1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
|
{-# LANGUAGE NoImplicitPrelude #-}
module Felix.Test.Unit.Materialization (unitTests) where
import Base
import Felix.Checking.Authority qualified as Authority
import Felix.Checking.Core qualified as Core
import Felix.Checking.Foundation qualified as Foundation
import Felix.Checking.Identity qualified as Identity
import Felix.Checking.Materialization qualified as Materialization
import Felix.Checking.Semantic qualified as Semantic
import Felix.Math.Codec
import Felix.Module
import Felix.Source
import Test.Tasty
import Test.Tasty.HUnit
unitTests :: TestTree
unitTests =
testGroup "Validation applicability"
[ testCase "keeps serializable candidate validation inert"
keepsCandidateValidationInert
, testCase "rejects inexact candidate validation"
rejectsInexactCandidateValidation
, testCase "rejects mismatched candidate fields"
rejectsMismatchedCandidateFields
, testCase "selects ordered declaration certificates"
selectsDeclarationCertificate
, testCase "keeps raw interface membership inert"
keepsImportedMembershipInert
]
keepsCandidateValidationInert :: Assertion
keepsCandidateValidationInert = do
fixture <- makeFixture
let check =
Materialization.checkCandidateValidation
(fixtureTheory fixture)
(fixturePrefix fixture)
(fixtureProposition fixture)
(fixtureAuthority fixture)
(fixtureDirect fixture)
(fixtureProofValidation fixture)
assertEqual
"freely constructed records yield only inert applicability"
(Right ())
check
assertEqual
"inert applicability data is reusable"
(Right ())
check
rejectsInexactCandidateValidation :: Assertion
rejectsInexactCandidateValidation = do
fixture <- makeFixture
let wrongKey =
Semantic.proofValidationKey
(Identity.theoremId
(fixtureReference fixture))
(Semantic.proofSyntaxId "other-proof")
(fixturePrefix fixture)
wrongValidation =
Materialization.candidateProofValidation
(Semantic.proofValidationRecord
wrongKey
(fixtureCertificate fixture))
(Semantic.proofSyntaxId "proof")
case Materialization.checkCandidateValidation
(fixtureTheory fixture)
(fixturePrefix fixture)
(fixtureProposition fixture)
(fixtureAuthority fixture)
(fixtureDirect fixture)
wrongValidation of
Left Materialization.ProofValidationKeyMismatch{} ->
pure ()
Left other ->
assertFailure
("unexpected validation-key error: " <> show other)
Right _ ->
assertFailure "inexact proof validation key succeeded"
rejectsMismatchedCandidateFields :: Assertion
rejectsMismatchedCandidateFields = do
fixture <- makeFixture
let sourceAuthority =
Authority.factAuthority
(fixtureReference fixture)
(Authority.authoritySafety
(Authority.singletonEscapeKind
Authority.SourceAxiom))
sourceCertificate <- expectRight
(Authority.validationCertificate
sourceAuthority
Authority.SourceAxiomAuthorization)
let key =
Semantic.proofValidationKey
(Identity.theoremId (fixtureReference fixture))
(Semantic.proofSyntaxId "proof")
(fixturePrefix fixture)
sourceValidation =
Materialization.candidateProofValidation
(Semantic.proofValidationRecord
key
sourceCertificate)
(Semantic.proofSyntaxId "proof")
case Materialization.checkCandidateValidation
(fixtureTheory fixture)
(fixturePrefix fixture)
(fixtureProposition fixture)
(fixtureAuthority fixture)
(fixtureDirect fixture)
sourceValidation of
Left Materialization.CandidateCertificateTargetMismatch{} ->
pure ()
Left other ->
assertFailure
("unexpected target mismatch: " <> show other)
Right _ ->
assertFailure "mismatched safety was accepted"
differentDirect <- expectRight
(Authority.validationCertificate
(fixtureAuthority fixture)
(Authority.CheckedSourceProof
[Authority.preparedRequestId
Authority.PreparedRequestFof
Authority.PreparedRequestDirect
"different-request"]))
let directValidation =
Materialization.candidateProofValidation
(Semantic.proofValidationRecord
key
differentDirect)
(Semantic.proofSyntaxId "proof")
case Materialization.checkCandidateValidation
(fixtureTheory fixture)
(fixturePrefix fixture)
(fixtureProposition fixture)
(fixtureAuthority fixture)
(fixtureDirect fixture)
directValidation of
Left Materialization.CandidateDirectAuthorizationMismatch{} ->
pure ()
Left other ->
assertFailure
("unexpected direct-authorization mismatch: "
<> show other)
Right _ ->
assertFailure "mismatched request list was accepted"
closure <- expectRight
(Identity.validateObjectClosure
(fixtureTheory fixture)
[])
otherProposition <- expectRight
(Identity.validatePropositionContent
closure
(Core.CImp Core.CFalsum Core.CFalsum))
case Materialization.checkCandidateValidation
(fixtureTheory fixture)
(fixturePrefix fixture)
otherProposition
(fixtureAuthority fixture)
(fixtureDirect fixture)
(fixtureProofValidation fixture) of
Left Materialization.CandidatePropositionMismatch{} ->
pure ()
Left other ->
assertFailure
("unexpected proposition mismatch: " <> show other)
Right _ ->
assertFailure "mismatched proposition content was accepted"
selectsDeclarationCertificate :: Assertion
selectsDeclarationCertificate = do
fixture <- makeFixture
let sourceAuthority =
Authority.factAuthority
(fixtureReference fixture)
(Authority.authoritySafety
(Authority.singletonEscapeKind
Authority.SourceAxiom))
sourceCertificate <- expectRight
(Authority.validationCertificate
sourceAuthority
Authority.SourceAxiomAuthorization)
let syntax =
Semantic.declarationSyntaxId "declaration"
producedTheorems =
[ Identity.theoremId
(fixtureReference fixture)
, Identity.theoremId
(fixtureReference fixture)
]
key =
Semantic.declarationValidationKey
syntax
(fixturePrefix fixture)
[]
producedTheorems
validation =
Materialization.candidateDeclarationValidation
(Semantic.declarationValidationRecord
key
[sourceCertificate, fixtureCertificate fixture])
syntax []
producedTheorems
1
assertEqual
"candidate ordinal selects the second certificate"
(Right ())
(Materialization.checkCandidateValidation
(fixtureTheory fixture)
(fixturePrefix fixture)
(fixtureProposition fixture)
(fixtureAuthority fixture)
(fixtureDirect fixture)
validation)
keepsImportedMembershipInert :: Assertion
keepsImportedMembershipInert = do
fixture <- makeFixture
occurrence <- expectRight
(Materialization.checkImportedMembership
(fixtureTheory fixture)
(fixtureInterface fixture)
(fixtureFingerprint fixture)
(fixtureProposition fixture)
(fixtureAuthority fixture))
assertEqual
"raw interface yields only its inert occurrence"
(fixtureAuthority fixture)
(Semantic.semanticFactAuthority occurrence)
let wrongAuthority =
Authority.factAuthority
(fixtureReference fixture)
(Authority.authoritySafety
(Authority.singletonEscapeKind
Authority.Omitted))
case Materialization.checkImportedMembership
(fixtureTheory fixture)
(fixtureInterface fixture)
(fixtureFingerprint fixture)
(fixtureProposition fixture)
wrongAuthority of
Left Materialization.ImportedAuthorityMismatch{} ->
pure ()
Left other ->
assertFailure
("unexpected imported-authority error: " <> show other)
Right _ ->
assertFailure "imported authority mismatch succeeded"
data Fixture = Fixture
{ fixtureTheory :: !Identity.TheoryId
, fixtureReference :: !Identity.TheoremRef
, fixtureProposition :: !Identity.CheckedPropositionContent
, fixtureAuthority :: !Authority.FactAuthority
, fixtureDirect :: !Authority.DirectAuthorization
, fixtureCertificate :: !Authority.ValidationCertificate
, fixtureFingerprint
:: !Semantic.SemanticFactOccurrenceFingerprint
, fixtureInterface :: !Semantic.SemanticInterface
, fixturePrefix :: !Semantic.PrefixContextId
, fixtureProofValidation
:: !Materialization.CandidateValidation
}
makeFixture :: IO Fixture
makeFixture = do
foundation <- expectRight Foundation.checkedFoundation
namespaceDigest <- expectRight
(hashCanonicalFields
"materialization-test-namespace"
["root"])
relative <- expectRight (safeRelativePath "producer.tex")
let theory =
Identity.theoryId foundation
owner =
moduleNameFromParts
(sourceNamespaceIdFromDigest namespaceDigest)
relative
closure <- expectRight
(Identity.validateObjectClosure theory [])
proposition <- expectRight
(Identity.validatePropositionContent
closure Core.CFalsum)
let reference =
Identity.theoremRef
theory
(Identity.checkedPropositionId proposition)
authority =
Authority.factAuthority
reference
Authority.cleanAuthoritySafety
direct =
Authority.CheckedSourceProof []
slot =
Semantic.factSlot owner (localFactOrdinal 0)
fingerprint =
Semantic.semanticFactOccurrenceFingerprint
slot authority
occurrence =
Semantic.semanticFactOccurrence
slot
authority
Semantic.SearchEligible
declaration =
Semantic.declarationSlot
owner
(localDeclarationOrdinal 0)
certificate <- expectRight
(Authority.validationCertificate authority direct)
delta <- expectRight
(Semantic.declarationInterfaceDelta
declaration
[occurrence]
[]
[]
[Identity.checkedPropositionId proposition]
Semantic.emptySemanticEnvironmentDelta)
interface <- expectRight
(Semantic.semanticInterface owner [] [delta])
prefix <- expectRight
(Semantic.initialPrefixContextId theory owner [])
let syntax =
Semantic.proofSyntaxId "proof"
key =
Semantic.proofValidationKey
(Identity.theoremId reference)
syntax prefix
pure
Fixture
{ fixtureTheory = theory
, fixtureReference = reference
, fixtureProposition = proposition
, fixtureAuthority = authority
, fixtureDirect = direct
, fixtureCertificate = certificate
, fixtureFingerprint = fingerprint
, fixtureInterface = interface
, fixturePrefix = prefix
, fixtureProofValidation =
Materialization.candidateProofValidation
(Semantic.proofValidationRecord
key certificate)
syntax
}
expectRight :: Show error => Either error value -> IO value
expectRight = \case
Left err ->
assertFailure (show err) >> fail "unreachable"
Right value ->
pure value
|