Joseph Ferano b93b6120d1 A reversed slice is not a slice, in every build ...

The lo <= hi test in check_slice and slice-from-ptr's n >= 0 sat behind
--no-bounds-checks in both backends, while the comment beside each said
they could not be dropped. They are not bounds checks: hi <= len asks
whether a range fits inside a length, and lo <= hi asks whether the word
about to be written into a %slice's length field is a count at all. The
first stays behind the flag, the second is now emitted everywhere, the
way flan_vec_as_slice has always validated its own l > h in plain C.

emit.ml emits two signal blocks rather than one and i1, so an unchecked
build carries one compare. x86.ml keeps all three frame temporaries
stored outside the flag and gates only the second compare, because the
third is the length the message prints.

The IR assertion in test_acceptance now says the two slice calls are
present under --no-bounds-checks rather than absent, and the same build
is run: case 2 and case -2 of bounds.flan must still die.

2026-09-18 07:36:21 +07:00

..

assets

Assets are baked in at compile time, one file or one whole directory

2026-09-12 11:36:01 +07:00

pkgs

Macros come from a package now, and the refusal's reason was wrong

2026-09-13 15:40:08 +07:00

agent-longname.flan

Sweep every field label from the colon spelling to the dot

2026-09-12 14:47:54 +07:00

agent-queue.flan

Two of the four buffers with no evidence now have some

2026-09-12 10:47:41 +07:00

agent.flan

Retire the per-type printers, since print says all of it

2026-09-12 05:32:25 +07:00

algorithms.flan

The prelude's per-type families collapse: 22 functions become 10, 27 become 16

2026-09-13 14:49:11 +07:00

allocators.flan

Allocator is a builtin opaque type, so the arena needs nothing from milestone 5

2026-09-12 10:55:18 +07:00

arena-edn.flan

The refusal was about teardown, and a region has none

2026-09-17 20:37:08 +07:00

arena-region.flan

The refusal was about teardown, and a region has none

2026-09-17 20:37:08 +07:00

arena-value.flan

The refusal was about teardown, and a region has none

2026-09-17 20:37:08 +07:00

arith-condition.flan

A divide by zero names the file and the line, and is answerable

2026-09-13 22:55:26 +07:00

arith.flan

The two cases that would have passed while being wrong

2026-09-13 23:09:08 +07:00

array-ctor.flan

A let binding has no type slot, so (array 4 T) is how you say it

2026-09-12 21:48:08 +07:00

bounds-condition.flan

Every citation of a moved document now resolves from where it is written

2026-09-14 07:12:27 +07:00

bounds.flan

A reversed slice is not a slice, in every build

2026-09-18 07:36:21 +07:00

break.flan

Sweep every field label from the colon spelling to the dot

2026-09-12 14:47:54 +07:00

bytes2.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

cleanup.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

conditions.flan

The return type stops being a guess: the slot is mandatory, unit is ()

2026-09-12 23:18:28 +07:00

datas.flan

The tagged sum is defdata, and the old spelling is an error by name

2026-09-17 19:03:27 +07:00

debug-permuted.flan

Sweep every field label from the colon spelling to the dot

2026-09-12 14:47:54 +07:00

debug.flan

Sweep every field label from the colon spelling to the dot

2026-09-12 14:47:54 +07:00

defer-let.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

destructure.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

dev-break-bounds.flan

Every citation of a moved document now resolves from where it is written

2026-09-14 07:12:27 +07:00

dev-break.flan

Sweep every field label from the colon spelling to the dot

2026-09-12 14:47:54 +07:00

dev-globals.flan

The globals a stopped stack reaches, in one section and not under a frame

2026-09-12 16:22:58 +07:00

dev-inspect.flan

The tagged sum is defdata, and the old spelling is an error by name

2026-09-17 19:03:27 +07:00

dev-locals.flan

Sweep every field label from the colon spelling to the dot

2026-09-12 14:47:54 +07:00

dev-loop.flan

Sweep every field label from the colon spelling to the dot

2026-09-12 14:47:54 +07:00

dev-macro.flan

A macro module keeps its own prelude, and --x86 gets the merged daemon

2026-09-17 19:50:29 +07:00

dev-noagent.flan

Memcheck is told an arena reset happened, and the agentless session is pinned

2026-09-13 17:55:00 +07:00

dev-pause.flan

A pause is waited for by name, and a build is not a socket

2026-09-13 13:07:25 +07:00

dev-ptr.flan

An address answers with a type, and a killed program is asked rather than hooked

2026-09-13 15:27:31 +07:00

dev-repl.flan

A socket file must not outlive the process that bound it

2026-09-14 08:11:35 +07:00

dev-robust.flan

A failed build is a refusal, and a refusal leaves the session standing

2026-09-13 19:43:18 +07:00

dev-watch.flan

A hot loop keeps five numbers, and the window is the editor's

2026-09-13 10:35:20 +07:00

edn.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

embed.flan

Assets are baked in at compile time, one file or one whole directory

2026-09-12 11:36:01 +07:00

enum-compare.flan

Sweep every field label from the colon spelling to the dot

2026-09-12 14:47:54 +07:00

enum-convert.flan

An enum and an integer convert, both ways, when you say so

2026-09-12 09:11:34 +07:00

error.flan

Sweep every field label from the colon spelling to the dot

2026-09-12 14:47:54 +07:00

exhausted-unhandled.flan

(Vec T) over a type-erased runtime, with StorageExhausted going in beside it

2026-09-12 11:07:57 +07:00

exhausted.flan

The return type stops being a guess: the slot is mandatory, unit is ()

2026-09-12 23:18:28 +07:00

files.flan

Files beyond slurp and barf, split by whether a handler could act

2026-09-17 22:04:48 +07:00

fn-capture.flan

A bare name is the function, and capture is the part that is not built

2026-09-12 22:44:33 +07:00

fn-extern.flan

A bare name is the function, and capture is the part that is not built

2026-09-12 22:44:33 +07:00

fn-in-struct.flan

A bare name is the function, and capture is the part that is not built

2026-09-12 22:44:33 +07:00

fn-no-type.flan

A bare name is the function, and capture is the part that is not built

2026-09-12 22:44:33 +07:00

fn-values.flan

The prelude's per-type families collapse: 22 functions become 10, 27 become 16

2026-09-13 14:49:11 +07:00

format.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

frame-rollback.flan

Every citation of a moved document now resolves from where it is written

2026-09-14 07:12:27 +07:00

free-all-refused.flan

Say what the two one-line refusal programs are refusing, and why

2026-09-12 11:15:58 +07:00

generic-map-reject.flan

The map operations are deferred, and the clause is what pays for it

2026-09-13 15:23:37 +07:00

generic-reject.flan

The prelude's per-type families collapse: 22 functions become 10, 27 become 16

2026-09-13 14:49:11 +07:00

generic-runaway.flan

The prelude's per-type families collapse: 22 functions become 10, 27 become 16

2026-09-13 14:49:11 +07:00

generics.flan

The map operations are deferred, and the clause is what pays for it

2026-09-13 15:23:37 +07:00

handles.flan

Every citation of a moved document now resolves from where it is written

2026-09-14 07:12:27 +07:00

higher-order.flan

The prelude's per-type families collapse: 22 functions become 10, 27 become 16

2026-09-13 14:49:11 +07:00

into.flan

The two cases the tests did not cover, and one leak of a permission

2026-09-13 09:32:58 +07:00

loops.flan

Pin the latch to the continue path, and the clause barrier to its reason

2026-09-12 22:00:13 +07:00

machine.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

macro-cycle.flan

unless is not a special form any more

2026-09-12 20:59:12 +07:00

macro-spin.flan

unless is not a special form any more

2026-09-12 20:59:12 +07:00

macro-unless.flan

The return type stops being a guess: the slot is mandatory, unit is ()

2026-09-12 23:18:28 +07:00

macros.flan

unless is not a special form any more

2026-09-12 20:59:12 +07:00

map-exhausted.flan

The return type stops being a guess: the slot is mandatory, unit is ()

2026-09-12 23:18:28 +07:00

map-iter.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

map-remove.flan

A map you can take a key out of, and the run closes behind it

2026-09-17 22:31:58 +07:00

map-stale-region.flan

The Map's tests join the suite, and the epoch trap covers its half

2026-09-12 16:09:27 +07:00

maps.flan

Cover a dev build and a map that leaves its let

2026-09-12 16:34:25 +07:00

math2.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

math3.flan

The maths is the whole family now, at both widths

2026-09-17 22:04:48 +07:00

math.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

nth-gone.flan

Remove nth, the alias that was not one

2026-09-12 04:46:41 +07:00

pkg-alias-clash.flan

A ring of imports is refused by name, not swallowed

2026-09-12 16:46:30 +07:00

pkg-cycle.flan

A ring of imports is refused by name, not swallowed

2026-09-12 16:46:30 +07:00

pkg-diamond.flan

A ring of imports is refused by name, not swallowed

2026-09-12 16:46:30 +07:00

pkg-hidden-main.flan

sand is one program again

2026-09-11 20:11:01 +07:00

pkg-macro-bare.flan

Macros come from a package now, and the refusal's reason was wrong

2026-09-13 15:40:08 +07:00

pkg-macro-idle.flan

C-x C-e expands, and a declaration is not an expression

2026-09-13 17:54:36 +07:00

pkg-macro-ring.flan

Macros come from a package now, and the refusal's reason was wrong

2026-09-13 15:40:08 +07:00

pkg-macro-spin.flan

Macros come from a package now, and the refusal's reason was wrong

2026-09-13 15:40:08 +07:00

pkg-macro.flan

Macros come from a package now, and the refusal's reason was wrong

2026-09-13 15:40:08 +07:00

pkg-return.flan

Sweep every field label from the colon spelling to the dot

2026-09-12 14:47:54 +07:00

pkg-shadow.flan

A local shadowing an imported name, in an expression and in a place

2026-09-12 10:40:47 +07:00

pkg-shared.flan

Retire the per-type printers, since print says all of it

2026-09-12 05:32:25 +07:00

pkg-two-aliases.flan

sand is one program again

2026-09-11 20:11:01 +07:00

pkg-two-mains.flan

sand is one program again

2026-09-11 20:11:01 +07:00

pkg-unused.flan

Retire the per-type printers, since print says all of it

2026-09-12 05:32:25 +07:00

pool-stale-region.flan

Six refusals and a trap, each one a way of losing the property

2026-09-13 07:59:04 +07:00

printers.flan

A promise the compiler cannot check gets its own refusal, and a session expands its buffer's macros

2026-09-13 20:33:47 +07:00

println.flan

The return type stops being a guess: the slot is mandatory, unit is ()

2026-09-12 23:18:28 +07:00

raylib-audio.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

raylib-codepoints.flan

Both raylib workarounds, and where the second one went instead

2026-09-14 08:37:30 +07:00

raylib-ffi.flan

The renderer was one binding away, and the import was not allowed to be the answer

2026-09-13 07:50:03 +07:00

raylib-font.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

raylib-image-processing.flan

Nine filters that rewrite the buffer they are handed, and the half of them a headless run can pin

2026-09-13 23:22:37 +07:00

raylib-image.flan

The renderer was one binding away, and the import was not allowed to be the answer

2026-09-13 07:50:03 +07:00

raylib-imported.flan

A table for the importer, against a header that does not move

2026-09-12 16:09:48 +07:00

reach-walk.flan

The prelude's per-type families collapse: 22 functions become 10, 27 become 16

2026-09-13 14:49:11 +07:00

recur.flan

The two cases the tests did not cover, and one leak of a permission

2026-09-13 09:32:58 +07:00

registry.flan

Following a pointer was never a type question; it was a permission question

2026-09-13 09:17:47 +07:00

reload-agg-v2.flan

Every citation of a moved document now resolves from where it is written

2026-09-14 07:12:27 +07:00

reload-agg.flan

Every citation of a moved document now resolves from where it is written

2026-09-14 07:12:27 +07:00

reload-generic.flan

C-c C-c on a generic installs its copies, and a refusal about one says where it came from

2026-09-13 14:37:55 +07:00

reload-v2.flan

A global Vec is borrowed, never moved, and outlives every entry to main

2026-09-17 18:42:01 +07:00

reload-v3.flan

A global Vec is borrowed, never moved, and outlives every entry to main

2026-09-17 18:42:01 +07:00

reload-v4.flan

Retire the per-type printers, since print says all of it

2026-09-12 05:32:25 +07:00

reload-v5.flan

Retyping a global across a reload, which nothing had ever done

2026-09-12 10:51:14 +07:00

reload-v6.flan

A name the host was never built with, compiled by the x86 backend

2026-09-14 10:16:42 +07:00

reload.flan

A global Vec is borrowed, never moved, and outlives every entry to main

2026-09-17 18:42:01 +07:00

reserve-overflow.flan

A byte count that cannot be represented is StorageExhausted, not a smaller block

2026-09-17 21:49:40 +07:00

restarts.flan

Sweep every field label from the colon spelling to the dot

2026-09-12 14:47:54 +07:00

rl-with-reject.flan

A begin/end pair that cannot come apart, and what it still cannot promise

2026-09-13 18:00:35 +07:00

rl-with.flan

A begin/end pair that cannot come apart, and what it still cannot promise

2026-09-13 18:00:35 +07:00

sand-headless.flan

Retire the per-type printers, since print says all of it

2026-09-12 05:32:25 +07:00

shadow-pkg.flan

A local shadowing an imported name, in an expression and in a place

2026-09-12 10:40:47 +07:00

shim-nul.flan

Four places the runtime answered with something other than the truth

2026-09-17 22:17:19 +07:00

signedness.flan

Retire the per-type printers, since print says all of it

2026-09-12 05:32:25 +07:00

slice-from-ptr.flan

A pointer from C can state its length, and then it is a slice

2026-09-13 17:40:59 +07:00

slices.flan

The prelude's per-type families collapse: 22 functions become 10, 27 become 16

2026-09-13 14:49:11 +07:00

slurp-unhandled.flan

slurp reads a whole file, barf writes one, and failure is a condition

2026-09-12 11:38:24 +07:00

slurp.flan

slurp reads a whole file, barf writes one, and failure is a condition

2026-09-12 11:38:24 +07:00

stale-region.flan

(Vec T) over a type-erased runtime, with StorageExhausted going in beside it

2026-09-12 11:07:57 +07:00

string-of-bytes.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

strings.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

text.flan

The prelude's per-type families collapse: 22 functions become 10, 27 become 16

2026-09-13 14:49:11 +07:00

time.flan

The language can tell the time, and read its environment

2026-09-17 22:04:48 +07:00

two-numbers.flan

A rendered number goes in the caller's frame, not in one buffer for the process

2026-09-17 22:55:30 +07:00

unions.flan

defunion is C's union, and reading the member you did not write is defined

2026-09-17 19:54:32 +07:00

unit-main.flan

The return type stops being a guess: the slot is mandatory, unit is ()

2026-09-12 23:18:28 +07:00

user-allocator.flan

Say what the two one-line refusal programs are refusing, and why

2026-09-12 11:15:58 +07:00

utf8.flan

Every defn in the tree states its return type, and Unit is written ()

2026-09-12 23:06:40 +07:00

values.flan

Sweep every field label from the colon spelling to the dot

2026-09-12 14:47:54 +07:00

vec-double-free.flan

(Vec T) over a type-erased runtime, with StorageExhausted going in beside it

2026-09-12 11:07:57 +07:00

vec-global.flan

A global Vec is borrowed, never moved, and outlives every entry to main

2026-09-17 18:42:01 +07:00

vec-in-struct.flan

Ownership is not transitive yet, so refuse the three shapes that assume it is

2026-09-12 11:12:49 +07:00

vec-moved-in-loop.flan

(Vec T) over a type-erased runtime, with StorageExhausted going in beside it

2026-09-12 11:07:57 +07:00

vec-moved.flan

(Vec T) over a type-erased runtime, with StorageExhausted going in beside it

2026-09-12 11:07:57 +07:00

vec-to-c.flan

Ownership is not transitive yet, so refuse the three shapes that assume it is

2026-09-12 11:12:49 +07:00

vec-untyped.flan

(Vec T) over a type-erased runtime, with StorageExhausted going in beside it

2026-09-12 11:07:57 +07:00

vec.flan

Sweep every field label from the colon spelling to the dot

2026-09-12 14:47:54 +07:00

virtual-controls-headless.flan

Sweep every field label from the colon spelling to the dot

2026-09-12 14:47:54 +07:00

web-files.flan

One source, two outcomes: barf is refused on the web and says so

2026-09-12 11:41:24 +07:00