

Expose cargo anneal lean build, check and setup-file for existing bound
workspaces, and print that gateway in generated build guidance. Update
the integration harness for SDK workspace paths, private output reuse
and host portability, including isolated fixture Git discovery.

Authored by an AI agent acting on joshlf's behalf.


Latest Update: v13 — Compare vs v12

📚 Full Patch History

Links show the diff between the row version and the column version.

Version v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v13 v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v12 v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v11 v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v10 v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v9 v8 v7 v6 v5 v4 v3 v2 v1 Base
v8 v7 v6 v5 v4 v3 v2 v1 Base
v7 v6 v5 v4 v3 v2 v1 Base
v6 v5 v4 v3 v2 v1 Base
v5 v4 v3 v2 v1 Base
v4 v3 v2 v1 Base
v3 v2 v1 Base
v2 v1 Base
v1 Base
⬇️ Download this PR

Branch

git fetch origin refs/heads/Gfzrninkdoypc72akmjdclivmmarjkcyi && git checkout -b pr-Gfzrninkdoypc72akmjdclivmmarjkcyi FETCH_HEAD

Checkout

git fetch origin refs/heads/Gfzrninkdoypc72akmjdclivmmarjkcyi && git checkout FETCH_HEAD

Cherry Pick

git fetch origin refs/heads/Gfzrninkdoypc72akmjdclivmmarjkcyi && git cherry-pick FETCH_HEAD

Pull

git pull origin refs/heads/Gfzrninkdoypc72akmjdclivmmarjkcyi

Stacked PRs enabled by GHerrit.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 8, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-08T19:32:57.728817Z 098a5f2 Manual request
🔒 Security Review ✅ Completed 2026-10-08T19:34:24.084484Z 098a5f2 Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@codecov-commenter

codecov-commenter commented Oct 8, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.94%. Comparing base (58b300a) to head (1193df7).

Additional details and impacted files
@@                        Coverage Diff                         @@
##           Gj4lmlguokmydnwe4qr3px5lanlzfplvg    #3819   +/-   ##
==================================================================
  Coverage                              92.94%   92.94%           
==================================================================
  Files                                     16       16           
  Lines                                   2466     2466           
==================================================================
  Hits                                    2292     2292           
  Misses                                   174      174           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@joshlf

joshlf commented Oct 8, 2026

Copy link
Copy Markdown
Member Author

@codex review

Please re-review the current head, 3ba4cce49ffa8478361a859642a9888a87c8c36c.

This update inherits the producer/cache and manifest repairs and applies the pinned nightly import formatting at each file's introduction. The complete binary/integration harness compiles with warnings denied and all 582 unit tests pass locally.

Authored by an AI agent acting on joshlf's behalf.

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 3ba4cce49f

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3ba4cce49f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread anneal/v1/src/aeneas.rs Outdated
{aeneas_dep}
const EMPTY_MANIFEST: &str = r#"{
"version": "1.2.0", "packagesDir": ".lake/packages", "packages": [],
"name": "anneal_verification", "lakeDir": ".lake", "fixedToolchain": true

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Emit a manifest accepted by the workspace validator

Every newly generated workspace writes fixedToolchain: true, but Workspace::finite_inputs and Workspace::lake_command pass this manifest to check_dependency_free_manifest, which explicitly rejects any true fixed_toolchain value. Consequently, verify fails during import preparation, and the advertised cargo anneal lean ... build/check/setup-file commands also fail for generated workspaces before launching Lake. Emit false or omit the field, matching the manifest produced by Workspace::write_lakefile and the integration fixture.

Useful? React with 👍 / 👎.

@joshlf
joshlf force-pushed the Gj4lmlguokmydnwe4qr3px5lanlzfplvg branch from 82d6e32 to e0f49f8 Compare October 8, 2026 11:23
@joshlf
joshlf force-pushed the Gfzrninkdoypc72akmjdclivmmarjkcyi branch from 3ba4cce to ce3868a Compare October 8, 2026 11:23
@joshlf

joshlf commented Oct 8, 2026

Copy link
Copy Markdown
Member Author

@codex review

The stack has been rebased onto current main after the SHA optimization merged. Please review this PR’s current diff. Generated manifests now agree with the strict validator. A new regression follows the generator’s exact manifest through stock and finite invocation admission and regeneration. The complete 583-test unit suite, producer tests, binary/integration harness checks and recursive formatter pass locally; Linux archive CI checks native assembly. Current head: ce3868a0f02293cdedf97133fab12288a122be62.

Authored by an AI agent acting on joshlf's behalf.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. 👍

Reviewed commit: ce3868a0f0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: ce3868a0f0

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@joshlf
joshlf force-pushed the Gj4lmlguokmydnwe4qr3px5lanlzfplvg branch from e0f49f8 to eeb2513 Compare October 8, 2026 13:30
@joshlf
joshlf force-pushed the Gfzrninkdoypc72akmjdclivmmarjkcyi branch from ce3868a to 359b93e Compare October 8, 2026 13:30
@joshlf

joshlf commented Oct 8, 2026

Copy link
Copy Markdown
Member Author

@codex review

Please review the updated exact head 359b93eead5f7d2e98cca9f92f902de037dda021. CLI startup retains its pending main fence until native producer leases are released, then performs Complete admission.

Authored by an AI agent acting on joshlf's behalf.

@joshlf
joshlf force-pushed the Gj4lmlguokmydnwe4qr3px5lanlzfplvg branch from eeb2513 to 4949e68 Compare October 8, 2026 14:21
@joshlf
joshlf force-pushed the Gfzrninkdoypc72akmjdclivmmarjkcyi branch from 359b93e to 47d4d3e Compare October 8, 2026 14:21
@joshlf

joshlf commented Oct 8, 2026

Copy link
Copy Markdown
Member Author

@codex review

Please review the updated exact head 47d4d3eaa18e2e36ba9f8d5d3ccda9da2c6b6b09. The native shared-SDK fixture now creates all three workspace controls under the normal generation writer before read-only startup. Production startup still never repairs supplied roots. The previously failing native fixture passes against the exact RC2/macOS SDK.

Authored by an AI agent acting on joshlf's behalf.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Hooray!

Reviewed commit: 47d4d3eaa1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 47d4d3eaa1

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@joshlf
joshlf force-pushed the Gj4lmlguokmydnwe4qr3px5lanlzfplvg branch from 4949e68 to fe97912 Compare October 8, 2026 15:40
@joshlf
joshlf force-pushed the Gfzrninkdoypc72akmjdclivmmarjkcyi branch from 47d4d3e to 5f4382c Compare October 8, 2026 15:40
@joshlf

joshlf commented Oct 8, 2026

Copy link
Copy Markdown
Member Author

@codex review

Please review the updated exact head 5f4382cbe5025d3a4846bafa23d256373e5350ed. Finite stock and native producers inherit the protected workspace producer lifetime lease at actual spawn. Successful completion waits for separately opened exclusive barrier admission; cancellation cannot expose surviving holders to a successor writer.

Authored by an AI agent acting on joshlf's behalf.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Keep them coming!

Reviewed commit: 5f4382cbe5

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 5f4382cbe5

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@joshlf
joshlf force-pushed the Gfzrninkdoypc72akmjdclivmmarjkcyi branch from 5f4382c to c6806f2 Compare October 8, 2026 17:21
@joshlf
joshlf force-pushed the Gj4lmlguokmydnwe4qr3px5lanlzfplvg branch from fe97912 to cc34429 Compare October 8, 2026 17:21
@joshlf

joshlf commented Oct 8, 2026

Copy link
Copy Markdown
Member Author

@codex review

Please review the updated exact head c6806f2a400b61c42b245db1e5aefbf2a495e0f5. Removed PR3814 from the ancestry and restored main's original separate early unit-test command and comments exactly. All other files in this prefix are byte-identical to the previously CI-passing and Codex-reviewed prefix; the conceptual review order is unchanged.

Authored by an AI agent acting on joshlf's behalf.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. 🎉

Reviewed commit: c6806f2a40

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: c6806f2a40

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@joshlf
joshlf force-pushed the Gfzrninkdoypc72akmjdclivmmarjkcyi branch from c6806f2 to 7a5ec75 Compare October 8, 2026 18:55
@joshlf

joshlf commented Oct 8, 2026

Copy link
Copy Markdown
Member Author

@codex review

Please review updated exact head 7a5ec75f8abc7bd4f53013d80de2eee2443fad2f. Unified finite Lake/direct Lean ownership and retained operation cancellation through preparation and direct proof checks. Added actual CLI detached-holder and signal regression coverage. Local validation:608 unit tests, pinned formatting, integration-harness compilation, affected prefix checks, and the native archive/cache-reuse integration case on the exact sealed RC2/macOS installation. The original separate early unit-test CI step remains restored.

Authored by an AI agent acting on joshlf's behalf.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Chef's kiss.

Reviewed commit: 7a5ec75f8a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 7a5ec75f8a

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@joshlf
joshlf force-pushed the Gfzrninkdoypc72akmjdclivmmarjkcyi branch from 7a5ec75 to 098a5f2 Compare October 8, 2026 19:27
@joshlf
joshlf force-pushed the Gj4lmlguokmydnwe4qr3px5lanlzfplvg branch from cc34429 to 1dfca43 Compare October 8, 2026 19:27
@joshlf

joshlf commented Oct 8, 2026

Copy link
Copy Markdown
Member Author

@codex review

Please review updated exact head 098a5f24501c80406a49f0c249095ec55bca5aeb. Unified finite Lake/direct Lean ownership and retained operation cancellation through preparation and direct proof checks. Added actual CLI detached-holder and signal regression coverage. Local validation:609 unit tests, independent affected prefix unit/format checks, pinned final formatting and integration-harness compilation. Earlier native archive/cache-reuse evidence is retained for unchanged CLI/SDK code on the exact sealed RC2/macOS installation. The original separate early unit-test CI step remains restored.

Authored by an AI agent acting on joshlf's behalf.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. 🎉

Reviewed commit: 098a5f2450

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 098a5f2450

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@joshlf
joshlf force-pushed the Gfzrninkdoypc72akmjdclivmmarjkcyi branch from 098a5f2 to d994081 Compare October 10, 2026 00:00
@joshlf
joshlf force-pushed the Gj4lmlguokmydnwe4qr3px5lanlzfplvg branch from 1dfca43 to 679f225 Compare October 10, 2026 00:00
@joshlf joshlf changed the title [anneal][v1] Generate and verify private Lean workspaces in one owned operation [anneal][v1] Generate and verify workspaces against their bound Lean SDK Oct 10, 2026
Generated projects currently require Aeneas and its inherited path
packages, so Lake must load shared package configurations even when
their outputs are prebuilt. Route generation and verification through
the admitted SDK APIs. Use only local Lake libraries and an empty
dependency manifest, and import shared modules from the immutable
installation. Reuse precompiled AnnealSupport while keeping each
consumer's proof policy in its local facade. Lake continues to schedule
and compile the workspace's local modules.

Validate SDK metadata when installing or reusing a toolchain. Capture
the admitted physical installation before selecting workspace and
managed translator paths. Place Lean workspaces under their SDK identity
so a Lean upgrade starts with fresh private outputs. When a new
distribution has the same Lean identity, preserve an existing
workspace's original physical binding.

Regenerate in a private stage, preserving user sources and unchanged
source mtimes. Transfer only the same owner's complete output/runtime
trees. Check saved inputs around replacement and prune deleted-module
artifacts. If a swap fails, retain recoverable sources and outputs.

Build saved transitive imports before checking proof bodies with direct
Lean; starting Lean alone can otherwise consume stale private OLeans.
Use the finite Lake helper to batch import preparation and share
configuration loading across bounded groups of roots, with stock Lake
commands for installations or requests outside the helper's input
limits. Accept its status protocol only with complete ordered root
coverage, EOF and a matching exit status. Keep direct compiler failures,
malformed diagnostics and saved-input changes from becoming verification
success, including changes while forwarding the result. Commit reusable
output provenance only after successful preparation of the unchanged
saved state.

Hold one writer and cancellation scope through preparation, proof checks
and final acceptance. Run finite Lean/Lake producers in owned process
groups that inherit a protected lifetime lease at spawn. Leader exit is
insufficient. Wait for the independently opened lease barrier before
accepting outputs or starting another producer. Cancellation stops the
group, while surviving lease holders continue to block successor
writers. At CLI startup, retain the writer reservation until existing
native producers stop and their outputs can be admitted.

Expose cargo anneal lean build, check and setup-file for existing bound
workspaces, and print that gateway in generated build guidance. Update
the integration harness for SDK workspace paths, private output reuse
and host portability, including isolated fixture Git discovery.

gherrit-pr-id: Gfzrninkdoypc72akmjdclivmmarjkcyi
Agent-authored-by: AI agent acting on joshlf's behalf
@joshlf
joshlf force-pushed the Gj4lmlguokmydnwe4qr3px5lanlzfplvg branch from 679f225 to 58b300a Compare October 10, 2026 13:18
@joshlf
joshlf force-pushed the Gfzrninkdoypc72akmjdclivmmarjkcyi branch from d994081 to 1193df7 Compare October 10, 2026 13:18

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants