Gnosis Compiler Boundary
- Parent README: README.md
- Theorem ledger: THEOREM_LEDGER.md
- Shared compiler workspace: GnosisProofs.lean
This note is the canonical documentation surface for the current Betti-to-Lean compiler boundary in Chapter 17. It is the shortest path to the answer to four questions: what is already checked, what Betti can emit today, what still blocks the full measurable Harris package, and why that remaining gap matters.
Current Checked Surface
THM-GNOSIS-CONTINUOUS-DRIFT: the shared compiler workspace exposes a real-state measurable drift helper surface throughderive_gnosis_drift.THM-GNOSIS-CONTINUOUS-HARRIS: Betti can emit a bounded affine queue-family measurable continuous-Harris witness over the emittedqueueSupportKernel.THM-GNOSIS-GEOMETRY: the same emitted queue family can then be repackaged into the measurable/geometric queue endpoints.THM-GNOSIS-COUPLED: bounded inter-app handoff pressure can be re-read as downstream arrival pressure without changing the downstream spectral certificate when drift slack remains positive.THM-MOA-FABRIC-COUPLED: the shared compiler workspace now also exposes mirrored primary/shadow pair lemmas and paired downstream coupling lemmas for backend-diverse fabrics, but that theorem family is proof-only untilHeteroMoAFabriclowering starts emitting it.THM-AEON-FLUX-SITE-ADEQUACY: the in-tree Lean package now exposes the positive-stream-budget Aeon Flux site adequacy family, and theWallingtonRotationlowering path can synthesize the matchingpathCount/streamCount/Δβsite witness directly from lowered GG.
What Betti Emits
- Syntax can now supply
observable_kind,observable,observable_scale,observable_offset, anddrift_gap. - The current checked family is affine and queue-shaped:
0 < driftGap <= observableScale. - For that family, Betti emits:
*_measurable_observable*_measurable_observable_drift*_measurable_continuous_harris_certified
- Those theorems are backed by the shared Lean definitions
MeasurableContinuousHarrisWitness,natQueueAffineObservable,natQueueAffineExpectedObservable,natMeasurableLyapunovDriftWitness_of_queueStep_with_gap, andnatMeasurableContinuousHarrisWitness_of_queueStep_with_gap. - Betti does not yet emit the new Hetero MoA fabric theorem family. The logic-first surface exists today as local TLA/Lean artifacts plus shared
GnosisProofs.leanpair/coupling lemmas; lowering that surface from first-class GG syntax is still the next compiler step. - Outside the queue/Harris track, the compiler now also emits one narrow site witness family from syntax:
open-source/gnosis/src/aeon-flux-site-witness.tsre-reads loweredWallingtonRotationgraphs as Aeon Flux sites and classifies them against the in-tree adequacy theorems.
Rerun Surface
From companion-tests/:
bun run test:formal:gnosisDirectly in the shared compiler workspace:
cd ./open-source/gnosis
lake build GnosisProofsBoth commands rerun the shared compiler-side theorem workspace rather than the promoted lean/ package. This is the path that checks the emitted-kernel bounded affine continuousHarris witness package, the measurable/geometric queue endpoints, and the bounded inter-app tethering proofs.
Final Gap
- Betti does not yet synthesize the measurable small set
Cfrom arbitrary continuous.ggsyntax. - Betti does not yet synthesize minorization data from that syntax.
- Betti does not yet synthesize the continuous Lyapunov witness
V(x)for richer observable families beyond the current affine queue family. - Betti does not yet emit non-queue measurable kernels carrying the same Harris package.
- Betti does not yet lower
HeteroMoAFabricinto paired backend layers,gnodecannon/helix schedule metadata, or the paired/coupled theorem family now available in the shared proof workspace. - Betti does not yet synthesize Aeon Flux site witnesses for arbitrary GG syntax; the emitted site bridge is currently scoped to lowered
WallingtonRotationsurfaces. - This closure does not also close
THM-RECURSIVE-COARSENING-SYNTHESIS; recursive many-to-one quotient synthesis is a separate open compiler target.
Next Honest Boundary
- The next theorem shape is continuous syntactic physics: lower arbitrary continuous
.ggsource into a measurable kernel and synthesize the Harris witness package directly from the program. - On the finite transport side, the next honest boundary is broader site synthesis: lower arbitrary fork/race/fold GG subgraphs into Aeon Flux site witnesses instead of only the emitted
WallingtonRotationfamily. - In concrete terms, the bridge must emit
C,V(x), minorization data, and the stochastic-limit proof obligations instead of asking the human to hand-build those measure-theoretic witnesses. - The current bounded affine queue witness is therefore the first checked compiler surface, not the final one.
Why It Matters
- This is the point where the compiler stops being a queue-family certificate emitter and becomes a continuous-syntax physics oracle.
- A user should be able to write ordinary continuous-variable code, rely on the existing
VENT/service-slack/compiler-lowering structure, and receive machine-checkable thermodynamic and stochastic-limit theorems back out. - Until that happens, the formal surface honestly certifies one bounded affine queue family and its coupled extensions, but not arbitrary continuous syntax.
Practical Reading
- Read THEOREM_LEDGER.md for the theorem-indexed statement of the boundary.
- Read README.md for the full formal package and run surface.
- Read ../README.md and ../../ch17-external-reviewer-quickstart.md for the manuscript-facing rerun path.