---
title: "onto-model — Mova code model"
description: "Mova code model of onto/src/model.rs: components with their labels, obernants and the model text."
url: "https://groupants.elamur.ai/free/en/mova/onto/src/model.rs.groupant/"
---
Elamur: [Mova](https://md.mova.elamur.ai/free/en/) · [Dictionary](https://md.dictionary.elamur.ai/free/en/) · [Research](https://md.research.elamur.ai/free/en/) · **Groupants**

This page as HTML: <https://groupants.elamur.ai/free/en/mova/onto/src/model.rs.groupant/>

# onto-model

The groupant beside onto/src/model.rs in the Mova repository: what the code computes, what it never does, how to go back from its outputs, its invariants, cost and checks.

## Facts

- **kind:** groupant
- **status:** partial source bound model
- **source:** [`onto/src/model.rs`](https://github.com/ElamurAI/mova-free/blob/main/onto/src/model.rs)
- **source SHA-256:** `2a6d7c57582f7724…`
- **repository folder:** [`onto/src/model.rs.groupant`](https://github.com/ElamurAI/mova-free/tree/main/onto/src/model.rs.groupant)
- **repository commit:** `855da7bd4a7b`

> **Implementation material.** A Mova code model describes this code at one source revision: partial models, finite checks and their stated scope. It is not a reviewed general exposition, and its labels are shown as written, never raised.

## Components

| component | label | where |
|---|---|---|
| **approximant** | partial | [approximant](#approximant) |
| **ast** | partial | `syntax.json` |
| **composition** | partial | [composition](#composition) |
| **cost** | partial | [Cost](#cost) |
| **descriptant** | present | [descriptant](#descriptant) |
| **invariant** | partial | `model.md` |
| **tests** | executed bounded checks | [tests](#tests) |

## Obernants

The typed relations around the forward model: the behaviour complement (what the code never does), the reverse reconstruction (every input compatible with an output) and specialised views.

| id | type | label | where |
|---|---|---|---|
| `behavior_complement` | behavior_complement | partial source derived model | [behavior_complement](#behavior-complement) |
| `reverse_reconstruction` | reverse_reconstruction | partial source derived model | [reverse_reconstruction](#reverse-reconstruction) |
| `pos_quotient` | pos_quotient | partial source derived model | [pos_quotient](#pos-quotient) |
| `csr_units` | csr_units | partial source derived model | [csr_units](#csr-units) |
| `lookup_order` | lookup_order | partial source derived model | [lookup_order](#lookup-order) |
| `role_bits` | role_bits | partial source derived model | [role_bits](#role-bits) |

## Parts

- [onto-model-lookup](https://md.groupants.elamur.ai/free/en/mova/onto/src/model.rs.groupant/lookup.groupant/)

## Model text


### descriptant

#### onto-model

Public SoA/CSR graph accesses off[i]..off[i+1]; binary word search needs sorted dictionary; LU lookup uses two word partition points. find_synset returns first matching OEWN key/POS. Enum byte decoders return None outside table.

##### Epoch 2026-10-31

Prospective review preceded inline test edits. Tests used bounded synthetic CPU fixtures only. Offsets/dimensions/UTF8 boundaries and IDs assumed valid via external store::check; public mutation can violate them. Default graph has zero words/concepts; n_words saturating subtraction.

No production optimization, live teacher, corpus, assessment or database mutation. Registry presence denotes partial modeling; syntax is lexical and generated twice identically.

### approximant

#### Forward model: onto-model

Public SoA/CSR graph accesses off[i]..off[i+1]; binary word search needs sorted dictionary; LU lookup uses two word partition points. find_synset returns first matching OEWN key/POS. Enum byte decoders return None outside table.

##### Domain

Finite input arrays/text with resource availability and the source-specific bounds and representation assumptions in [invariant.md](https://md.groupants.elamur.ai/free/en/mova/onto/src/model.rs.groupant/#invariant). Exact categorical semantics; no executable percent surrogate is supplied. 1/2/5/10% caps need a meaningful metric and are not claimed.

##### Relations

word(w)=words[word_off[w]..word_off[w+1]]; out(c)=out[out_off[c]..out_off[c+1]], analogously in/members/senses. word_id(s)=binary_search_W(s). find_synset(s)=min{i:srcᵢ=Oewn∧keyᵢ=parse_key(s)∧posᵢ=parse_pos(s)}, if any.

### invariant

## Invariant and cost

Offsets/dimensions/UTF8 boundaries and IDs assumed valid via external store::check; public mutation can violate them. Default graph has zero words/concepts; n_words saturating subtraction.

### Cost

Slices O(1), word lookup O(log W) string comparisons, LU lookup O(log L), synset O(C); rendering allocates; no validation cost inside accessors.

No allocation, integer-overflow, malformed public-state or external-effect guarantee beyond explicitly described branches.

### composition

#### Composition

Builder constructs graph arrays, store validates/deserializes; Kb/query rely on sorted words/valid CSR. Core SynMap last duplicate differs from linear find first duplicate.

Child fragments specialize concrete byte scopes and share the parent syntax projection; they do not duplicate whole-file guarantees. No composition-wide approximation error budget is established.

### models

## Typed obernant catalog

Partial source-derived relations, not proofs. Complement excludes incompatible observations; reverse describes compatible antecedents.

### behavior_complement

Invalid enum byte cannot decode. word_id performs no case/plural normalization; malformed CSR may panic instead of Err.

### reverse_reconstruction

Lookup result constrains observed dictionary location only; unobserved arrays arbitrary. cid_str is not unique for duplicate keys; first matching Cid chosen.

### pos_quotient

Adj/Sat share word class symmetrically but distinct bytes/letters; Frame/Role lack from_wn input.

### csr_units

String offsets count UTF8 bytes; membership/senses/edges offsets count elements.

### lookup_order

word_id assumes lexical string order; lus_of requires nondecreasing Wid and returns all equal-word LUs.

### role_bits

Src::Role decodes bits1..2 as Core; bit0 independent FLAG_PLUS; all four combinations valid.

### tests

#### Evidence, 2026-10-31

Selected command: cargo test --offline --locked -p onto --bin onto -- --exact --test-threads=1 model::wave29::representation_and_lookup_boundaries

Named outcomes:

- model::wave29::representation_and_lookup_boundaries

Two debug and two release/optimized executions returned zero and identical sorted nonempty named outcomes. Source-generated syntax pairs matched byte-for-byte. 1 compiled source mutation rejected by named test, exact source restored and positive rerun succeeded.

- Control: "self.word(mid as Wid).cmp(s) -> s.cmp(self.word(mid as Wid))" → "model::wave29::representation_and_lookup_boundaries" (exit 101).

Finite synthetic examples only. Full ingestion, live workers, real corpus, allocation/I/O fault injection, GPU and full-school behavior remain unexecuted. No universal or executable-approximant assurance. External receipts: octopus-wave29-ontocore-2026-10-31 (native-commands.json, source-test-map.json, outcomes.json, controls.json and numeric exit/log files).