Model card: restore full README from GitHub, add commercial license option

22d7282 verified 20 days ago

6.84 kB

---
license: other
license_name: proprietary-source-visible
license_link: https://huggingface.co/Snapkitty/unlambda-idris-spark/blob/main/LICENSE
tags:
- snapkitty
- october-2026-drop
- unlambda
- idris
- ats
- ada
- spark
- lambda-calculus
- formal-verification
---
> Mirrored from [https://github.com/SNAPKITTYWEST/unlambda-idris-spark](https://github.com/SNAPKITTYWEST/unlambda-idris-spark) at commit `a42eccc`. Part of the **SnapKitty October 2026 main drop**.

<!--
Copyright (c) 2026 Ahmad Ali Parr. All rights reserved.
SPDX-License-Identifier: LicenseRef-Proprietary
Public source visibility does not grant an open-source license. See LICENSE.
-->

# Unlambda + ATS + Idris 2 + SPARK

**Handwritten lambda-calculus derivations, checked proof terms, and explicit verification boundaries.**

[![Idris CI](https://github.com/AHMADALIPARR/unlambda-idris-spark/actions/workflows/idris-proofs.yml/badge.svg?branch=main)](https://github.com/AHMADALIPARR/unlambda-idris-spark/actions/workflows/idris-proofs.yml)
[![ATS and SPARK CI](https://github.com/AHMADALIPARR/unlambda-idris-spark/actions/workflows/ats-spark.yml/badge.svg?branch=main)](https://github.com/AHMADALIPARR/unlambda-idris-spark/actions/workflows/ats-spark.yml)
[![Version](https://img.shields.io/badge/release-v1.0.0-2563eb)](https://github.com/AHMADALIPARR/unlambda-idris-spark/releases/tag/v1.0.0)
[![Counter proof](https://img.shields.io/badge/SPARK_counter_snapshot-6%2F6_proved-15803d)](docs/verification/ats-spark-af40c4e.md)
[![Security](https://img.shields.io/badge/security-report_privately-475569)](SECURITY.md)
[![Commercial licensing](https://img.shields.io/badge/commercial-licensing_inquiries-7c3aed)](COMMERCIAL-LICENSING.md)
[![License: proprietary](https://img.shields.io/badge/license-proprietary_source_visible-334155)](LICENSE)
[![Donate](https://img.shields.io/badge/donate-details_pending-d97706)](SUPPORT.md)

![Conceptual proof workbench with a lambda-calculus notebook and translucent geometric objects](docs/assets/proof-workbench.png)

v1.0.0 packages a verification scaffold for a combined Unlambda/ATS/Idris/SPARK
architecture. It includes compiler-checked ATS interfaces, handwritten SKI
derivations formalized in Idris 2, and a SPARK-proved bounded allocation counter.
The full ATS interpreter, generational heap, and cross-language correspondence
are future work. This release makes the existing evidence easy to reproduce.

## What is checked

| Layer | Current result | Boundary |
| --- | --- | --- |
| ATS/Postiats 0.4.2 | Both `.sats` interfaces typecheck | Runtime implementations and adapter are pending |
| Idris 2 0.8.0 | SKI proof terms and fuel model typecheck | SKI witnesses cover symbolic free atoms; control model is a stub |
| GNAT/Ada | Heap compiles and passes capacity/exhaustion/reset tests | Heap counts allocations; it does not yet store nodes |
| SPARK/GNATprove | Six checks discharged, zero unproved | Current allocation-counter contracts only |
| Combined CI | `verify.sh` passes with all toolchains | Full runtime certification remains open |

The counter badge links a recorded source snapshot. CI badges show the current
branch. [Verification evidence](docs/verification/ats-spark-af40c4e.md) records
the source hashes, versions, proof results, and limitations.

## How the workflow fits together

```mermaid
flowchart TD
    Spec["Unlambda semantics and invariants"] --> Hand["Handwritten SKI beta derivations"]
    Hand --> Idris["Idris proof terms and control model"]
    Spec --> ATS["Typed ATS interfaces"]
    Spec --> Ada["Ada allocation-counter contracts"]
    Idris --> IC["Idris typecheck, build, smoke test"]
    ATS --> AC["ATS interface typecheck"]
    Ada --> SC["Ada tests and SPARK proof checks"]
    IC --> Evidence["Source-pinned verification evidence"]
    AC --> Evidence
    SC --> Evidence
    Evidence --> Combined["Combined verify.sh validation"]
    Combined --> Release["v1 verification-scaffold release"]
    Evidence -. "future work" .-> Runtime["ATS runtime, slot-map heap, correspondence"]
```

SPARK verifies the Ada contracts; Idris checks its own proof terms. Agreement
between an ATS runtime, Ada implementation, and Idris semantics will require a
checked adapter and a separate simulation/correspondence argument. See the
[full workflow](docs/WORKFLOW.md) and [delivery backlog](docs/DELIVERY.md).

## Reproduce the checks

Use Linux x86-64 with Bash, GNU grep, ATS/Postiats, Idris 2, GNAT, GPRbuild, and
GNATprove installed. [Toolchain versions and setup](docs/WORKFLOW.md#toolchain-setup)
match the CI configuration.

```sh
gh repo clone AHMADALIPARR/unlambda-idris-spark
cd unlambda-idris-spark
bash verify.sh
```

The repository is public and source-visible; it is proprietary, not open source. A passing run checks the
ATS declarations, typechecks and compiles the Idris model, runs the Ada tests,
and requires GNATprove to discharge the heap checks. The success message names
that component scope explicitly.

## Repository map

| Path | Purpose |
| --- | --- |
| `ats/` | Typed heap and machine interfaces |
| `idris/LambdaProofs.idr` | Explicit beta-reduction witnesses and substitution cases |
| `idris/Main.idr` | Fuel/control model and resource-status proof terms |
| `ada/` | Bounded allocation counter, contracts, assertion-enabled test driver |
| `spec/` | Semantics, invariants, handwritten derivations |
| `docs/verification/` | Recorded compiler and prover evidence |
| `docs/source-sketches/` | Original supplied shorthand interfaces |
| `.github/workflows/` | Idris and ATS/SPARK/combined validation jobs |

## Contribute, report, and support

- [Contributing](CONTRIBUTING.md): meaningful changes, proof obligations, and review criteria.
- [Security](SECURITY.md): private reporting and supported scope.
- [Licensing](LICENSING.md): current licensing status and provenance boundaries.
- [Commercial licensing](COMMERCIAL-LICENSING.md): inquiries and required agreement details.
- [Support and donations](SUPPORT.md): ways to help; payment destination is awaiting confirmation.
- [v1.0.0 release notes](docs/releases/v1.0.0.md) and [changelog](CHANGELOG.md).

The cover and supporting photographs are AI-generated conceptual illustrations,
not proof evidence or screenshots of an implemented interpreter. Image provenance
and the exact generation prompts are in [the asset notes](docs/assets/README.md).

---

### 💼 Commercial License

This repository is published under **a proprietary source-visible license**. Building a commercial product or service? A **proprietary commercial license** from Snapkitty Collective LLC lets you ship this code on terms other than a proprietary source-visible license.

**[→ Get a commercial license](mailto:A.parr@belespritdaccord.uk?subject=Commercial%20license:%20unlambda-idris-spark)** · A.parr@belespritdaccord.uk

	---
	license: other
	license_name: proprietary-source-visible
	license_link: https://huggingface.co/Snapkitty/unlambda-idris-spark/blob/main/LICENSE
	tags:
	- snapkitty
	- october-2026-drop
	- unlambda
	- idris
	- ats
	- ada
	- spark
	- lambda-calculus
	- formal-verification
	---

	> Mirrored from [https://github.com/SNAPKITTYWEST/unlambda-idris-spark](https://github.com/SNAPKITTYWEST/unlambda-idris-spark) at commit `a42eccc`. Part of the SnapKitty October 2026 main drop.

	<!--
	Copyright (c) 2026 Ahmad Ali Parr. All rights reserved.
	SPDX-License-Identifier: LicenseRef-Proprietary
	Public source visibility does not grant an open-source license. See LICENSE.
	-->

	# Unlambda + ATS + Idris 2 + SPARK

	Handwritten lambda-calculus derivations, checked proof terms, and explicit verification boundaries.

	[![Idris CI](https://github.com/AHMADALIPARR/unlambda-idris-spark/actions/workflows/idris-proofs.yml/badge.svg?branch=main)](https://github.com/AHMADALIPARR/unlambda-idris-spark/actions/workflows/idris-proofs.yml)
	[![ATS and SPARK CI](https://github.com/AHMADALIPARR/unlambda-idris-spark/actions/workflows/ats-spark.yml/badge.svg?branch=main)](https://github.com/AHMADALIPARR/unlambda-idris-spark/actions/workflows/ats-spark.yml)
	[![Version](https://img.shields.io/badge/release-v1.0.0-2563eb)](https://github.com/AHMADALIPARR/unlambda-idris-spark/releases/tag/v1.0.0)
	[![Counter proof](https://img.shields.io/badge/SPARK_counter_snapshot-6%2F6_proved-15803d)](docs/verification/ats-spark-af40c4e.md)
	[![Security](https://img.shields.io/badge/security-report_privately-475569)](SECURITY.md)
	[![Commercial licensing](https://img.shields.io/badge/commercial-licensing_inquiries-7c3aed)](COMMERCIAL-LICENSING.md)
	[![License: proprietary](https://img.shields.io/badge/license-proprietary_source_visible-334155)](LICENSE)
	[![Donate](https://img.shields.io/badge/donate-details_pending-d97706)](SUPPORT.md)

	![Conceptual proof workbench with a lambda-calculus notebook and translucent geometric objects](docs/assets/proof-workbench.png)

	v1.0.0 packages a verification scaffold for a combined Unlambda/ATS/Idris/SPARK
	architecture. It includes compiler-checked ATS interfaces, handwritten SKI
	derivations formalized in Idris 2, and a SPARK-proved bounded allocation counter.
	The full ATS interpreter, generational heap, and cross-language correspondence
	are future work. This release makes the existing evidence easy to reproduce.

	## What is checked

	\| Layer \| Current result \| Boundary \|
	\| --- \| --- \| --- \|
	\| ATS/Postiats 0.4.2 \| Both `.sats` interfaces typecheck \| Runtime implementations and adapter are pending \|
	\| Idris 2 0.8.0 \| SKI proof terms and fuel model typecheck \| SKI witnesses cover symbolic free atoms; control model is a stub \|
	\| GNAT/Ada \| Heap compiles and passes capacity/exhaustion/reset tests \| Heap counts allocations; it does not yet store nodes \|
	\| SPARK/GNATprove \| Six checks discharged, zero unproved \| Current allocation-counter contracts only \|
	\| Combined CI \| `verify.sh` passes with all toolchains \| Full runtime certification remains open \|

	The counter badge links a recorded source snapshot. CI badges show the current
	branch. [Verification evidence](docs/verification/ats-spark-af40c4e.md) records
	the source hashes, versions, proof results, and limitations.

	## How the workflow fits together

	```mermaid
	flowchart TD
	Spec["Unlambda semantics and invariants"] --> Hand["Handwritten SKI beta derivations"]
	Hand --> Idris["Idris proof terms and control model"]
	Spec --> ATS["Typed ATS interfaces"]
	Spec --> Ada["Ada allocation-counter contracts"]
	Idris --> IC["Idris typecheck, build, smoke test"]
	ATS --> AC["ATS interface typecheck"]
	Ada --> SC["Ada tests and SPARK proof checks"]
	IC --> Evidence["Source-pinned verification evidence"]
	AC --> Evidence
	SC --> Evidence
	Evidence --> Combined["Combined verify.sh validation"]
	Combined --> Release["v1 verification-scaffold release"]
	Evidence -. "future work" .-> Runtime["ATS runtime, slot-map heap, correspondence"]
	```

	SPARK verifies the Ada contracts; Idris checks its own proof terms. Agreement
	between an ATS runtime, Ada implementation, and Idris semantics will require a
	checked adapter and a separate simulation/correspondence argument. See the
	[full workflow](docs/WORKFLOW.md) and [delivery backlog](docs/DELIVERY.md).

	## Reproduce the checks

	Use Linux x86-64 with Bash, GNU grep, ATS/Postiats, Idris 2, GNAT, GPRbuild, and
	GNATprove installed. [Toolchain versions and setup](docs/WORKFLOW.md#toolchain-setup)
	match the CI configuration.

	```sh
	gh repo clone AHMADALIPARR/unlambda-idris-spark
	cd unlambda-idris-spark
	bash verify.sh
	```

	The repository is public and source-visible; it is proprietary, not open source. A passing run checks the
	ATS declarations, typechecks and compiles the Idris model, runs the Ada tests,
	and requires GNATprove to discharge the heap checks. The success message names
	that component scope explicitly.

	## Repository map

	\| Path \| Purpose \|
	\| --- \| --- \|
	\| `ats/` \| Typed heap and machine interfaces \|
	\| `idris/LambdaProofs.idr` \| Explicit beta-reduction witnesses and substitution cases \|
	\| `idris/Main.idr` \| Fuel/control model and resource-status proof terms \|
	\| `ada/` \| Bounded allocation counter, contracts, assertion-enabled test driver \|
	\| `spec/` \| Semantics, invariants, handwritten derivations \|
	\| `docs/verification/` \| Recorded compiler and prover evidence \|
	\| `docs/source-sketches/` \| Original supplied shorthand interfaces \|
	\| `.github/workflows/` \| Idris and ATS/SPARK/combined validation jobs \|

	## Contribute, report, and support

	- [Contributing](CONTRIBUTING.md): meaningful changes, proof obligations, and review criteria.
	- [Security](SECURITY.md): private reporting and supported scope.
	- [Licensing](LICENSING.md): current licensing status and provenance boundaries.
	- [Commercial licensing](COMMERCIAL-LICENSING.md): inquiries and required agreement details.
	- [Support and donations](SUPPORT.md): ways to help; payment destination is awaiting confirmation.
	- [v1.0.0 release notes](docs/releases/v1.0.0.md) and [changelog](CHANGELOG.md).

	The cover and supporting photographs are AI-generated conceptual illustrations,
	not proof evidence or screenshots of an implemented interpreter. Image provenance
	and the exact generation prompts are in [the asset notes](docs/assets/README.md).

	---

	### 💼 Commercial License

	This repository is published under a proprietary source-visible license. Building a commercial product or service? A proprietary commercial license from Snapkitty Collective LLC lets you ship this code on terms other than a proprietary source-visible license.

	[→ Get a commercial license](mailto:A.parr@belespritdaccord.uk?subject=Commercial%20license:%20unlambda-idris-spark) · A.parr@belespritdaccord.uk