Skip to content

compiler direction - #9502

Closed
briansrls wants to merge 1 commit into
mainfrom
fix/admission-roster-inhabitable
Closed

briansrls wants to merge 1 commit into
mainfrom
fix/admission-roster-inhabitable

Conversation

@briansrls

Copy link
Copy Markdown
Contributor

Auto-opened by session-dashboard for session warm-hawk-909.
Pushing to fix/admission-roster-inhabitable advances this PR.

Worker attestation

Before flipping this PR to ready for review, confirm each item:

  • Title describes the change (not the session id or branch).
  • PR body summarises what and why (replace the TODO below).
  • Tests run: name the command (e.g. npm test, cargo test) and the result.
  • If this closes a work item, the body contains a Closes #N directive.
  • No commits on this branch are surprises (no fork/cherry-pick I did not make).
  • No secrets / credentials / large binaries staged.

Summary

TODO: replace this paragraph with one or two sentences naming the change and its motivation. Reviewers read this first.

Test plan

  • TODO: list the commands that ran (or "no tests changed; relied on CI") and the outcome.

…aking it computable

THE DEFECT, STATED AT THE GRAIN THE MEASUREMENT SUPPORTS. `TransitionAdmission.subject` was
`DeltaSubject`, whose fields are `String` because it is built at runtime from discovered module
names. The roster is a `const`. Measured against those exact types, both arms:

  module: String::from("probe.consumer")  ->  error[E0015]: cannot call non-const associated
                                              function <String as From<&str>>::from in constants
                                              -- three times, one per field
  module: String::new()                   ->  compiles clean, emits metadata

So the roster was NOT uninhabitable, and an earlier statement of this defect (mine) said it was.
It held exactly one shape -- every field the empty string -- and that shape matches no delta. What
no const row could do was NAME A REAL MODULE: a hatch with no working position.

WHAT IT WAS NOT. A row authored anyway does not silently pass. It matches nothing, lands in
`stale_admissions`, prints with its own cause, and the ADMITTED arm is conjoined on that list being
empty -- so it REFUSES. An earlier report of this as an escape hatch that accepts rows and silently
matches nothing was withdrawn at source. Both failure paths were always loud; only the admission
arm was fiction (§4b -- decoration cited as coverage, inside an otherwise real wall).

THE FIX KEEPS CONST-NESS, WHICH IS DOING UNNAMED SAFETY WORK. A const roster cannot be COMPUTED, so
no code path can synthesise an admission: the admission set is exactly what a human authored and a
reviewer read. Reaching for a function or a `LazyLock<Vec<_>>` restores authorability by making
admissions computable, which is the absorbing fallback arriving through a type signature -- the
module's own header already forbids its behavioural twin, an admission "by a predicate ... which
admits everything and zeroes the wall's deficit frequency by construction". So admission rows get
their own `AdmissionSubject` with `&'static str` fields, matched against the runtime `DeltaSubject`.
That is also the better §3 statement: an admission row's subject is a PATTERN naming one subject,
not a subject.

WHY THE EXISTING COVERAGE COULD NOT SEE THIS, and it is the part worth keeping. Two thorough tests
already exercised the admission path -- exact-match admits, wrong-subject refuses and reports stale
-- and both build their rows in a `let` with `.to_string()`. Neither ever touched the `const`
constraint that actually bound production. So an auditor reading the admission path found green,
careful evidence about a mechanism no authorable production row could reach: the coverage made the
defect MORE hidden, not less.

  a_row_authored_in_a_const_admits_its_delta_exactly_as_a_runtime_row_would
  a_row_naming_the_empty_module_refuses_rather_than_admitting_silently

The first one's discriminating property is COMPILATION at a real module name, which is what the old
type refused. The second asserts the stale report BY LABEL, because an unattributable refusal is
close to the defect being fixed. Both stay enrolled after the climb rather than dissolving with it
(§4b -- a climb deletes the redundant production machinery, never the evidence).

22/22 green.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@gunbai-bot

gunbai-bot Bot commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

Closing: this PR was created automatically from a pushed branch, not by me, and it should not exist.

The branch fix/admission-roster-inhabitable (7385531f) was pushed solely so calm-lark-589 could cherry-pick it into #9436 — they took that option explicitly, and I told them there would be no PR so there is nothing of mine to close and no second review of the same change. An open PR here would be exactly the duplicate this session has already produced three times today.

The change itself is real and verified (22/22 green, fmt clean); it lands via #9436.

— sent from warm-hawk-909

@gunbai-bot gunbai-bot Bot closed this Aug 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant