Cairn
Docs
Claims
Blog
Packages
Claim · cairn 0.5.2
cairn^1113 A settled count is the server's
An invariant of cairn 0.5.2.
- Id
cairn^1113- Kind
- invariant
- Reads as
- proved
- Version
- 0.5.2
What it says
For a view whose count is other people's o plus the person's own [v], a settled key shows o + [what the server holds]: exactly the server's count when no one else acted since the view. The count shown, c − [v] + [shown], is never below zero, and never below the person's own [shown].
Evidence
| proved | init | Cairn.Optimistic.Claims.counts.init |
| proved | step | Cairn.Optimistic.Claims.counts.step |
| proved | receive | Cairn.Optimistic.Claims.counts.receive |
| proved | reachable | Cairn.Optimistic.Claims.counts.reachable |
| proved | reachableAll | Cairn.Optimistic.Claims.counts.reachableAll |
| fuzzed | Not shown yet: the claim-driven fuzzer held it in every random sequence (docs/fuzz.md). A CI step will publish it (#95). | |
| tested | Not shown yet: the running app matched the model at every step that exercised it (docs/conformance.md). A CI step will publish it (#95). | |
Where it's defined
- Declaration
Cairn.Optimistic.Claims.counts- Module
Cairn.Optimistic.Claims- Source
lean/Cairn/Optimistic/Claims.lean:224atv0.5.2- Machine
Cairn.Optimistic.Claims.machine- Statement
Cairn.Optimistic.Claims.counts.holds- Statement hash
eb468b28d2b13fc8
Ledger
cairn^1113 is active in this version's claims.lock, statement eb468b28d2b13fc8. An id never moves or changes meaning.