{
"summary": {
"total_claims": 17,
"covered": 17,
"tla_covered": 9,
"test_covered": 17,
"coverage_pct": 100.0,
"tla_pct": 52.9,
"tla_eligible_total": 7,
"tla_eligible_covered": 7,
"tla_eligible_pct": 100.0,
"by_kind": {
"invariant": {
"total": 6,
"covered": 6,
"tla": 6,
"tests": 6
},
"inv": {
"total": 6,
"covered": 6,
"tla": 0,
"tests": 6
},
"theorem": {
"total": 5,
"covered": 5,
"tla": 3,
"tests": 5
}
}
},
"claims": [
{
"claim_id": "I-01",
"kind": "invariant",
"rust_tests": [
"src/oplog.rs"
],
"python_tests": [
"pytests/test_invariants.py"
],
"tla_specs": [
"formal/README.md"
],
"tla_eligible": false,
"tla_ineligible_reason": "cryptographic hash integrity; verified by unit test, not structural reasoning"
},
{
"claim_id": "I-02",
"kind": "invariant",
"rust_tests": [
"src/oplog.rs"
],
"python_tests": [
"pytests/test_invariants.py"
],
"tla_specs": [
"formal/OpLog.tla",
"formal/SilkSync.tla",
"formal/README.md"
],
"tla_eligible": true,
"tla_ineligible_reason": null
},
{
"claim_id": "I-03",
"kind": "invariant",
"rust_tests": [],
"python_tests": [
"pytests/test_invariants.py"
],
"tla_specs": [
"formal/OpLog.tla",
"formal/README.md"
],
"tla_eligible": true,
"tla_ineligible_reason": null
},
{
"claim_id": "I-04",
"kind": "invariant",
"rust_tests": [
"src/oplog.rs"
],
"python_tests": [
"pytests/test_invariants.py"
],
"tla_specs": [
"formal/OpLog.tla",
"formal/README.md"
],
"tla_eligible": true,
"tla_ineligible_reason": null
},
{
"claim_id": "I-05",
"kind": "invariant",
"rust_tests": [],
"python_tests": [
"pytests/test_invariants.py"
],
"tla_specs": [
"formal/SilkSync.tla",
"formal/README.md"
],
"tla_eligible": true,
"tla_ineligible_reason": null
},
{
"claim_id": "I-06",
"kind": "invariant",
"rust_tests": [
"src/graph.rs",
"src/python/mod.rs"
],
"python_tests": [
"pytests/test_invariants.py",
"pytests/test_quarantine.py"
],
"tla_specs": [
"formal/README.md"
],
"tla_eligible": false,
"tla_ineligible_reason": "quarantine determinism is a corollary of Theorem 3 (PROOF.md \u00a76)"
},
{
"claim_id": "INV-1",
"kind": "inv",
"rust_tests": [],
"python_tests": [
"pytests/test_invariants.py"
],
"tla_specs": [],
"tla_eligible": true,
"tla_ineligible_reason": null
},
{
"claim_id": "INV-2",
"kind": "inv",
"rust_tests": [],
"python_tests": [
"pytests/test_invariants.py"
],
"tla_specs": [],
"tla_eligible": true,
"tla_ineligible_reason": null
},
{
"claim_id": "INV-3",
"kind": "inv",
"rust_tests": [],
"python_tests": [
"pytests/test_invariants.py"
],
"tla_specs": [],
"tla_eligible": true,
"tla_ineligible_reason": null
},
{
"claim_id": "INV-4",
"kind": "inv",
"rust_tests": [],
"python_tests": [
"pytests/test_invariants.py"
],
"tla_specs": [],
"tla_eligible": true,
"tla_ineligible_reason": null
},
{
"claim_id": "INV-5",
"kind": "inv",
"rust_tests": [],
"python_tests": [
"pytests/test_invariants.py"
],
"tla_specs": [],
"tla_eligible": true,
"tla_ineligible_reason": null
},
{
"claim_id": "INV-6",
"kind": "inv",
"rust_tests": [
"src/oplog.rs",
"src/python/mod.rs"
],
"python_tests": [
"pytests/test_invariants.py"
],
"tla_specs": [],
"tla_eligible": true,
"tla_ineligible_reason": null
},
{
"claim_id": "Theorem 1",
"kind": "theorem",
"rust_tests": [],
"python_tests": [
"pytests/test_invariants.py"
],
"tla_specs": [
"formal/SilkSync.tla",
"formal/README.md"
],
"tla_eligible": true,
"tla_ineligible_reason": null
},
{
"claim_id": "Theorem 2",
"kind": "theorem",
"rust_tests": [],
"python_tests": [
"pytests/test_invariants.py"
],
"tla_specs": [
"formal/SilkSync.tla",
"formal/README.md"
],
"tla_eligible": true,
"tla_ineligible_reason": null
},
{
"claim_id": "Theorem 3",
"kind": "theorem",
"rust_tests": [],
"python_tests": [
"pytests/test_invariants.py"
],
"tla_specs": [
"formal/SilkSync.tla",
"formal/README.md"
],
"tla_eligible": true,
"tla_ineligible_reason": null
},
{
"claim_id": "Theorem 4",
"kind": "theorem",
"rust_tests": [],
"python_tests": [
"pytests/test_entries_affecting.py"
],
"tla_specs": [],
"tla_eligible": false,
"tla_ineligible_reason": "composition of two semilattices; proved algebraically in PROOF.md Appendix A (standard result, would not add model-checker value)"
},
{
"claim_id": "Theorem 5",
"kind": "theorem",
"rust_tests": [
"src/provenance.rs",
"src/python/mod.rs"
],
"python_tests": [
"pytests/test_entries_affecting.py"
],
"tla_specs": [],
"tla_eligible": false,
"tla_ineligible_reason": "trivially follows from Theorem 1 (topo sort determinism); proved semi-formally in PROOF.md Appendix A"
}
]
}