[joshlf]

The existing unsafe array impl relies on every element representation being
initialized and Rust arrays adding no padding between complete elements.
Give IntoBytes an inline initialization law over abstract bytes, then prove
the actual extracted generic array dictionary from its element's law.
Place invariant_proof on the existing unsafe_impl! invocation so the
generic proof is required independently of concrete callers. Check
primitive, empty, zero-sized, and nested array uses in Rust.

Keep physical decoding independent of optional library admission. Missing
byte semantics cannot establish the law. Provide explicit inhabited empty
decoders and width-indexed integer, character and nonzero/niche decoders,
with checked initialization laws and mathematical-admission bridges.
Uninhabited and external-state token controls prevent zero-byte storage
from fabricating construction permission. Invalid byte-to-value decoding
produces the forbidden outcome rejected by total and partial contracts.
The Rust Reference bridge remains an explicit premise; this does not prove
the pointer implementation of as_bytes.

Native const-identity mutations, independent required contracts, and
proofs against both model builds check the generic implementation.

Adapt metadata-indexed storage to the existing retained model providers.
Compose language decoding with mathematical admission while preserving
forbidden failure. Explicit Usize slice counts distinguish zero-sized
representations; kernel counterexamples reject wrong metadata and invalid
Boolean bytes even with a True postcondition.

Authored by an AI agent acting on joshlf's behalf.

---

• 　  Compose referent content laws at explicit metadata pairs #3895
• 　  Prove the native slice IntoBytes implementation #3894
• 　  Retain indexed storage in Rust model providers #3893
• 　  Compose byte decoders at explicit element metadata #3892
• 　  Bound pointer projections even for empty referents #3891
• 　  Prove referent validity implications for native trait impls #3890
• 　  Expose wrapper validity impls for independent verification #3889
• 　  Retain every type argument in native trait laws #3888
• 　  Model referent validity as byte-domain inclusion #3887
• 　  Prove a generic owned conversion against byte models #3884
• 　  Require realizable source representations for IntoBytes #3883
• 　  Require fresh ownership proofs before ignoring drops #3882
• 　  Prove conservative ownership checks for conditional drops #3881
• 　  Prove record construction against independent Rust references #3846
• 　  Prove selected cast plans preserve size without metadata overflow #3845
• 　  Prove CastPlan selection and unchecked metadata arithmetic #3844
• 　  Prove cast validation and exact-size metadata inference #3843
• 　  Prove allocation-size preparation and tail containment #3842
• 　  Prove CastUnsized's production layout acceptance gate #3841
• 　  Prove the numerical bounds used by split operations #3840
• 　  Prove advancement and padding-sequence decisions #3839
• 　  Prove DstLayout padding and field extension #3838
• 　  Prove unit and usize PointerMetadata operations #3837
• 　  Prove trailing sizes, padding and capacity including overflow #3836
• 　  Prove and consume the Unaligned alignment law #3862
• 　  Prove primitive DstLayout constructors #3835
• 　  Add an independent Rust reference for nested DST sizes #3834
• 　  Specify rounding encodings as alignment and phase #3833
• 　  Relate recursive record layout to normalized size formulas #3832
• 　  Prove normalized trailing-size and capacity formulas #3831
• 　  Reuse Aeneas rules for views and indexed loops #3830
• 　  Prove least padding and greatest aligned predecessors #3829
• 　  Test total and partial Aeneas contract semantics #3828
• 　  Verify Boolean and NonZeroUsize candidate predicates #3852
• 　  Verify the byte writers used by IntoBytes #3851
• 　  Prove FromZeros::new_zeroed through its enclosing trait law #3880
• 　  Prove FromBytes and FromZeros construction invariants #3879
• 　  Express Alignment::read's pointer guarantees as a tuple #3878
• 　  Prove wrapper and byteorder IntoBytes implementations #3872
• 　  Prove scalar and PhantomData IntoBytes implementations #3871
• 　  Prove concrete owned standard transmutation #3877
• 👉 Prove array IntoBytes initialization from element laws #3863
• 　  Check trait invariants on exact Aeneas dictionaries #3861
• 　  Prove U16 and U32 byte-order reads, writes and updates #3827
• 　  Prove guarded Boolean conversion and byte copying #3849
• 　  Reject unsupported execution effects before Aeneas lowering #3848
• 　  Check Rust specs against golden and live Aeneas models #3826
• 　  Separate cast plans from pointer reconstruction #3825
• 　  Move cast_from into layout/cast_from.rs #3824
• 　  Share Rust layout, storage and pointer models in anneal/lean #3823
• 　  Check reconstructed layouts against compiler layout queries #3860
• 　  Preserve Lake declarations and traces when vendoring #3875

Latest Update: v15 — Compare vs v14

📚 Full Patch History

Links show the diff between the row version and the column version.

Version	v14	v13	v12	v11	v10	v9	v8	v7	v6	v5	v4	v3	v2	v1	Base
v15	v14	v13	v12	v11	v10	v9	v8	v7	v6	v5	v4	v3	v2	v1	Base
v14		v13	v12	v11	v10	v9	v8	v7	v6	v5	v4	v3	v2	v1	Base
v13			v12	v11	v10	v9	v8	v7	v6	v5	v4	v3	v2	v1	Base
v12				v11	v10	v9	v8	v7	v6	v5	v4	v3	v2	v1	Base
v11					v10	v9	v8	v7	v6	v5	v4	v3	v2	v1	Base
v10						v9	v8	v7	v6	v5	v4	v3	v2	v1	Base
v9							v8	v7	v6	v5	v4	v3	v2	v1	Base
v8								v7	v6	v5	v4	v3	v2	v1	Base
v7									v6	v5	v4	v3	v2	v1	Base
v6										v5	v4	v3	v2	v1	Base
v5											v4	v3	v2	v1	Base
v4												v3	v2	v1	Base
v3													v2	v1	Base
v2														v1	Base
v1															Base

⬇️ Download this PR

Branch

git fetch origin refs/heads/G4s3r4gpuxvvnoxoizjjgoy3b2rwmgi7g && git checkout -b pr-G4s3r4gpuxvvnoxoizjjgoy3b2rwmgi7g FETCH_HEAD

Checkout

git fetch origin refs/heads/G4s3r4gpuxvvnoxoizjjgoy3b2rwmgi7g && git checkout FETCH_HEAD

Cherry Pick

git fetch origin refs/heads/G4s3r4gpuxvvnoxoizjjgoy3b2rwmgi7g && git cherry-pick FETCH_HEAD

Pull

git pull origin refs/heads/G4s3r4gpuxvvnoxoizjjgoy3b2rwmgi7g

Stacked PRs enabled by GHerrit.

[gemini-code-assist]

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-14T03:44:54.425740Z	c44c770	PR opened
🔒 Security Review	✅ Completed 2026-10-14T03:45:13.688126Z	c44c770	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.