blvm-spec-lock 0.1.21

BLVM Spec Lock: Purpose-built formal verification tool for Bitcoin Commons
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103

//! Negative verification test: deliberately wrong implementation must fail.
//!
//! Validates that the spec-lock verifier correctly rejects implementations
//! that violate their contracts.

use std::path::PathBuf;
use std::process::Command;

fn negative_crate_path() -> PathBuf {
    PathBuf::from(env!("CARGO_MANIFEST_DIR")).join("tests/fixtures/negative_crate")
}

#[test]
fn wrong_implementation_fails_verification() {
    let crate_path = negative_crate_path();
    assert!(
        crate_path.exists(),
        "Negative fixture crate not found at {}",
        crate_path.display()
    );

    let manifest_dir = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
    let output = Command::new("cargo")
        .args([
            "run",
            "--features",
            "z3",
            "--bin",
            "cargo-spec-lock",
            "--",
            "verify",
            "--crate-path",
            crate_path.to_str().unwrap(),
        ])
        .current_dir(&manifest_dir)
        .output()
        .expect("Failed to run cargo spec-lock verify");

    let stderr = String::from_utf8_lossy(&output.stderr);
    let stdout = String::from_utf8_lossy(&output.stdout);

    assert!(
        !output.status.success(),
        "Verification should FAIL for wrong implementation, but it passed.\nstdout:\n{stdout}\nstderr:\n{stderr}"
    );

    assert!(
        stdout.contains("FAILED") || stderr.contains("FAILED"),
        "Output should mention failure.\nstdout:\n{stdout}\nstderr:\n{stderr}"
    );

    assert!(
        stdout.contains("get_block_subsidy") || stderr.contains("get_block_subsidy"),
        "Output should mention get_block_subsidy.\nstdout:\n{stdout}\nstderr:\n{stderr}"
    );
}

fn no_section_fixture_path() -> PathBuf {
    PathBuf::from(env!("CARGO_MANIFEST_DIR")).join("tests/fixtures/no_section_attribute")
}

#[test]
fn bare_spec_locked_without_section_reports_no_contracts() {
    let crate_path = no_section_fixture_path();
    assert!(
        crate_path.exists(),
        "no_section_attribute fixture missing at {}",
        crate_path.display()
    );

    let manifest_dir = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
    let golden = manifest_dir.join("tests/golden/minimal_function.md");
    let output = Command::new("cargo")
        .args([
            "run",
            "--features",
            "z3",
            "--bin",
            "cargo-spec-lock",
            "--",
            "verify",
            "--crate-path",
            crate_path.to_str().unwrap(),
            "--spec-path",
            golden.to_str().unwrap(),
        ])
        .current_dir(&manifest_dir)
        .output()
        .expect("cargo spec-lock verify");

    let stderr = String::from_utf8_lossy(&output.stderr);
    let stdout = String::from_utf8_lossy(&output.stdout);

    assert!(
        !output.status.success(),
        "Verify should FAIL when #[spec_locked] has no ยง link (NoContracts).\nstdout:\n{stdout}\nstderr:\n{stderr}"
    );

    assert!(
        stdout.contains("no contracts") || stderr.contains("no contracts"),
        "Human report should surface no-contracts failure.\nstdout:\n{stdout}\nstderr:\n{stderr}"
    );
}