Skip to content

ci(kani): pin Kani 0.68.0 in every tier; record the accepted add_64/sub_64 gap (#169) - #220

Merged
avrabe merged 1 commit into
mainfrom
kani/pin-version-accept-64-169
Oct 1, 2026
Merged

avrabe merged 1 commit into
mainfrom
kani/pin-version-accept-64-169

Conversation

@avrabe

@avrabe avrabe commented Oct 1, 2026

Copy link
Copy Markdown
Contributor

Two changes for #169.

  1. Kani is pinned to 0.68.0 in every tier. The action defaulted to kani-version: latest, which looks up the newest Kani on crates.io before every run. That lookup failed in run 36821560393 and took down the wide-tier and_32 job in 19 s. This is the same unpinned-tool problem as Release supply chain: unpinned tools (cross at git HEAD), no macOS CI, caret dep on the trusted checker, wasm not published with a digest #189.
  2. The add_64/sub_64 gap is accepted and recorded (your decision). The org self-hosted rust-cpu runner was tried twice. Run 36813381641 timed out at 90 min, and run 36821560393 ran about 3 h until the runner itself dropped. Neither left a log. These two rules are proven at every width in Lean (BlasterArith.lean), and since Research: close the query→CNF gap — end-to-end verified encoder or a proven re-encoder beside the checker (structural fix for the #182 class) #192 phase 2 those proofs cover the code that actually runs. They are also tested exhaustively at width 8 and randomized at 32/64.

The self-hosted job branch is not merged and is being deleted. actionlint is clean, and kani_tiers.sh check passes.

🤖 Generated with Claude Code

https://claude.ai/code/session_01EBJ6kdJ16E3hnsBbq9Lwf1

…ub_64 gap (#169)

- kani-github-action used `kani-version: latest`, which queries crates.io.
  A failed lookup failed wide-tier and_32 in 19 s (run 36821560393: "Could
  not determine the latest Kani version"). Pinned to 0.68.0 in all three
  uses; this is the same unpinned-tool class as #189.
- add_64/sub_64 stay unscheduled. The self-hosted rust-cpu pool was tried:
  one run timed out at 90 min and the other ran about 3 h until the runner
  dropped, with no log either time. The maintainer accepted the gap. These
  rules are proven at every width in Lean (BlasterArith.lean), and since
  #192 phase 2 those proofs cover the code that runs. The tier script
  records the reason.

Implements: TR-046
Refs: #169

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EBJ6kdJ16E3hnsBbq9Lwf1
@avrabe
avrabe merged commit 20ed242 into main Oct 1, 2026
18 checks passed
@avrabe
avrabe deleted the kani/pin-version-accept-64-169 branch October 1, 2026 13:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant