{ "experiment": "ci-run", "generated_at": "2026-04-29 19:38 UTC", "workload_docs": { "cedar-lean": [ { "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "tasks": [ { "property": "DecimalParseNegativeSignPreserved", "witnesses": [ { "test_fn": "witness_decimal_parse_negative_sign_preserved_case_neg_zero", "note": "minimal repro: \"-0.5\"" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "84fe9c6d4121f6fcb6b4f032cce0ae08f23ad8d4" ], "commit_subjects": [ "Fix parsing of decimal literals (#799)" ], "prs": [ 799 ], "summary": "Decimal.parse computed the result's sign from the parsed integer part\n(`if l ≥ 0 then add else subtract`). For inputs like \"-0.5\" the integer\npart is \"-0\", which `String.toInt?` returns as `0`, so the sign test\ntook the wrong branch and emitted `+0.5000` instead of `-0.5000`.\nThe fix tests the leading minus textually: `if !left.startsWith \"-\"`.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/Spec/Ext/Decimal.lean" ], "locations": [ { "file": "cedar-lean/Cedar/Spec/Ext/Decimal.lean", "line": 59, "symbol": "Cedar.Spec.Ext.Decimal.parse" } ], "patch": "patches/decimal_parse_negative_sign_preserved_84fe9c6_1.patch" }, "bug": { "short_name": "decimal_parse_negative_sign_preserved", "invariant": "If `Decimal.parse s = some d`, then a leading '-' in `s` must yield a non-positive `d` — i.e. textual sign is preserved through parsing.", "how_triggered": "Inferring sign from `l ≥ 0` instead of from the literal prefix `-` causes \"-0.\" inputs (whose integer part round-trips to 0) to be mis-signed: parse(\"-0.5\") returns `+0.5000`." } }, { "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "tasks": [ { "property": "DecimalParseNoUnderscore", "witnesses": [ { "test_fn": "witness_decimal_parse_no_underscore_case_int_part", "note": "minimal repro: \"1_2.34\"" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "a0c5812f171bcf142e43dedf8518d94becb0e11b" ], "commit_subjects": [ "fix behavior of Decimal.parse with underscores (#877)" ], "prs": [ 877 ], "summary": "Lean's `String.toInt?`/`String.toNat?` silently accept `_` characters\n(`String.toInt? \"1_2\" = some 12`). Cedar's spec disallows underscores in\ndecimal literals; without a guard the parser leaked Lean's behavior and\nlet inputs like \"1_2.34\" parse to 12.3400. The fix introduced\n`toInt?'`/`toNat?'` wrappers in `Cedar.Spec.Ext.Util` that reject any\ninput containing `_` before delegating.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/Spec/Ext/Util.lean" ], "locations": [ { "file": "cedar-lean/Cedar/Spec/Ext/Util.lean", "line": 12, "symbol": "Cedar.Spec.Ext.toInt?'" }, { "file": "cedar-lean/Cedar/Spec/Ext/Util.lean", "line": 19, "symbol": "Cedar.Spec.Ext.toNat?'" } ], "patch": "patches/decimal_parse_no_underscore_a0c5812_1.patch" }, "bug": { "short_name": "decimal_parse_no_underscore", "invariant": "If `Decimal.parse s = some _`, then `s` does not contain `_`.", "how_triggered": "Removing the `if str.contains '_' then .none else …` gates from `toInt?'`/`toNat?'` exposes Lean's lenient `String.toInt?` behavior to the parser, so `Decimal.parse \"1_2.34\"` returns `some 12.3400` instead of `none`." } }, { "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "tasks": [ { "property": "ValidateActionEntityNoAttrs", "witnesses": [ { "test_fn": "witness_validate_action_entity_no_attrs_case_action_with_attr", "note": "Action::\"a\" with attrs={x:1} — fix rejects, bug accepts" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "d7ab5abeff0d55f23914b5f2257da8fe3e917002" ], "commit_subjects": [ "Fix validator soundness when `updateSchema` is not used (#648)" ], "prs": [ 648 ], "summary": "Validator soundness gap: `validateEntities` did not verify that action\nentities in the entity store have empty `attrs` (and empty `tags`)\nunless callers first invoked `updateSchema` to inject synthetic\nEntitySchemaEntries. Cedar's spec forbids action entities from carrying\nattributes — without the check, an ill-typed entity store passes\nvalidation, breaking the type-soundness assumption used by every\nauthorization theorem in `Thm/Validation/`. The fix folded the action\nchecks directly into `instanceOfSchemaEntry` (combining\n`instanceOfEntitySchema` and `instanceOfActionSchema` into the new\n`instanceOfSchema`), removing the `updateSchema` workaround entirely.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/Validation/RequestEntityValidator.lean" ], "locations": [ { "file": "cedar-lean/Cedar/Validation/RequestEntityValidator.lean", "line": 132, "symbol": "Cedar.Validation.instanceOfSchema.instanceOfActionSchemaEntry" } ], "patch": "patches/validator_action_entity_no_attrs_d7ab5ab_1.patch" }, "bug": { "short_name": "validator_action_entity_no_attrs", "invariant": "If `validateEntities schema entities = .ok ()`, then every action entity in `entities` (member of any environment's `acts`) has empty `attrs`.", "how_triggered": "Short-circuiting the `data.attrs == Map.empty` guard in `instanceOfActionSchemaEntry` (changing the test to `(data.attrs == Map.empty) || true`) accepts action entities with non-empty `attrs`. The witness installs `Action::\"a\"` with `{x: 1}` and observes `validateEntities` returning `.ok ()`." } }, { "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "tasks": [ { "property": "SmtEncodeStringBalancedQuotes", "witnesses": [ { "test_fn": "witness_smt_encode_string_balanced_quotes_case_quote_in_middle", "note": "input \"x\\\"y\" — fix doubles the inner quote, bug emits malformed SMT" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "84708ca6ab57d462306429d345b1414842330127" ], "commit_subjects": [ "Fix SMT encoding of string literals (#640)" ], "prs": [ 640 ], "summary": "The SMT encoder did not double `\"` characters inside string literals,\nviolating the SMT-LIB 2.7 standard which prescribes `\"` (a doubled quote)\nas the only escape sequence inside a string literal. Inputs containing\n`\"` produced malformed SMT, breaking symbolic verification soundness:\ndownstream solvers either reject the query or silently misparse it.\n\nThe fix added the doubling rule. Cedar-lean has since refactored\n`encodeString` to per-character encoding (also handling `\\\\` and\nnon-ASCII via `\\u{…}`), but the doubling step at the `\"` branch is\nstill load-bearing.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/SymCC/Encoder.lean" ], "locations": [ { "file": "cedar-lean/Cedar/SymCC/Encoder.lean", "line": 170, "symbol": "Cedar.SymCC.encodeString" } ], "patch": "patches/smt_encode_string_balanced_quotes_84708ca_1.patch" }, "bug": { "short_name": "smt_encode_string_balanced_quotes", "invariant": "For any string `s`, the SMT literal `\"…encodeString s…\"` contains an even number of `\"` characters (every literal `\"` inside is doubled).", "how_triggered": "Replacing `return \"\\\"\\\"\"` (doubled quote) with `return \"\\\"\"` (single quote) in the `c = '\"'` branch of `encodeString` lets a single `\"` leak through; the witness `x\"y` then encodes to `\"x\"y\"` (3 `\"` chars, odd) instead of `\"x\"\"y\"` (4, even)." } }, { "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "tasks": [ { "property": "ValidateRejectsUndeclaredEntities", "witnesses": [ { "test_fn": "witness_validate_rejects_undeclared_entities_case_unknown_principal", "note": "policy with `true || (principal == Foo::\"x\")`; fix rejects undeclared Foo, bug accepts" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "eb3bfff4fcebff716ae86983ae78fd6407e13290" ], "commit_subjects": [ "Make lean validator check entity type and action existence before type checking (#779)" ], "prs": [ 779 ], "summary": "Validator entity-existence soundness gap. The Lean typechecker\nshort-circuits on type errors (e.g. on `true || expr`, it returns\n`bool .tt` without descending into `expr`), so a policy referencing an\nundeclared entity type inside a short-circuited subexpression passed\nLean validation while the Rust validator (which performs entity\nexistence as a separate pass) rejected it. The two validators\ndisagreed, breaking differential soundness.\n\nThe fix added `checkEntities`, an unconditional pre-pass at the top of\n`typecheckPolicyWithEnvironments` that traverses each policy's `Expr`\nand rejects any reference to an entity UID/type not declared in the\nschema.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/Validation/Validator.lean" ], "locations": [ { "file": "cedar-lean/Cedar/Validation/Validator.lean", "line": 217, "symbol": "Cedar.Validation.typecheckPolicyWithEnvironments" } ], "patch": "patches/validate_rejects_undeclared_entities_eb3bfff_1.patch" }, "bug": { "short_name": "validate_rejects_undeclared_entities", "invariant": "If `validate policies schema = .ok ()`, then for every policy `p` in `policies`, `checkEntities schema p.toExpr = .ok ()` — i.e. `validate` agrees with `checkEntities` on the entity-existence question.", "how_triggered": "Removing the `(checkEntities schema policy.toExpr).mapError ...` line from `typecheckPolicyWithEnvironments` lets the typechecker short-circuit through any reference to an undeclared entity. The witness encodes `permit(principal, action, resource) when { true || (principal == Foo::\"x\") };` — `true || …` types as `bool .tt` without inspecting the right operand, so `validate` returns `.ok ()` despite `Foo` being absent from the schema." } }, { "mutations": [ "validate_request_principal_exists_1a76346_1" ], "tasks": [ { "property": "ValidateRequestPrincipalExists", "witnesses": [ { "test_fn": "witness_validate_request_principal_exists_case_ghost_user", "note": "schema with Photo + Action::\"a\" applies-to-principal=[User], request with principal=User::\"ghost\"; fix rejects, bug accepts" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "1a7634653370892318d14bd9213668bf23c022de" ], "commit_subjects": [ "Add `Environment.WellFormed` as a new precondition for type checking and fix relevant proofs (#658)" ], "prs": [ 658 ], "summary": "Request-validation soundness gap. Pre-#658, `instanceOfEntityType` only\nverified that the entity's literal type matched the expected request\ntype (and, for enum types, that the eid was a valid member). Non-enum\nentities passed regardless of whether they were declared anywhere in\nthe schema, so a 'ghost' principal like `User::\"ghost\"` matched a\nrequest type even when `User` had no entry in `env.ets`. Downstream\ntypecheckers then assume requests are well-formed, so the soundness gap\nsilently propagates to authorization decisions.\n\nThe fix added `Environment.WellFormed` as a precondition and reworked\n`instanceOfEntityType` to additionally require that the entity be\npresent in either `env.ets` or `env.acts`.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/Validation/RequestEntityValidator.lean" ], "locations": [ { "file": "cedar-lean/Cedar/Validation/RequestEntityValidator.lean", "line": 52, "symbol": "Cedar.Validation.instanceOfEntityType" } ], "patch": "patches/validate_request_principal_exists_1a76346_1.patch" }, "bug": { "short_name": "validate_request_principal_exists", "invariant": "If `validateRequest schema request = .ok ()`, then `request.principal` is declared in the schema (either `schema.ets.isValidEntityUID` or `schema.acts.contains`).", "how_triggered": "Replacing the existence check `(env.ets.isValidEntityUID e || env.acts.contains e)` in `instanceOfEntityType` with `true` collapses the second conjunct, so any UID whose entity type matches the request type passes — including `User::\"ghost\"` against a schema that has no `User` entity declared." } }, { "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "tasks": [ { "property": "SchemaWellFormedNoSingletonBools", "witnesses": [ { "test_fn": "witness_schema_well_formed_no_singleton_bools_case_attr_bool_tt", "note": "schema declares User.flag : (.bool .tt) — fix rejects via validateLifted, bug accepts" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "e785e2ed37e0ec9f4c4ecb42f84f794c4735b11f" ], "commit_subjects": [ "Require that well-formed `TypeEnv` does not have singleton Bool types (#689)" ], "prs": [ 689 ], "summary": "TypeEnv well-formedness gap. The Cedar typechecker's soundness proofs\nassume every schema-level type is *lifted* — i.e. boolean types appear\nonly as `.bool .anyBool`, never as the singleton `.bool .tt` or\n`.bool .ff`. Without enforcement, a malicious schema declaring an\nattribute as `(.bool .tt)` would pass `Schema.validateWellFormed`, then\nthe typechecker would prove the literal-specific judgement (`flag :\nbool .tt`) about user-provided attribute data — unsound under the\noperational semantics, since the user can put `flag = false` in their\nentity.\n\nThe fix added `CedarType.validateLifted` and called it on every schema\nentry's attribute and tag types from inside\n`StandardSchemaEntry.validateWellFormed` and\n`ActionSchemaEntry.validateWellFormed`.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/Validation/EnvironmentValidator.lean" ], "locations": [ { "file": "cedar-lean/Cedar/Validation/EnvironmentValidator.lean", "line": 126, "symbol": "Cedar.Validation.StandardSchemaEntry.validateWellFormed" } ], "patch": "patches/schema_well_formed_no_singleton_bools_e785e2e_1.patch" }, "bug": { "short_name": "schema_well_formed_no_singleton_bools", "invariant": "If `Schema.validateWellFormed schema = .ok ()`, then for every standard entity entry in `schema.ets`, the attribute record passes `CedarType.validateLifted` (no `.bool .tt` / `.bool .ff` nested anywhere).", "how_triggered": "Removing the `(CedarType.record entry.attrs).validateLifted` line from `StandardSchemaEntry.validateWellFormed` lets the validator accept entities whose attributes have singleton-bool types. The witness builds a schema with `User.flag : (.bool .tt)` and observes `Schema.validateWellFormed` returning `.ok ()` instead of `\"bool type is not lifted\"`." } }, { "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "tasks": [ { "property": "DefineEntityRejectsNonMember", "witnesses": [ { "test_fn": "witness_define_entity_rejects_non_member_case_zzz", "note": "User enum [alice, bob], call defineEntity for User::\"zzz\"; fix throws, bug returns U_enc_m2" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "fe5a0464ef36716ff37ced2d7a4e62ef91a23d7e" ], "commit_subjects": [ "Fix escaping for euid in term protobuf (#855)" ], "prs": [ 855 ], "summary": "SymCC encoder soundness gap. Pre-#855, `defineEntity` looked up an\nenum member's index via `members.idxOf entity.eid` (the non-Option\nvariant). For an entity whose type has a registered enum but whose\n`eid` is *not* a declared member, `List.idxOf` returns\n`members.length` — an index outside the legal range. The encoder\nthen emits `{tyEnc}_m{members.length}` as the SMT identifier,\nreferencing a member that does not exist. Solvers either return\nspurious UNSAT or accept an unsound model; either way the symbolic\nanalysis loses its meaning.\n\nThe fix replaced `idxOf` with `idxOf?` and explicitly threw an\n`IO.userError` on the `none` case.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/SymCC/Encoder.lean" ], "locations": [ { "file": "cedar-lean/Cedar/SymCC/Encoder.lean", "line": 269, "symbol": "Cedar.SymCC.Encoder.defineEntity" } ], "patch": "patches/encoder_define_entity_rejects_non_member_fe5a046_1.patch" }, "bug": { "short_name": "encoder_define_entity_rejects_non_member", "invariant": "If `defineEntity tyEnc entity` returns `Ok` for an entity whose type is registered as an enum, then `entity.eid` is one of the declared members.", "how_triggered": "Replacing the inner `match members.idxOf? entity.eid with | .some idx => … | .none => throw …` with the single line `return s!\"{enumId tyEnc (members.idxOf entity.eid)}\"` lets `defineEntity` succeed for non-member eids: `List.idxOf` returns `members.length`, producing the bogus identifier `U_enc_m2` for `[\"alice\", \"bob\"]`-membered `User::\"zzz\"`." } }, { "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "tasks": [ { "property": "ValidateWithLevelAccepts", "witnesses": [ { "test_fn": "witness_validate_with_level_accepts_case_action_in_action", "note": "policy `permit when { Action::\"a\" in Action::\"a\" }`, level=1; fix accepts, bug rejects with .levelError" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "c186f0f4d34c7f244836279e0b4aa6535e1ce252" ], "commit_subjects": [ "Update level checking to allow access to literals equal to environment action (#573)" ], "prs": [ 573 ], "summary": "Level-checker completeness gap. Pre-#573, `TypedExpr.checkEntityAccessLevel`\nhad no case for literal entity UIDs in entity-access positions, so the\nfallthrough `_, _ => false` rejected expressions like `Action::\"a\" in\nAction::\"a\"` (where the action literal is the left operand of `.mem`).\nPolicies that used a literal action in any entity-access position\nfailed level checking with `.levelError` even though they were\nsemantically valid. Rust's level checker accepted them, breaking\nLean/Rust differential parity.\n\nThe fix added the case `.lit (.entityUID euid) _, _ => euid == env.reqty.action`\nso a literal matching the environment's action passes level checking.\nThis is a *completeness* fix (the buggy validator is over-strict, not\nunsound), but ETNA's pattern still applies: the witness asserts a\nknown-good policy is accepted, and the variant patch causes the witness\nto fail with `.levelError`.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/Validation/Levels.lean" ], "locations": [ { "file": "cedar-lean/Cedar/Validation/Levels.lean", "line": 61, "symbol": "Cedar.Validation.TypedExpr.checkEntityAccessLevel" } ], "patch": "patches/validate_with_level_accepts_c186f0f_1.patch" }, "bug": { "short_name": "validate_with_level_accepts", "invariant": "For the chosen `(policies, schema, level)` fixture, `validateWithLevel` returns `.ok ()`. (A unit-test-style invariant: the level checker should not over-reject literal action references.)", "how_triggered": "Replacing `euid == env.reqty.action` with `false` in the literal-entity case of `checkEntityAccessLevel` makes the level checker reject `Action::\"a\" in Action::\"a\"`. The witness policy's level check then fails with `.levelError`." } } ] }, "metrics": [ { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:34:10.497569902+00:00", "status": "failed", "tests": 222, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-0.5\") — Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:34:11.003936196+00:00", "status": "failed", "tests": 478, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"-0.8\") — Decimal.parse \"-0.8\" = some { toUInt64 := 8000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:34:11.533887507+00:00", "status": "failed", "tests": 226, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"-0.8\") — Decimal.parse \"-0.8\" = some { toUInt64 := 8000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:34:12.042156715+00:00", "status": "failed", "tests": 1189, "discards": 0, "time": "2000us", "error": null, "tool": "plausible", "counterexample": "(\"-0.26\") — Decimal.parse \"-0.26\" = some { toUInt64 := 2600 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:34:12.555425948+00:00", "status": "failed", "tests": 148, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-0.4\") — Decimal.parse \"-0.4\" = some { toUInt64 := 4000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:34:13.060665062+00:00", "status": "failed", "tests": 22, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-0.2\") — Decimal.parse \"-0.2\" = some { toUInt64 := 2000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:34:13.569010848+00:00", "status": "failed", "tests": 1956, "discards": 0, "time": "4000us", "error": null, "tool": "plausible", "counterexample": "(\"-0.75\") — Decimal.parse \"-0.75\" = some { toUInt64 := 7500 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:34:14.087107160+00:00", "status": "failed", "tests": 707, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"-0.825\") — Decimal.parse \"-0.825\" = some { toUInt64 := 8250 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:34:14.607181728+00:00", "status": "failed", "tests": 824, "discards": 0, "time": "2000us", "error": null, "tool": "plausible", "counterexample": "(\"-0.204\") — Decimal.parse \"-0.204\" = some { toUInt64 := 2040 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:34:15.113742027+00:00", "status": "failed", "tests": 6, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-0.211\") — Decimal.parse \"-0.211\" = some { toUInt64 := 2110 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:34:15.618609832+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:34:16.133802772+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:34:16.655442341+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:34:17.160352327+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:34:17.683890617+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:34:18.195628627+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:34:18.701111219+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:34:19.202084502+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:34:19.710553969+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:34:20.213323401+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "1044ac5bbc701e8e9113a5edadd95620d803f7eb" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:34:28.560885577+00:00", "status": "failed", "tests": 2, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-34.2_69\") — Decimal.parse \"-34.2_69\" = some { toUInt64 := 18446744073709211347 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:34:29.073618521+00:00", "status": "failed", "tests": 53, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-9_98.5\") — Decimal.parse \"-9_98.5\" = some { toUInt64 := 18446744073699566616 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:34:29.584215056+00:00", "status": "failed", "tests": 53, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"-52_6.77\") — Decimal.parse \"-52_6.77\" = some { toUInt64 := 18446744073704283916 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:34:30.092342951+00:00", "status": "failed", "tests": 16, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"5868.4_3\") — Decimal.parse \"5868.4_3\" = some { toUInt64 := 58680430 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:34:30.601223112+00:00", "status": "failed", "tests": 3, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-7_2.3\") — Decimal.parse \"-7_2.3\" = some { toUInt64 := 18446744073708828616 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:34:31.104333960+00:00", "status": "failed", "tests": 44, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-3_73.0\") — Decimal.parse \"-3_73.0\" = some { toUInt64 := 18446744073705821616 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:34:31.610785617+00:00", "status": "failed", "tests": 19, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"-4.8_1\") — Decimal.parse \"-4.8_1\" = some { toUInt64 := 18446744073709510806 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:34:32.116102501+00:00", "status": "failed", "tests": 13, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-3445.2_34\") — Decimal.parse \"-3445.2_34\" = some { toUInt64 := 18446744073675101382 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:34:32.618648822+00:00", "status": "failed", "tests": 18, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"4.9_7\") — Decimal.parse \"4.9_7\" = some { toUInt64 := 40970 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:34:33.124722160+00:00", "status": "failed", "tests": 8, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"4.5_81\") — Decimal.parse \"4.5_81\" = some { toUInt64 := 40581 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:34:33.636284502+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:34:34.143474485+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:34:34.661452607+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:34:35.181001559+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:34:35.699852925+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:34:36.203871979+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:34:36.707689470+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:34:37.224646110+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:34:37.735302516+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:34:38.247777208+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "7dd06eb7a914d10733faa8ebddeb43737b503411" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:34:46.797239547+00:00", "status": "failed", "tests": 622879, "discards": 0, "time": "34866000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.int) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { attrs := Cedar.Data.Map.mk\n [(\"7\\\\CcA2\\\\M`'b05A `Ac CCBC@C:/5:6c\\x08\", Cedar.Spec.Value.prim (Cedar.Spec.Prim.string \"owner\"))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity Album::\"a\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:35:22.169266381+00:00", "status": "failed", "tests": 100777, "discards": 0, "time": "5671000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime))),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration)))],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration)) }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"bob\" },\n { attrs := Cedar.Data.Map.mk\n [(\"131A`\\\\1b:B\\\\\\\\:12\\x120\\x18,cb03`-\\x0b2\\\\\\x0f\\\\`aD\\x15IB7+03EB;B\\x0e:;\\x19,A$A0;C\\x143B\\x17C1;B 3b3:\",\n Cedar.Spec.Value.prim\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"bob\" })),\n (\"C\\x07\\x11\\x0d,C;Ba3A1\\\\\\x0ec\\x1a;R\\x01\",\n Cedar.Spec.Value.prim\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" })),\n (\"cC\\\"cCb[cE3BBc121\\x02,Y/A/`0c3a133a`,,CB`\\\"KB ;\\x0d;`;\\\\A0 ;bc\\x01 c2` /\\x11\\\\/;\\x1dB:b\\x15b1\\x0bc/`<3a#0,,30122A3\\x0f\\\\\\x01;\",\n Cedar.Spec.Value.set\n (Cedar.Data.Set.mk\n [Cedar.Spec.Value.prim (Cedar.Spec.Prim.int { toUInt64 := 72 }),\n Cedar.Spec.Value.prim (Cedar.Spec.Prim.bool false)]))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity Album::\"a\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:36:12.455680804+00:00", "status": "failed", "tests": 112733, "discards": 0, "time": "6482000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"User\", path := [] }, eid := \"x\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"User\", path := [] }, eid := \"x\" },\n { attrs := Cedar.Data.Map.mk [(\"0:`/b\\\\\\\\\", Cedar.Spec.Value.prim (Cedar.Spec.Prim.int { toUInt64 := 49 }))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity User::\"x\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:36:19.449532667+00:00", "status": "failed", "tests": 31159, "discards": 0, "time": "1777000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)))] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"bob\" },\n { attrs := Cedar.Data.Map.mk\n [(\"\\x0f`/2C3\\\\\", Cedar.Spec.Value.set (Cedar.Data.Set.mk [])),\n (\"3bba/;\\x15\\x1bB`0\\x0e2,` /0/0,1:/1,B 1a`b/:::. 1;b\\x14\\x0d/;BCB:\\\\C2/c`\\x08*c\",\n Cedar.Spec.Value.prim\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"alice\" }))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity Action::\"bob\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:36:21.733019690+00:00", "status": "failed", "tests": 98301, "discards": 0, "time": "5676000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { attrs := Cedar.Data.Map.mk [(\"\", Cedar.Spec.Value.record (Cedar.Data.Map.mk []))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity Foo::\"a\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:36:27.936749771+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:36:28.453192784+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:36:28.952841594+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:36:29.465692263+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:36:29.973851319+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:36:30.481349540+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:36:30.982449504+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:36:31.486206727+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:36:31.984686032+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:36:32.490404117+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "f9845f195bd4b7d82d490923dff633ddc4afaa9a" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:36:42.265751832+00:00", "status": "failed", "tests": 51, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"a\\\\\\x1a00C:a,3,`10\\\\\\\\;\\\"\\x031,c3C/,/b/\") — encodeString(\"a\\\\\\x1a00C:a,3,`10\\\\\\\\;\\\"\\x031,c3C/,/b/\") wrapped to \"\\\"a\\\\u{5c}\\\\u{1a}00C:a,3,`10\\\\u{5c}\\\\u{5c};\\\"\\\\u{3}1,c3C/,/b/\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:36:42.773255652+00:00", "status": "failed", "tests": 36, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"`20C c2/c\\x03\\x19 a`,\\x0b\\\"3a\\\\320A\\x12C \\\\\\x13\") — encodeString(\"`20C c2/c\\x03\\x19 a`,\\x0b\\\"3a\\\\320A\\x12C \\\\\\x13\") wrapped to \"\\\"`20C c2/c\\\\u{3}\\\\u{19} a`,\\\\u{b}\\\"3a\\\\u{5c}320A\\\\u{12}C \\\\u{5c}\\\\u{13}\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:36:43.272469774+00:00", "status": "failed", "tests": 58, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\",b\\x19A/\\x01\\x0e1//aC3/3;B2\\x027/\\x1c B\\x06`3A, 23%.\\x00:b:\\\\,+9\\\";\") — encodeString(\",b\\x19A/\\x01\\x0e1//aC3/3;B2\\x027/\\x1c B\\x06`3A, 23%.\\x00:b:\\\\,+9\\\";\") wrapped to \"\\\",b\\\\u{19}A/\\\\u{1}\\\\u{e}1//aC3/3;B2\\\\u{2}7/\\\\u{1c} B\\\\u{6}`3A, 23%.\\\\u{0}:b:\\\\u{5c},+9\\\";\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:36:43.768114030+00:00", "status": "failed", "tests": 40, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"/\\x04\\\" A a\") — encodeString(\"/\\x04\\\" A a\") wrapped to \"\\\"/\\\\u{4}\\\" A a\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:36:44.270423392+00:00", "status": "failed", "tests": 52, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"0a`c0 /\\x0dB13\\x0f 2\\x08:B3A \\\":b\\x1b1a3\\x021a0b\\x06 c,\\x05a\") — encodeString(\"0a`c0 /\\x0dB13\\x0f 2\\x08:B3A \\\":b\\x1b1a3\\x021a0b\\x06 c,\\x05a\") wrapped to \"\\\"0a`c0 /\\\\u{d}B13\\\\u{f} 2\\\\u{8}:B3A \\\":b\\\\u{1b}1a3\\\\u{2}1a0b\\\\u{6} c,\\\\u{5}a\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:36:44.781050464+00:00", "status": "failed", "tests": 35, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"3;Cc2`c/\\x150c\\x0c\\\\\\x04\\x15a\\\"\\x03;:\\x07CA/\\x03;\\x1e1c\\x12C\") — encodeString(\"3;Cc2`c/\\x150c\\x0c\\\\\\x04\\x15a\\\"\\x03;:\\x07CA/\\x03;\\x1e1c\\x12C\") wrapped to \"\\\"3;Cc2`c/\\\\u{15}0c\\\\u{c}\\\\u{5c}\\\\u{4}\\\\u{15}a\\\"\\\\u{3};:\\\\u{7}CA/\\\\u{3};\\\\u{1e}1c\\\\u{12}C\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:36:45.285196358+00:00", "status": "failed", "tests": 40, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"\\\\\\x1b\\t\\x0fA;2\\x0eB \\\\\\x08aa`%\\\"31 b/21bc\") — encodeString(\"\\\\\\x1b\\t\\x0fA;2\\x0eB \\\\\\x08aa`%\\\"31 b/21bc\") wrapped to \"\\\"\\\\u{5c}\\\\u{1b}\\\\u{9}\\\\u{f}A;2\\\\u{e}B \\\\u{5c}\\\\u{8}aa`%\\\"31 b/21bc\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:36:45.790841755+00:00", "status": "failed", "tests": 41, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"`;:\\\\3(C0a\\\"A1Bbbb:,,\\\\cC3;ba/03Ca;A\\x00,\\\\\") — encodeString(\"`;:\\\\3(C0a\\\"A1Bbbb:,,\\\\cC3;ba/03Ca;A\\x00,\\\\\") wrapped to \"\\\"`;:\\\\u{5c}3(C0a\\\"A1Bbbb:,,\\\\u{5c}cC3;ba/03Ca;A\\\\u{0},\\\\u{5c}\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:36:46.298200680+00:00", "status": "failed", "tests": 45, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"b*\\x1eC`232\\\"\") — encodeString(\"b*\\x1eC`232\\\"\") wrapped to \"\\\"b*\\\\u{1e}C`232\\\"\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:36:46.797341988+00:00", "status": "failed", "tests": 39, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"\\\":\\x1f/:C\\x0b\\x10\\t&aB,A/B1b\\x16A:\") — encodeString(\"\\\":\\x1f/:C\\x0b\\x10\\t&aB,A/B1b\\x16A:\") wrapped to \"\\\"\\\":\\\\u{1f}/:C\\\\u{b}\\\\u{10}\\\\u{9}&aB,A/B1b\\\\u{16}A:\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:36:47.304657924+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:36:47.816364167+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:36:48.317619626+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:36:48.829697083+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:36:49.335205383+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:36:49.842752994+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:36:50.343427334+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:36:50.855964606+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:36:51.363784518+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:36:51.871175275+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "119aa51b8d85a9af72985f8270ed9bd922f7d2ae" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:37:02.685937797+00:00", "status": "failed", "tests": 1850, "discards": 0, "time": "165000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))],\n tags := some (Cedar.Validation.CedarType.entity { id := \"Album\", path := [] }) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Action\", path := [] }, eid := \"bob\" }],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))] }),\n ({ ty := { id := \"Album\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"p1\" },\n { ty := { id := \"Album\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Photo\", path := [] }, eid := \"view\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))] })] })) — validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:37:03.352904109+00:00", "status": "failed", "tests": 4803, "discards": 0, "time": "424000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [], attrs := Cedar.Data.Map.mk [], tags := none }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)))],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"y\" },\n { ty := { id := \"User\", path := [] }, eid := \"alice\" },\n { ty := { id := \"User\", path := [] }, eid := \"view\" }],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"view\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Action\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)))] })] })) — validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:37:04.287871424+00:00", "status": "failed", "tests": 51105, "discards": 0, "time": "4576000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] }],\n { ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Foo\", path := [] }, eid := \"p1\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"edit\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"y\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }],\n context := Cedar.Data.Map.mk [] })] })) — validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:37:09.372644226+00:00", "status": "failed", "tests": 9703, "discards": 0, "time": "854000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"alice\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [], attrs := Cedar.Data.Map.mk [], tags := none }),\n ({ id := \"User\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk []))],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"User\", path := [] }, eid := \"b\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)))] }),\n ({ ty := { id := \"Action\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Photo\", path := [] }, eid := \"view\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"y\" },\n { ty := { id := \"Action\", path := [] }, eid := \"z\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"y\" }],\n context := Cedar.Data.Map.mk [] })] })) — validate passed but policy p2 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:37:10.733292304+00:00", "status": "failed", "tests": 29065, "discards": 0, "time": "2550000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] }],\n { ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"User\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.decimal)))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"ghost\" },\n { ty := { id := \"Action\", path := [] }, eid := \"y\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }))] })] })) — validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:37:13.805724783+00:00", "status": "failed", "tests": 12249, "discards": 0, "time": "1083000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"view\" }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"ghost\"])),\n ({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.int) }),\n ({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Album\", path := [] }))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"User\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Foo\", path := [] }, eid := \"b\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"x\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }],\n context := Cedar.Data.Map.mk\n [(\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int)),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))] })] })) — validate passed but policy p2 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:37:15.397769360+00:00", "status": "failed", "tests": 10602, "discards": 0, "time": "936000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"alice\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime))),\n (\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.decimal)))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Foo\", path := [] }, eid := \"view\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"x\" },\n { ty := { id := \"User\", path := [] }, eid := \"x\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string)),\n (\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"view\" },\n { ty := { id := \"Action\", path := [] }, eid := \"x\" },\n { ty := { id := \"Action\", path := [] }, eid := \"z\" }],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool))),\n (\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int))] })] })) — validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:37:16.849150163+00:00", "status": "failed", "tests": 7962, "discards": 0, "time": "703000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"alice\", \"bob\"])),\n ({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"alice\", \"ghost\"])),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int)),\n (\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"x\" },\n { ty := { id := \"User\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"y\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))] })] })) — validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:37:18.055960988+00:00", "status": "failed", "tests": 19817, "discards": 0, "time": "1753000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"alice\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration)) }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime))),\n (\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)))],\n tags := some (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }))] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string)),\n (\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))] })] })) — validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:37:20.310407393+00:00", "status": "failed", "tests": 19705, "discards": 0, "time": "1762000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"b\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"y\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))] }),\n ({ ty := { id := \"Action\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Album\", path := [] }, eid := \"z\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff))),\n (\"name\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))] })] })) — validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:37:22.585333442+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:37:23.105959668+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:37:23.619553884+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:37:24.121055456+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:37:24.625609803+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:37:25.128183071+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:37:25.633880210+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:37:26.147802448+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:37:26.655634067+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:37:27.173954749+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "6432ab7b63d16ffbfb67b3f20ae09a5518554d55" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:37:38.297765003+00:00", "status": "failed", "tests": 792, "discards": 0, "time": "11000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"z\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"edit\" },\n { ty := { id := \"Album\", path := [] }, eid := \"z\" },\n { ty := { id := \"User\", path := [] }, eid := \"edit\" }],\n context := Cedar.Data.Map.mk [] })] },\n { principal := { ty := { id := \"Photo\", path := [] }, eid := \"alice\" },\n action := { ty := { id := \"Photo\", path := [] }, eid := \"z\" },\n resource := { ty := { id := \"Album\", path := [] }, eid := \"a\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal Photo::\"alice\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:37:38.812894005+00:00", "status": "failed", "tests": 1198, "discards": 0, "time": "15000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }))] })] },\n { principal := { ty := { id := \"Album\", path := [] }, eid := \"bob\" },\n action := { ty := { id := \"Album\", path := [] }, eid := \"p1\" },\n resource := { ty := { id := \"Action\", path := [] }, eid := \"b\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal Album::\"bob\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:37:39.329773200+00:00", "status": "failed", "tests": 397, "discards": 0, "time": "5000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration)))],\n tags := some (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"z\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }))] })] },\n { principal := { ty := { id := \"Action\", path := [] }, eid := \"edit\" },\n action := { ty := { id := \"Foo\", path := [] }, eid := \"z\" },\n resource := { ty := { id := \"Album\", path := [] }, eid := \"bob\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal Action::\"edit\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:37:39.837810930+00:00", "status": "failed", "tests": 4354, "discards": 0, "time": "58000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"x\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))] }),\n ({ ty := { id := \"Album\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool))),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Album\", path := [] }))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))] })] },\n { principal := { ty := { id := \"User\", path := [] }, eid := \"bob\" },\n action := { ty := { id := \"Action\", path := [] }, eid := \"x\" },\n resource := { ty := { id := \"Album\", path := [] }, eid := \"y\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal User::\"bob\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:37:40.397829471+00:00", "status": "failed", "tests": 2257, "discards": 0, "time": "30000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Action\", path := [] }, eid := \"view\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration)))] }),\n ({ ty := { id := \"Action\", path := [] }, eid := \"y\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"b\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }],\n context := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int)),\n (\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))] })] },\n { principal := { ty := { id := \"User\", path := [] }, eid := \"ghost\" },\n action := { ty := { id := \"Action\", path := [] }, eid := \"b\" },\n resource := { ty := { id := \"User\", path := [] }, eid := \"view\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:37:40.932125447+00:00", "status": "failed", "tests": 487, "discards": 0, "time": "6000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)) }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Action\", path := [] }, eid := \"b\" }],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr))),\n (\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"User\", path := [] }, eid := \"p1\" }],\n context := Cedar.Data.Map.mk [] })] },\n { principal := { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" },\n action := { ty := { id := \"Foo\", path := [] }, eid := \"b\" },\n resource := { ty := { id := \"Album\", path := [] }, eid := \"alice\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal Foo::\"ghost\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:37:41.444994245+00:00", "status": "failed", "tests": 1338, "discards": 0, "time": "18000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [])),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))],\n tags := none }),\n ({ id := \"User\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"bob\", \"y\"]))],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"view\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"ghost\" },\n { ty := { id := \"User\", path := [] }, eid := \"ghost\" }],\n context := Cedar.Data.Map.mk [] })] },\n { principal := { ty := { id := \"Action\", path := [] }, eid := \"edit\" },\n action := { ty := { id := \"Action\", path := [] }, eid := \"view\" },\n resource := { ty := { id := \"Action\", path := [] }, eid := \"ghost\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal Action::\"edit\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:37:41.976718982+00:00", "status": "failed", "tests": 7093, "discards": 0, "time": "96000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk []))],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Foo\", path := [] })),\n (\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration)))] })] },\n { principal := { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" },\n action := { ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n resource := { ty := { id := \"User\", path := [] }, eid := \"ghost\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal Photo::\"ghost\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:37:42.584605880+00:00", "status": "failed", "tests": 176, "discards": 0, "time": "2000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)) }),\n ({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.int) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"z\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Foo\", path := [] }))] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Action\", path := [] }, eid := \"p1\" }],\n context := Cedar.Data.Map.mk [] })] },\n { principal := { ty := { id := \"User\", path := [] }, eid := \"b\" },\n action := { ty := { id := \"User\", path := [] }, eid := \"a\" },\n resource := { ty := { id := \"User\", path := [] }, eid := \"alice\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal User::\"b\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:37:43.087688345+00:00", "status": "failed", "tests": 263, "discards": 0, "time": "3000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [])),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr))),\n (\"owner\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.decimal)) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"view\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"view\" },\n { ty := { id := \"User\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Album\", path := [] }))] }),\n ({ ty := { id := \"Album\", path := [] }, eid := \"x\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"y\" },\n { ty := { id := \"Album\", path := [] }, eid := \"z\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] })] },\n { principal := { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" },\n action := { ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n resource := { ty := { id := \"Album\", path := [] }, eid := \"b\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal Foo::\"ghost\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:37:43.596731350+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:37:44.097964059+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:37:44.609790747+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:37:45.123704618+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:37:45.643570469+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:37:46.144707058+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:37:46.645756954+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:37:47.150719458+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:37:47.658235101+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:37:48.154781017+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "83e7ae7612e5e69a09b060a2e3208b9d3c325705" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:37:57.332013316+00:00", "status": "failed", "tests": 23590, "discards": 0, "time": "256000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := none }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.decimal)) }),\n ({ id := \"User\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"bob\", \"z\"]))],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)))] })] }) — Schema.validateWellFormed passed but entity type Action has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:37:58.089576814+00:00", "status": "failed", "tests": 27663, "discards": 0, "time": "303000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [], attrs := Cedar.Data.Map.mk [], tags := none }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [], attrs := Cedar.Data.Map.mk [], tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] })),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }))] }),\n ({ ty := { id := \"Album\", path := [] }, eid := \"view\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Action\", path := [] }, eid := \"ghost\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))] })] }) — Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:37:58.899780163+00:00", "status": "failed", "tests": 17308, "discards": 0, "time": "191000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := some (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"view\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Foo\", path := [] }))] })] }) — Schema.validateWellFormed passed but entity type Photo has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:37:59.609013462+00:00", "status": "failed", "tests": 13173, "discards": 0, "time": "143000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int))],\n tags := some (Cedar.Validation.CedarType.int) }),\n ({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)) }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr))),\n (\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := some (Cedar.Validation.CedarType.int) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))] })] }) — Schema.validateWellFormed passed but entity type Photo has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:38:00.267123059+00:00", "status": "failed", "tests": 19813, "discards": 0, "time": "219000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff))),\n (\"name\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))],\n tags := some (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }) }),\n ({ id := \"User\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"y\", \"z\"]))],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"view\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] })] }) — Schema.validateWellFormed passed but entity type Album has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:38:00.999043519+00:00", "status": "failed", "tests": 63282, "discards": 0, "time": "696000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff))),\n (\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Album\", path := [] }))],\n tags := none }),\n ({ id := \"Photo\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"a\"]))],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] })] }) — Schema.validateWellFormed passed but entity type Foo has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:38:02.211374425+00:00", "status": "failed", "tests": 17073, "discards": 0, "time": "188000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string)),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }))],\n tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool))),\n (\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)))] })] }) — Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:38:02.903611420+00:00", "status": "failed", "tests": 40121, "discards": 0, "time": "445000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff))),\n (\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))],\n tags := some (Cedar.Validation.CedarType.int) }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [], attrs := Cedar.Data.Map.mk [], tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"User\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string)),\n (\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Action\", path := [] }))] })] }) — Schema.validateWellFormed passed but entity type Action has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:38:03.860946243+00:00", "status": "failed", "tests": 9666, "discards": 0, "time": "106000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := none }),\n ({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [], attrs := Cedar.Data.Map.mk [], tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"y\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string)),\n (\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.decimal)))] })] }) — Schema.validateWellFormed passed but entity type Action has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:38:04.468523685+00:00", "status": "failed", "tests": 12841, "discards": 0, "time": "141000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [], attrs := Cedar.Data.Map.mk [], tags := none }),\n ({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"name\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int)),\n (\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Album\", path := [] }))] })] }) — Schema.validateWellFormed passed but entity type Album has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:38:05.112080984+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:38:05.619019907+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:38:06.126889650+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:38:06.629743488+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:38:07.136845622+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:38:07.638585588+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:38:08.141930581+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:38:08.645026537+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:38:09.148376799+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:38:09.655423911+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "595ac98de20b969136f0043aafb69d62bca2e791" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:38:18.787936045+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"Foo\", path := [] }, eid := \"bob\" })) — defineEntity for non-member bob returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:38:19.298252723+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"Album\", path := [] }, eid := \"edit\" })) — defineEntity for non-member edit returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:38:19.806759331+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"Action\", path := [] }, eid := \"p1\" })) — defineEntity for non-member p1 returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:38:20.310633707+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"Foo\", path := [] }, eid := \"y\" })) — defineEntity for non-member y returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:38:20.814316330+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"User\", path := [] }, eid := \"b\" })) — defineEntity for non-member b returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:38:21.312841205+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"User\", path := [] }, eid := \"bob\" })) — defineEntity for non-member bob returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:38:21.811673438+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"Photo\", path := [] }, eid := \"z\" })) — defineEntity for non-member z returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:38:22.310274243+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"Photo\", path := [] }, eid := \"view\" })) — defineEntity for non-member view returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:38:22.809207624+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"User\", path := [] }, eid := \"z\" })) — defineEntity for non-member z returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:38:23.318427403+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"Foo\", path := [] }, eid := \"z\" })) — defineEntity for non-member z returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:38:23.814701545+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:38:24.308816828+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:38:24.811971213+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:38:25.311232438+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:38:25.809383441+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:38:26.320148001+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:38:26.811778220+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:38:27.315226487+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:38:27.827791591+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:38:28.323954816+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "5999937607fc69598b335e45af574e0a631d8a85" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:38:43.018178813+00:00", "status": "failed", "tests": 106, "discards": 0, "time": "9000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"y\" },\n { ty := { id := \"Action\", path := [] }, eid := \"view\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }))],\n tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Action\", path := [] }))],\n tags := some (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"ghost\" },\n { ty := { id := \"User\", path := [] }, eid := \"b\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"alice\" },\n { ty := { id := \"User\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"User\", path := [] })),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"alice\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"b\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] })),\n (\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] })] },\n 4)) — validateWithLevel rejected policy p2 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:38:43.528041955+00:00", "status": "failed", "tests": 62, "discards": 0, "time": "5000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"p1\" },\n { ty := { id := \"Album\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.resource) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID\n { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 62 }))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"ghost\" }) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"x\" }) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\"))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 4 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 48 }))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"b\" }))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"bob\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"alice\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"bob\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 35 }) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"view\" }) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"alice\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"y\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"z\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\"))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"alice\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"z\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"b\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"b\" },\n { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 48 }) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\") }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID\n { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"bob\" },\n { ty := { id := \"Action\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"z\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 98 }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\"))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"bob\" })) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\")))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\")))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\"))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"x\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"edit\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"alice\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"x\" },\n { ty := { id := \"Action\", path := [] }, eid := \"view\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"alice\" }) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\") }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID\n { ty := { id := \"Photo\", path := [] }, eid := \"edit\" })) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"edit\" },\n { ty := { id := \"User\", path := [] }, eid := \"z\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration)) }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"view\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"p1\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Album\", path := [] })),\n (\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.decimal)))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"x\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"y\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }],\n context := Cedar.Data.Map.mk [] })] },\n 48)) — validateWithLevel rejected policy p0 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:38:44.037310246+00:00", "status": "failed", "tests": 80, "discards": 0, "time": "6000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"User\", path := [] }, eid := \"b\" },\n { ty := { id := \"User\", path := [] }, eid := \"edit\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"z\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 26 })))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"y\" }))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 19 })))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 54 }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 12 }))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\")))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"view\" },\n { ty := { id := \"Album\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 56 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Photo\", path := [] }, eid := \"alice\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\")))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"bob\" },\n { ty := { id := \"Action\", path := [] }, eid := \"alice\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\")))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 24 })) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { ty := { id := \"Album\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"b\" }) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Photo\", path := [] }, eid := \"a\" },\n { ty := { id := \"User\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"x\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"User\", path := [] }, eid := \"x\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"z\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"bob\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 29 })))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"edit\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))) }] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))],\n tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Album\", path := [] })),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := some (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Action\", path := [] }, eid := \"y\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Action\", path := [] }, eid := \"p1\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.decimal)))] })] },\n 48)) — validateWithLevel rejected policy p1 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:38:44.556262710+00:00", "status": "failed", "tests": 86, "discards": 0, "time": "7000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"alice\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"view\" },\n { ty := { id := \"Action\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"edit\" })))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\")) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"alice\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))) }] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.decimal))),\n (\"flag\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))],\n tags := some (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int)),\n (\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }))] }),\n ({ ty := { id := \"Action\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"ghost\" },\n { ty := { id := \"Album\", path := [] }, eid := \"view\" },\n { ty := { id := \"User\", path := [] }, eid := \"view\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int)),\n (\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Album\", path := [] }))] }),\n ({ ty := { id := \"Album\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] })] },\n 69)) — validateWithLevel rejected policy p2 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:38:45.061465139+00:00", "status": "failed", "tests": 116, "discards": 0, "time": "10000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"z\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 12 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\")) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 69 }))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"z\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 62 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID\n { ty := { id := \"Action\", path := [] }, eid := \"view\" }))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 54 }))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))) }] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))],\n tags := some (Cedar.Validation.CedarType.int) }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int)),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration)) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"y\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"x\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] })] },\n 6)) — validateWithLevel rejected policy p0 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:38:45.567878536+00:00", "status": "failed", "tests": 172, "discards": 0, "time": "12000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 81 }) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"bob\" },\n { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"z\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 49 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"bob\" },\n { ty := { id := \"Album\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.resource) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"y\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"User\", path := [] }, eid := \"a\" },\n { ty := { id := \"Action\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"z\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 28 }))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 4 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\"))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 36 }))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 84 })))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"p1\" })) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.resource) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Photo\", path := [] }, eid := \"view\" },\n { ty := { id := \"Action\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"alice\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\"))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\")) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true)) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"z\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"bob\" },\n { ty := { id := \"Action\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 79 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"p1\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 68 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"alice\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"alice\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 72 }) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"bob\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"view\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"z\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"p1\" },\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"bob\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"view\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"bob\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"y\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID\n { ty := { id := \"Action\", path := [] }, eid := \"x\" }))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"edit\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 96 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\")) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 94 }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 86 })) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"User\", path := [] }, eid := \"ghost\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"alice\" }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)))],\n tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))],\n tags := some (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"User\", path := [] }, eid := \"x\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime))),\n (\"name\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"z\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Album\", path := [] }, eid := \"bob\" }],\n context := Cedar.Data.Map.mk [] })] },\n 69)) — validateWithLevel rejected policy p2 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:38:46.089124433+00:00", "status": "failed", "tests": 12, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"User\", path := [] }, eid := \"ghost\" },\n { ty := { id := \"User\", path := [] }, eid := \"alice\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none }),\n ({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))],\n tags := some (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)) }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"name\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"z\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff))),\n (\"owner\",\n Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] })] },\n 8)) — validateWithLevel rejected policy p0 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:38:46.584103746+00:00", "status": "failed", "tests": 122, "discards": 0, "time": "9000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"z\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"alice\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"b\" }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 30 })) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"a\" }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\"))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"z\" }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))) }] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))],\n tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"z\" },\n { ty := { id := \"Album\", path := [] }, eid := \"alice\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"z\" }],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n { ty := { id := \"Album\", path := [] }, eid := \"edit\" },\n { ty := { id := \"Album\", path := [] }, eid := \"z\" }],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff))),\n (\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration)))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"x\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"y\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"y\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))] })] },\n 8)) — validateWithLevel rejected policy p1 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:38:47.097366387+00:00", "status": "failed", "tests": 141, "discards": 0, "time": "10000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\"))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"p1\" })))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"y\" }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"alice\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.resource) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"alice\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"x\" }))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID\n { ty := { id := \"Action\", path := [] }, eid := \"z\" }))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Photo\", path := [] }, eid := \"bob\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"z\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"a\" }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 31 })))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 60 }))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 27 }))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }))],\n tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.decimal))),\n (\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"x\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"z\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"view\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n { ty := { id := \"User\", path := [] }, eid := \"edit\" },\n { ty := { id := \"User\", path := [] }, eid := \"y\" }],\n context := Cedar.Data.Map.mk [] })] },\n 32)) — validateWithLevel rejected policy p1 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:38:47.607044336+00:00", "status": "failed", "tests": 157, "discards": 0, "time": "11000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"z\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Photo\", path := [] }, eid := \"p1\" },\n { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\") }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"z\" }))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"alice\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 47 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 83 })))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\")) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 28 })))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"bob\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\") }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"z\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"x\" }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"view\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"a\" }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 15 }))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\") }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"y\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"y\" }))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"x\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"y\" }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 48 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true)) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 31 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"alice\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"p1\" },\n { ty := { id := \"Action\", path := [] }, eid := \"z\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Photo\", path := [] }, eid := \"bob\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\")) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 36 }))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 4 }) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"edit\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\") }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"alice\" },\n { ty := { id := \"Album\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 73 }) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)) }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)))],\n tags := some (Cedar.Validation.CedarType.string) }),\n ({ id := \"User\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"a\", \"x\"]))],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"User\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"b\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"y\" },\n { ty := { id := \"User\", path := [] }, eid := \"y\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))] })] },\n 46)) — validateWithLevel rejected policy p1 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:38:48.122098454+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:38:48.616890277+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:38:49.122187367+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:38:49.630767895+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:38:50.139517722+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:38:50.636243827+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:38:51.133998974+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:38:51.643855052+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:38:52.147451502+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" }, { "experiment": "ci-run", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:38:52.659143146+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "251226be8514c65411287f55e6d1a4a9e48c9482" } ] }