- LOC: ~3,470
- Languages: Rust, Idris2, Zig
- Existing ABI proofs:
src/interface/abi/*.idr(template-level) - Dangerous patterns: None detected
- Octad recovery — data reconstruction from partial records
- Prove: recovery algorithm produces correct reconstructions when sufficient data is available
- Prove: recovery reports failure (not corrupt data) when data is insufficient
- Data ingestion and validation
- Prove: ingestion preserves data integrity (no silent corruption)
- Recovery manifest specification
- Prove: manifest accurately describes recoverable data state
- Rust ABI module — should be backed by Idris2 contracts
- Idris2 for recovery correctness invariants
MEDIUM — Data recovery tool where incorrect recovery is worse than no recovery. The "never return corrupt data" invariant is safety-critical and should be proven.
Template ABI removed -- was creating false impression of formal verification. The removed files (Types.idr, Layout.idr, Foreign.idr) contained only RSR template scaffolding with unresolved {{PROJECT}}/{{AUTHOR}} placeholders and no domain-specific proofs.