swaitsandClaude Opus 5.5
d7fa16e974
check / check (push) Canceled after 0s
refuse hand entries (P4b S1, part A) Plan P4b (D-45), slice S1, the engine half: rules.md B-38. - ledger-core: every receivables or payables line carries its document (Ledger.line_docs: DocRef, Movement, DocTag), written by the document commands in the step that posts it, derived on replay from the existing document events (the role's account as it stood then; payments by the ordinal rule), copied onto a reversal's mirror. Ledger::stands_on; doc_state / invoice_state / bill_state (total, paid, outstanding, status Open/Partial/Paid/WrittenOff/Void, overdue days) as of any day; ar_aging / ap_aging read them, so reversed payments and voids are right. The control guard (add_line, add_line_fx, post_entry, register_recurring) refuses untagged lines on receivables/payables, exempting a reversal's mirror of a legacy line; replay never refuses. Bounds (kernel::running_bounds, bounds_kept) on payments and reversals; a document reversal never dated before its entry; deposit/payer accounts must be cash-like and hold no role. New API: receive_payment_with / pay_bill_with (PaymentDetails: instrument, reference), void_document / check_void_document, control_check, payments_recorded, standing_payments, replay_reverse_entry. Invoice.amount_paid/status remain only as derived caches for the MCP layer until part B. cashflow bill_splits reads payments from the tags. - ledger-store: journal feature document_standing (D-39 gated) for a payment accepted only because an earlier one was reversed; receive_payment_with / pay_bill_with (instrument journaled as entry.instrument_set, reference in the description), void_document; replay uses replay_reverse_entry; schema 15 drops the projection's amount_paid/status. Fixture p4-arap-before + golden figures written by the version before S1, adjudicated in arap_standing.rs. - ledger-gui: party card, cash "coming up" and company owed totals read doc_state as of today (late from the derived state). - Lean Documents.lean (control_agrees and friends); Kani bounds_check_matches_definition, bounds_kept_is_the_definition_on_books_in_bounds; rules B-38, B-18/B-23 amended; bookspec `older = true` for legacy hand lines; tests that hand-post to 1200/2000 post as replay or renumbered. Review fixes (both reviews of part A): - control_role_of guards only an account the role is assigned to or one holding its documents' lines (a chart's own 1200 Equipment or card at 2000 is free until a document posts there); payment accounts check other roles by holds_role (type-checked). The MCP tests that failed on the guard (oracle_mcp, spec_projects) pass unchanged. - standing_payments leaves out reversals (sorted, deduped); replayed tags match the movement's side; payments_recorded counts every payment event (tagged or not, Ledger.payment_events) and refuses overflow. - The record caches settled (paid + discounted + written off) and owed (Invoice/Bill.owed, never serialized): a void never reads as paid. - assign_role: receivables/payables refuse moving onto an account with untagged lines (RoleAccountHasHandLines) and, on their control account holding a balance, say DocumentRoleHoldsBalance (no hand entry named); B-23 reworded. The reversal-mirror exemption only takes a hand line off (even chain depth); putting it back is refused. - DocStatus Overpaid and Unattached; aging leaves out credit balances; ControlCheck.attention lists out-of-bounds and unattached documents. - stands_on counts a chain in order; indexes (doc_index, doc_accounts, order_pos, reversed_by) keep the derived figures linear. - Viewer reads a post-dated document as of its own date; one state per row. bounds_kept's side-crossing documented as intended. - Tests: ten new spec_documents scenarios, stronger proptests, store proptest arap_props (live = replay = snapshot at every date, closed months), fuzz ops void/payments with details, a GUI post-dated test; Lean Step.assign / Step.release with unattached_zero kept; model limits stated in docs/testing.md and B-38. Review fixes (CPA and engineering lenses): only an assigned role's account or one holding document lines is a control account (a chart's own 1200 asset stays free); a role can't move onto untagged lines or off document lines (Lean Step.assign); a void's cache never reads as paid; no Decimal sum panics; per-document indexes keep figures linear; a replayed tag matches its side; the feature gate counts payment events; a payment's reversal is never listed as standing; an overpaid document has its own status; the viewer keeps post-dated documents. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01T3gXMVt7XJPi6ens1or9Dj
99 lines
3.5 KiB
Lean4
99 lines
3.5 KiB
Lean4
import Wanderbooks
|
|
|
|
/-! `just prove` runs this file: each headline theorem's axioms are printed,
|
|
and must be only Lean's standard three (`propext`, `Quot.sound`,
|
|
`Classical.choice`) or fewer. No `sorryAx`, nothing assumed. -/
|
|
|
|
open Wanderbooks
|
|
|
|
#print axioms Accepted.net_zero
|
|
#print axioms sum_movements
|
|
#print axioms movement_with_reversal
|
|
#print axioms accepted_reversal_iff
|
|
#print axioms accounting_equation
|
|
#print axioms balance_after_line
|
|
#print axioms trial_balance_iff
|
|
#print axioms closingEntry_net
|
|
#print axioms closingEntry_zeroes
|
|
#print axioms closingEntry_accepted
|
|
#print axioms net_closings_is_net_income
|
|
#print axioms plugLast_total
|
|
#print axioms plugLast_keeps
|
|
#print axioms runPart_telescopes
|
|
#print axioms closePart_total
|
|
#print axioms trueUp_total
|
|
#print axioms trueUp_running
|
|
#print axioms closePart_eq_trueUp
|
|
#print axioms cumulative_drift
|
|
#print axioms statement_after_close
|
|
#print axioms statement_unmoved_by_close
|
|
#print axioms Reachable.inv
|
|
#print axioms Reachable.books_net_zero
|
|
#print axioms Reachable.trial_balance
|
|
#print axioms Reachable.trial_balance_through
|
|
#print axioms Reachable.accounting_equation
|
|
#print axioms Reachable.accounting_equation_through
|
|
#print axioms Steps.extends
|
|
#print axioms Steps.frozen
|
|
#print axioms close_zeroes
|
|
#print axioms close_credits_net_income
|
|
#print axioms statements_add_up
|
|
#print axioms Apportion.ranks_perm
|
|
#print axioms Apportion.apportion_sum
|
|
#print axioms Apportion.apportion_sum_of_shortfall
|
|
#print axioms Apportion.rem_pos_of_rank_lt
|
|
#print axioms Apportion.apportion_drift
|
|
#print axioms Apportion.allocW_sum
|
|
#print axioms Apportion.allocW_drift
|
|
#print axioms Apportion.allocW_cumulative_drift
|
|
#print axioms Apportion.allocW_cumulative_total
|
|
#print axioms Step.record_changes_no_figure
|
|
#print axioms Reachable.records
|
|
#print axioms net_splits_by_flow
|
|
#print axioms applyCash_conserves
|
|
#print axioms applyCash_exhausts
|
|
#print axioms applyCash_neg
|
|
#print axioms entry_flows_sum
|
|
#print axioms flows_reversal
|
|
#print axioms constructive_nets
|
|
#print axioms constructive_neg
|
|
#print axioms constructive_sections_net
|
|
#print axioms stmt_flows_sum
|
|
#print axioms stmt_flows_reversal
|
|
#print axioms cashflow_sections_sum_to_cash_change
|
|
#print axioms secNet_cash_is_movement
|
|
#print axioms operating_reconciliation_ties
|
|
#print axioms operating_reconciliation_ties_all
|
|
#print axioms cashflow_reversal_nets
|
|
#print axioms Reachable.cashflow_foots
|
|
#print axioms Reachable.cashflow_is_change_in_cash
|
|
#print axioms reverseTarget_involutive
|
|
#print axioms capitalTarget_odd
|
|
#print axioms partyTarget_odd
|
|
#print axioms sumOver_movement_reversal
|
|
#print axioms Prorate.cum_mono
|
|
#print axioms Prorate.cum_le
|
|
#print axioms Prorate.cum_full
|
|
#print axioms Prorate.parts_telescope
|
|
#print axioms Prorate.prorate_total
|
|
#print axioms Prorate.prorate_nonneg
|
|
#print axioms Prorate.part_within_a_unit
|
|
#print axioms Prorate.roundUnit_near
|
|
#print axioms Prorate.roundUnit_scale
|
|
#print axioms Prorate.cum_near
|
|
#print axioms Prorate.cum_dvd
|
|
#print axioms Prorate.part_near
|
|
#print axioms Prorate.chargeMid_eq_cum
|
|
#print axioms Prorate.chargeLast_eq_cum
|
|
#print axioms Prorate.chargeLast_start
|
|
#print axioms Prorate.chargeLast_mono
|
|
#print axioms Prorate.kernel_parts_total
|
|
#print axioms Prorate.kernel_parts_nonneg
|
|
#print axioms Documents.control_agrees
|
|
#print axioms Documents.control_agrees_through
|
|
#print axioms Documents.Step.document_unattached
|
|
#print axioms Documents.Step.reverse_moves
|
|
#print axioms Documents.reverse_twice
|
|
#print axioms Documents.Reachable.unattached_zero
|
|
#print axioms Documents.Reachable.control_is_documents
|