---
title: "sources-cli-check — Mova code model"
description: "Mova code model of tools/sources/src/main.rs: components with their labels, obernants and the model text."
url: "https://groupants.elamur.ai/free/en/mova/tools/sources/src/main.rs.groupant/check.groupant/"
---
Elamur: [Mova](https://md.mova.elamur.ai/free/en/) · [Dictionary](https://md.dictionary.elamur.ai/free/en/) · [Research](https://md.research.elamur.ai/free/en/) · **Groupants**

This page as HTML: <https://groupants.elamur.ai/free/en/mova/tools/sources/src/main.rs.groupant/check.groupant/>

# sources-cli-check

The groupant beside tools/sources/src/main.rs in the Mova repository: what the code computes, what it never does, how to go back from its outputs, its invariants, cost and checks.

## Facts

- **kind:** groupant_fragment
- **status:** partial source bound model
- **source:** [`tools/sources/src/main.rs`](https://github.com/ElamurAI/mova-free/blob/main/tools/sources/src/main.rs)
- **source SHA-256:** `ab9078516428f79d…`
- **covers:** Metadata and optional size guard precede stream hash. Compare active MD5, then SHA1, then magic selected by lowercase extension. (bytes 11477–13280)
- **part of:** [sources-cli](https://md.groupants.elamur.ai/free/en/mova/tools/sources/src/main.rs.groupant/)
- **repository folder:** [`tools/sources/src/main.rs.groupant/check.groupant`](https://github.com/ElamurAI/mova-free/tree/main/tools/sources/src/main.rs.groupant/check.groupant)
- **repository commit:** `48f2e6f74146`

> **Implementation material.** A Mova code model describes this code at one source revision: partial models, finite checks and their stated scope. It is not a reviewed general exposition, and its labels are shown as written, never raised.

## Components

| component | label | where |
|---|---|---|
| **approximant** | partial | [approximant](#approximant) |
| **ast** | partial | `../syntax.json` |
| **cost** | symbolic source derived | [invariant-and-cost](#invariant-and-cost) |
| **descriptant** | present | [descriptant](#descriptant) |
| **invariant** | partial | [invariant-and-cost](#invariant-and-cost) |
| **tests** | bounded evidence and explicit gaps | [tests](#tests) |

## Obernants

The typed relations around the forward model: the behaviour complement (what the code never does), the reverse reconstruction (every input compatible with an output) and specialised views.

| id | type | label | where |
|---|---|---|---|
| `behavior_complement` | behavior_complement | partial source derived model | [behavior_complement](#behavior-complement) |
| `reverse_reconstruction` | reverse_reconstruction | partial source derived model | [reverse_reconstruction](#reverse-reconstruction) |
| `multipart_gate` | multipart_gate | partial source derived model | [multipart_gate](#multipart-gate) |
| `magic_partition` | magic_partition | partial source derived model | [magic_partition](#magic-partition) |
| `failure_order` | failure_order | partial source derived model | [failure_order](#failure-order) |
| `buffer_bound` | buffer_bound | partial source derived model | [buffer_bound](#buffer-bound) |

## Model text


### descriptant

#### sources-cli-check

Metadata and optional size guard precede stream hash. Compare active MD5, then SHA1, then magic selected by lowercase extension.

##### Epoch 2026-10-31

Prospective full-source read preceded edits. Model separates source-derived effects from bounded actual-helper evidence. Bibliography host identity old code admitted foreign authorities; a failing fixture motivated the narrow HTTP(S) exact-authority repair. Other production bytes were retained; added test modules are cfg(test). Topic run now uses the same canonical ID guard for JSONL admission; an old-code failing fixture confirms foreign matched entries remain only in abstract listings. Namespace compilation is representation evidence, not independent runtime coverage. Value workflow and bench transport remain unexecuted. No live data, network, model, DB or benchmark invocation was used.

### approximant

#### Forward model

Metadata and optional size guard precede stream hash. Compare active MD5, then SHA1, then magic selected by lowercase extension.

Domain and assumptions: Success means enabled checks passed on observed bytes; concurrent file changes not excluded. Multipart ETag skip is not integrity evidence.

This source-derived relation abstracts allocation, formatting and external failures; no executable percentage surrogate is asserted. Categorical decisions/effects have no supported error metric yet. Future budget caps are 1%, 2%, 5%, 10% only.

### catalog

## Typed model catalog

Subject: exact manifest source SHA-256 and optional byte scope. Domain/assumptions: forward and invariant companion. Observation is one completed helper transition or the stated IO prefix; external interference is excluded for finite fixtures. All models are partial source-derived specifications; the complement is an inner set of excluded behaviors, the reverse a compatible-antecedent relation. Evidence: tests.md; unsampled branches are not proven.

### behavior_complement

Wrong known size excludes hash stage; MD5 failure excludes later SHA1/magic success. Checked file is not mutated.

Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.

### reverse_reconstruction

Success admits all files satisfying enabled size/digest/prefix constraints; absent constraints enlarge compatible fiber, not unique download.

Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.

### multipart_gate

Empty MD5 or any hyphen disables only MD5 comparison, not SHA1.

Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.

### magic_partition

pdf,djvu,zip,gz/tgz,bz2,xz,zst have fixed prefixes; others have empty requirement.

Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.

### failure_order

metadata/read errors precede content comparison; MD5 precedes SHA1 precedes signature.

Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.

### buffer_bound

Reads at most 1<<20 per chunk; first-head append happens only while head length<16, at most 16 bytes per append.

Operator and approximation: the stated constraint on the source transition, with all unmentioned state held fixed; not a total solver or uniqueness claim. Falsifiable oracle: compare actual helper outputs/effect order on a bounded input satisfying the domain. Current executed subset and unsupported observations are listed in tests.md.

### tests

#### Checks and limits

Exact target-qualified native names for this source family:

- tests::names_and_hosts
- path_tests::disambiguated_names
- script_tests::script_names
- wave33_tests::bibliography_row_load_plan_check_join
- wave33_tests::check_size_then_digest_then_magic
- wave33_tests::merge_subset_and_first_partial_owner

Run each selected exact name twice debug and twice release, one test thread, offline/locked dependencies. External wave33 sources receipts contain numeric statuses/raw logs and sorted outcome comparisons. Scoped children inherit only relevant evidence: parse/IDs directly exercised; admission/check/merge actual helpers exercised; subprocess actual helper exercised. bench_transport has source-derived evidence only, never an executed benchmark. Library namespace is compile/representation evidence.

Compiled source controls change bibliography license threshold, sources size guard and value status guard; targeted assertions must reject, then exact backup restoration and positive rerun. Finite controls are not comprehensive fault coverage. See evidence.md at source root for receipts summary.

### invariant-and-cost

#### Invariants and costs

Success means enabled checks passed on observed bytes; concurrent file changes not excluded. Multipart ETag skip is not integrity evidence.

O(file bytes) with 1 MiB buffer, small head and digest states; early errors cheaper.

Bounds are symbolic, conditional on stated domain and successful allocation. No unmeasured speedup or universal finite-test guarantee.