---
title: "onto-corevmm — Mova code model"
description: "Mova code model of onto/src/corevmm.rs: components with their labels, obernants and the model text."
url: "https://groupants.elamur.ai/free/en/mova/onto/src/corevmm.rs.groupant/"
---
Elamur: [Mova](https://md.mova.elamur.ai/free/en/) · [Dictionary](https://md.dictionary.elamur.ai/free/en/) · [Research](https://md.research.elamur.ai/free/en/) · **Groupants**

This page as HTML: <https://groupants.elamur.ai/free/en/mova/onto/src/corevmm.rs.groupant/>

# onto-corevmm

The groupant beside onto/src/corevmm.rs in the Mova repository: what the code computes, what it never does, how to go back from its outputs, its invariants, cost and checks.

## Facts

- **kind:** groupant
- **status:** partial source bound model
- **source:** [`onto/src/corevmm.rs`](https://github.com/ElamurAI/mova-free/blob/main/onto/src/corevmm.rs)
- **source SHA-256:** `d7523b9db18a7a06…`
- **repository folder:** [`onto/src/corevmm.rs.groupant`](https://github.com/ElamurAI/mova-free/tree/main/onto/src/corevmm.rs.groupant)
- **repository commit:** `48f2e6f74146`

> **Implementation material.** A Mova code model describes this code at one source revision: partial models, finite checks and their stated scope. It is not a reviewed general exposition, and its labels are shown as written, never raised.

## Components

| component | label | where |
|---|---|---|
| **approximant** | partial | [approximant](#approximant) |
| **ast** | partial | `syntax.json` |
| **composition** | partial | [composition](#composition) |
| **cost** | partial | [Cost](#cost) |
| **descriptant** | present | [descriptant](#descriptant) |
| **invariant** | partial | `model.md` |
| **tests** | executed bounded checks | [tests](#tests) |

## Obernants

The typed relations around the forward model: the behaviour complement (what the code never does), the reverse reconstruction (every input compatible with an output) and specialised views.

| id | type | label | where |
|---|---|---|---|
| `behavior_complement` | behavior_complement | partial source derived model | [behavior_complement](#behavior-complement) |
| `reverse_reconstruction` | reverse_reconstruction | partial source derived model | [reverse_reconstruction](#reverse-reconstruction) |
| `risk_slot` | risk_slot | partial source derived model | [risk_slot](#risk-slot) |
| `threshold_order` | threshold_order | partial source derived model | [threshold_order](#threshold-order) |
| `verdict_overwrite` | verdict_overwrite | partial source derived model | [verdict_overwrite](#verdict-overwrite) |
| `effect_boundary` | effect_boundary | partial source derived model | [effect_boundary](#effect-boundary) |

## Parts

- [onto-corevmm-risks](https://md.groupants.elamur.ai/free/en/mova/onto/src/corevmm.rs.groupant/risks.groupant/)

## Model text


### descriptant

#### onto-corevmm

Candidates require >=13 columns; sorted wd-confirm files last matching five-string key wins. pick accepts allowed properties, unseen keys, confidence>=0.45, dedups first key, sorts contested<0.8 first then lemma/property. Risk parser initializes valid-ID slot before act/harm/p validation. Live wrappers call teacher and append workers.

##### Epoch 2026-10-31

Prospective review preceded inline test edits. Tests used bounded synthetic CPU fixtures only. Accepted risk p in[0,1], enums valid; NaN rejected. Some(empty) also means malformed valid-ID answer. Threads clamped1..2; append lock does not ensure deterministic completion order; write errors discarded.

No production optimization, live teacher, corpus, assessment or database mutation. Registry presence denotes partial modeling; syntax is lexical and generated twice identically.

### approximant

#### Forward model: onto-corevmm

Candidates require >=13 columns; sorted wd-confirm files last matching five-string key wins. pick accepts allowed properties, unseen keys, confidence>=0.45, dedups first key, sorts contested<0.8 first then lemma/property. Risk parser initializes valid-ID slot before act/harm/p validation. Live wrappers call teacher and append workers.

##### Domain

Finite input arrays/text with resource availability and the source-specific bounds and representation assumptions in [invariant.md](https://md.groupants.elamur.ai/free/en/mova/onto/src/corevmm.rs.groupant/#invariant). Exact categorical semantics; no executable percent surrogate is supplied. 1/2/5/10% caps need a meaningful metric and are not claimed.

##### Relations

Eligible(r)=prop∈VMM_PROPS∧key(r)∉seen∧parse(conf)≥0.45. pick=stable_sort(stable_unique_key(filter Eligible),(conf≥0.8,lemma,prop)). Risk slots initially None; valid ID/width maps None→Some([]), then valid action/harm/p appends, never clears.

### invariant

## Invariant and cost

Accepted risk p in[0,1], enums valid; NaN rejected. Some(empty) also means malformed valid-ID answer. Threads clamped1..2; append lock does not ensure deterministic completion order; write errors discarded.

### Cost

O(B+N log N) candidate selection; O(B+n+risks) response parsing. Live latency/cost external and unmeasured. Memory retains rows and prompts.

No allocation, integer-overflow, malformed public-state or external-effect guarantee beyond explicitly described branches.

### composition

#### Composition

wdvmm response transport supplies strings parsed here; pick and verdict key feed coresel. Live ask, append failure and worker races are explicit gaps.

Child fragments specialize concrete byte scopes and share the parent syntax projection; they do not duplicate whole-file guarantees. No composition-wide approximation error budget is established.

### models

## Typed obernant catalog

Partial source-derived relations, not proofs. Complement excludes incompatible observations; reverse describes compatible antecedents.

### behavior_complement

pick excludes NaN/low and seen keys including no answer. Risk parser excludes NaN/out-of-range but does not enforce prompt cap3 or minimum0.001.

### reverse_reconstruction

Same parsed risks admit invalid ignored rows and case/whitespace variants. Some(empty) cannot reconstruct none versus malformed; dropped duplicate candidate keys unrecoverable.

### risk_slot

None means no valid-ID row with>=2 columns; Some([]) at least one such row. Later none never erases prior risks.

### threshold_order

Exactly0.45 accepted; exactly0.8 confident partition; same lemma/property ties stable, not confidence sorted.

### verdict_overwrite

Sorted paths then input lines, last key wins; directory-entry errors skipped.

### effect_boundary

risks truncates output header before worker calls; in-flight workers may complete after error. write_all errors ignored; no live execution.

### tests

#### Evidence, 2026-10-31

Selected command: cargo test --offline --locked -p onto --bin onto -- --exact --test-threads=1 corevmm::wave29::candidate_threshold_order_and_dedup corevmm::wave29::risk_slot_is_distinct_from_valid_risk corevmm::t::parse_risk_answer

Named outcomes:

- corevmm::wave29::candidate_threshold_order_and_dedup
- corevmm::wave29::risk_slot_is_distinct_from_valid_risk
- corevmm::t::parse_risk_answer

Two debug and two release/optimized executions returned zero and identical sorted nonempty named outcomes. Source-generated syntax pairs matched byte-for-byte. 1 compiled source mutation rejected by named test, exact source restored and positive rerun succeeded.

- Control: "(0.0..=1.0).contains(&p) -> (0.0..=0.9).contains(&p)" → "corevmm::wave29::risk_slot_is_distinct_from_valid_risk" (exit 101).

Finite synthetic examples only. Full ingestion, live workers, real corpus, allocation/I/O fault injection, GPU and full-school behavior remain unexecuted. No universal or executable-approximant assurance. External receipts: octopus-wave29-ontocore-2026-10-31 (native-commands.json, source-test-map.json, outcomes.json, controls.json and numeric exit/log files).