---
title: "onto-corevmm-risks — Mova code model"
description: "Mova code model of onto/src/corevmm.rs: components with their labels, obernants and the model text."
url: "https://groupants.elamur.ai/free/en/mova/onto/src/corevmm.rs.groupant/risks.groupant/"
---
Elamur: [Mova](https://md.mova.elamur.ai/free/en/) · [Dictionary](https://md.dictionary.elamur.ai/free/en/) · [Research](https://md.research.elamur.ai/free/en/) · **Groupants**

This page as HTML: <https://groupants.elamur.ai/free/en/mova/onto/src/corevmm.rs.groupant/risks.groupant/>

# onto-corevmm-risks

The groupant beside onto/src/corevmm.rs in the Mova repository: what the code computes, what it never does, how to go back from its outputs, its invariants, cost and checks.

## Facts

- **kind:** groupant_fragment
- **status:** partial source bound model
- **source:** [`onto/src/corevmm.rs`](https://github.com/ElamurAI/mova-free/blob/main/onto/src/corevmm.rs)
- **source SHA-256:** `d7523b9db18a7a06…`
- **covers:** Allocate n None; valid one-based ID with>=2 fields creates Some(empty); none leaves slot; valid lowercase act/harm and f64 range append tuple. (bytes 6860–7861)
- **part of:** [onto-corevmm](https://md.groupants.elamur.ai/free/en/mova/onto/src/corevmm.rs.groupant/)
- **repository folder:** [`onto/src/corevmm.rs.groupant/risks.groupant`](https://github.com/ElamurAI/mova-free/tree/main/onto/src/corevmm.rs.groupant/risks.groupant)
- **repository commit:** `855da7bd4a7b`

> **Implementation material.** A Mova code model describes this code at one source revision: partial models, finite checks and their stated scope. It is not a reviewed general exposition, and its labels are shown as written, never raised.

## Components

| component | label | where |
|---|---|---|
| **approximant** | partial | [approximant](#approximant) |
| **ast** | partial | `../syntax.json` |
| **composition** | partial | [composition](#composition) |
| **cost** | partial | [Cost](#cost) |
| **descriptant** | present | [descriptant](#descriptant) |
| **invariant** | partial | `model.md` |
| **tests** | executed bounded checks | [tests](#tests) |

## Obernants

The typed relations around the forward model: the behaviour complement (what the code never does), the reverse reconstruction (every input compatible with an output) and specialised views.

| id | type | label | where |
|---|---|---|---|
| `behavior_complement` | behavior_complement | partial source derived model | [behavior_complement](#behavior-complement) |
| `reverse_reconstruction` | reverse_reconstruction | partial source derived model | [reverse_reconstruction](#reverse-reconstruction) |
| `coordinates` | coordinates | partial source derived model | [coordinates](#coordinates) |
| `float_gate` | float_gate | partial source derived model | [float_gate](#float-gate) |
| `none_monotonicity` | none_monotonicity | partial source derived model | [none_monotonicity](#none-monotonicity) |
| `prompt_gap` | prompt_gap | partial source derived model | [prompt_gap](#prompt-gap) |

## Model text


### descriptant

#### onto-corevmm-risks

Allocate n None; valid one-based ID with>=2 fields creates Some(empty); none leaves slot; valid lowercase act/harm and f64 range append tuple.

##### Epoch 2026-10-31

Prospective review preceded inline test edits. Tests used bounded synthetic CPU fixtures only. Scope bytes [6860,7861) in the parent source. No accepted p outside[0,1]; bad valid-ID row may still create empty slot.

No production optimization, live teacher, corpus, assessment or database mutation. Registry presence denotes partial modeling; syntax is lexical and generated twice identically.

### approximant

#### Forward model: onto-corevmm-risks

Allocate n None; valid one-based ID with>=2 fields creates Some(empty); none leaves slot; valid lowercase act/harm and f64 range append tuple.

##### Domain

Finite input arrays/text with resource availability and the source-specific bounds and representation assumptions in [invariant.md](https://md.groupants.elamur.ai/free/en/mova/onto/src/corevmm.rs.groupant/risks.groupant/#invariant). Exact categorical semantics; no executable percent surrogate is supplied. 1/2/5/10% caps need a meaningful metric and are not claimed.

##### Relations

For i∈1..n, v[i-1] initially None. On row with valid i and width≥2: v[i-1]:=Some(v[i-1].unwrap_or([])); if act∈ACTS∧harm∈HARMS∧p∈[0,1], append tuple. NaN∉[0,1]. none leaves accumulated list unchanged.

### invariant

## Invariant and cost

Scope bytes [6860,7861) in the parent source. No accepted p outside[0,1]; bad valid-ID row may still create empty slot.

### Cost

Linear traversed scope input/returned bytes except lookup logarithmic comparisons; allocations follow actual result buffers. Parent whole-pipeline cost is not assigned to this fragment.

No allocation, integer-overflow, malformed public-state or external-effect guarantee beyond explicitly described branches.

### composition

#### Composition

Scope output feeds its parent: wdvmm response transport supplies strings parsed here; pick and verdict key feed coresel. Live ask, append failure and worker races are explicit gaps.

Child fragments specialize concrete byte scopes and share the parent syntax projection; they do not duplicate whole-file guarantees. No composition-wide approximation error budget is established.

### models

## Typed obernant catalog

Partial source-derived relations, not proofs. Complement excludes incompatible observations; reverse describes compatible antecedents.

### behavior_complement

No accepted p outside[0,1]; bad valid-ID row may still create empty slot.

### reverse_reconstruction

Some([]) admits none, bad act,NaN; None admits no row or invalid ID; accepted order preserved.

### coordinates

1..=n maps to i-1; n0 accepts no row.

### float_gate

NaN/infinity rejected,0 and1 accepted.

### none_monotonicity

none does not clear earlier appended tuples.

### prompt_gap

Parser has no three-risk maximum or0.001 floor.

### tests

#### Evidence, 2026-10-31

Selected command: cargo test --offline --locked -p onto --bin onto -- --exact --test-threads=1 corevmm::wave29::candidate_threshold_order_and_dedup corevmm::wave29::risk_slot_is_distinct_from_valid_risk corevmm::t::parse_risk_answer

Named outcomes:

- corevmm::wave29::candidate_threshold_order_and_dedup
- corevmm::wave29::risk_slot_is_distinct_from_valid_risk
- corevmm::t::parse_risk_answer

Two debug and two release/optimized executions returned zero and identical sorted nonempty named outcomes. Source-generated syntax pairs matched byte-for-byte. 1 compiled source mutation rejected by named test, exact source restored and positive rerun succeeded.

- Control: "(0.0..=1.0).contains(&p) -> (0.0..=0.9).contains(&p)" → "corevmm::wave29::risk_slot_is_distinct_from_valid_risk" (exit 101).

Finite synthetic examples only. Full ingestion, live workers, real corpus, allocation/I/O fault injection, GPU and full-school behavior remain unexecuted. No universal or executable-approximant assurance. External receipts: octopus-wave29-ontocore-2026-10-31 (native-commands.json, source-test-map.json, outcomes.json, controls.json and numeric exit/log files).