{ "experiment": "smoke", "generated_at": "2026-04-29 19:11 UTC", "workload_docs": { "cedar-lean": [ { "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "tasks": [ { "property": "DecimalParseNegativeSignPreserved", "witnesses": [ { "test_fn": "witness_decimal_parse_negative_sign_preserved_case_neg_zero", "note": "minimal repro: \"-0.5\"" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "84fe9c6d4121f6fcb6b4f032cce0ae08f23ad8d4" ], "commit_subjects": [ "Fix parsing of decimal literals (#799)" ], "prs": [ 799 ], "summary": "Decimal.parse computed the result's sign from the parsed integer part\n(`if l ≥ 0 then add else subtract`). For inputs like \"-0.5\" the integer\npart is \"-0\", which `String.toInt?` returns as `0`, so the sign test\ntook the wrong branch and emitted `+0.5000` instead of `-0.5000`.\nThe fix tests the leading minus textually: `if !left.startsWith \"-\"`.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/Spec/Ext/Decimal.lean" ], "locations": [ { "file": "cedar-lean/Cedar/Spec/Ext/Decimal.lean", "line": 59, "symbol": "Cedar.Spec.Ext.Decimal.parse" } ], "patch": "patches/decimal_parse_negative_sign_preserved_84fe9c6_1.patch" }, "bug": { "short_name": "decimal_parse_negative_sign_preserved", "invariant": "If `Decimal.parse s = some d`, then a leading '-' in `s` must yield a non-positive `d` — i.e. textual sign is preserved through parsing.", "how_triggered": "Inferring sign from `l ≥ 0` instead of from the literal prefix `-` causes \"-0.\" inputs (whose integer part round-trips to 0) to be mis-signed: parse(\"-0.5\") returns `+0.5000`." } }, { "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "tasks": [ { "property": "DecimalParseNoUnderscore", "witnesses": [ { "test_fn": "witness_decimal_parse_no_underscore_case_int_part", "note": "minimal repro: \"1_2.34\"" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "a0c5812f171bcf142e43dedf8518d94becb0e11b" ], "commit_subjects": [ "fix behavior of Decimal.parse with underscores (#877)" ], "prs": [ 877 ], "summary": "Lean's `String.toInt?`/`String.toNat?` silently accept `_` characters\n(`String.toInt? \"1_2\" = some 12`). Cedar's spec disallows underscores in\ndecimal literals; without a guard the parser leaked Lean's behavior and\nlet inputs like \"1_2.34\" parse to 12.3400. The fix introduced\n`toInt?'`/`toNat?'` wrappers in `Cedar.Spec.Ext.Util` that reject any\ninput containing `_` before delegating.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/Spec/Ext/Util.lean" ], "locations": [ { "file": "cedar-lean/Cedar/Spec/Ext/Util.lean", "line": 12, "symbol": "Cedar.Spec.Ext.toInt?'" }, { "file": "cedar-lean/Cedar/Spec/Ext/Util.lean", "line": 19, "symbol": "Cedar.Spec.Ext.toNat?'" } ], "patch": "patches/decimal_parse_no_underscore_a0c5812_1.patch" }, "bug": { "short_name": "decimal_parse_no_underscore", "invariant": "If `Decimal.parse s = some _`, then `s` does not contain `_`.", "how_triggered": "Removing the `if str.contains '_' then .none else …` gates from `toInt?'`/`toNat?'` exposes Lean's lenient `String.toInt?` behavior to the parser, so `Decimal.parse \"1_2.34\"` returns `some 12.3400` instead of `none`." } }, { "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "tasks": [ { "property": "ValidateActionEntityNoAttrs", "witnesses": [ { "test_fn": "witness_validate_action_entity_no_attrs_case_action_with_attr", "note": "Action::\"a\" with attrs={x:1} — fix rejects, bug accepts" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "d7ab5abeff0d55f23914b5f2257da8fe3e917002" ], "commit_subjects": [ "Fix validator soundness when `updateSchema` is not used (#648)" ], "prs": [ 648 ], "summary": "Validator soundness gap: `validateEntities` did not verify that action\nentities in the entity store have empty `attrs` (and empty `tags`)\nunless callers first invoked `updateSchema` to inject synthetic\nEntitySchemaEntries. Cedar's spec forbids action entities from carrying\nattributes — without the check, an ill-typed entity store passes\nvalidation, breaking the type-soundness assumption used by every\nauthorization theorem in `Thm/Validation/`. The fix folded the action\nchecks directly into `instanceOfSchemaEntry` (combining\n`instanceOfEntitySchema` and `instanceOfActionSchema` into the new\n`instanceOfSchema`), removing the `updateSchema` workaround entirely.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/Validation/RequestEntityValidator.lean" ], "locations": [ { "file": "cedar-lean/Cedar/Validation/RequestEntityValidator.lean", "line": 132, "symbol": "Cedar.Validation.instanceOfSchema.instanceOfActionSchemaEntry" } ], "patch": "patches/validator_action_entity_no_attrs_d7ab5ab_1.patch" }, "bug": { "short_name": "validator_action_entity_no_attrs", "invariant": "If `validateEntities schema entities = .ok ()`, then every action entity in `entities` (member of any environment's `acts`) has empty `attrs`.", "how_triggered": "Short-circuiting the `data.attrs == Map.empty` guard in `instanceOfActionSchemaEntry` (changing the test to `(data.attrs == Map.empty) || true`) accepts action entities with non-empty `attrs`. The witness installs `Action::\"a\"` with `{x: 1}` and observes `validateEntities` returning `.ok ()`." } }, { "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "tasks": [ { "property": "SmtEncodeStringBalancedQuotes", "witnesses": [ { "test_fn": "witness_smt_encode_string_balanced_quotes_case_quote_in_middle", "note": "input \"x\\\"y\" — fix doubles the inner quote, bug emits malformed SMT" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "84708ca6ab57d462306429d345b1414842330127" ], "commit_subjects": [ "Fix SMT encoding of string literals (#640)" ], "prs": [ 640 ], "summary": "The SMT encoder did not double `\"` characters inside string literals,\nviolating the SMT-LIB 2.7 standard which prescribes `\"` (a doubled quote)\nas the only escape sequence inside a string literal. Inputs containing\n`\"` produced malformed SMT, breaking symbolic verification soundness:\ndownstream solvers either reject the query or silently misparse it.\n\nThe fix added the doubling rule. Cedar-lean has since refactored\n`encodeString` to per-character encoding (also handling `\\\\` and\nnon-ASCII via `\\u{…}`), but the doubling step at the `\"` branch is\nstill load-bearing.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/SymCC/Encoder.lean" ], "locations": [ { "file": "cedar-lean/Cedar/SymCC/Encoder.lean", "line": 170, "symbol": "Cedar.SymCC.encodeString" } ], "patch": "patches/smt_encode_string_balanced_quotes_84708ca_1.patch" }, "bug": { "short_name": "smt_encode_string_balanced_quotes", "invariant": "For any string `s`, the SMT literal `\"…encodeString s…\"` contains an even number of `\"` characters (every literal `\"` inside is doubled).", "how_triggered": "Replacing `return \"\\\"\\\"\"` (doubled quote) with `return \"\\\"\"` (single quote) in the `c = '\"'` branch of `encodeString` lets a single `\"` leak through; the witness `x\"y` then encodes to `\"x\"y\"` (3 `\"` chars, odd) instead of `\"x\"\"y\"` (4, even)." } }, { "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "tasks": [ { "property": "ValidateRejectsUndeclaredEntities", "witnesses": [ { "test_fn": "witness_validate_rejects_undeclared_entities_case_unknown_principal", "note": "policy with `true || (principal == Foo::\"x\")`; fix rejects undeclared Foo, bug accepts" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "eb3bfff4fcebff716ae86983ae78fd6407e13290" ], "commit_subjects": [ "Make lean validator check entity type and action existence before type checking (#779)" ], "prs": [ 779 ], "summary": "Validator entity-existence soundness gap. The Lean typechecker\nshort-circuits on type errors (e.g. on `true || expr`, it returns\n`bool .tt` without descending into `expr`), so a policy referencing an\nundeclared entity type inside a short-circuited subexpression passed\nLean validation while the Rust validator (which performs entity\nexistence as a separate pass) rejected it. The two validators\ndisagreed, breaking differential soundness.\n\nThe fix added `checkEntities`, an unconditional pre-pass at the top of\n`typecheckPolicyWithEnvironments` that traverses each policy's `Expr`\nand rejects any reference to an entity UID/type not declared in the\nschema.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/Validation/Validator.lean" ], "locations": [ { "file": "cedar-lean/Cedar/Validation/Validator.lean", "line": 217, "symbol": "Cedar.Validation.typecheckPolicyWithEnvironments" } ], "patch": "patches/validate_rejects_undeclared_entities_eb3bfff_1.patch" }, "bug": { "short_name": "validate_rejects_undeclared_entities", "invariant": "If `validate policies schema = .ok ()`, then for every policy `p` in `policies`, `checkEntities schema p.toExpr = .ok ()` — i.e. `validate` agrees with `checkEntities` on the entity-existence question.", "how_triggered": "Removing the `(checkEntities schema policy.toExpr).mapError ...` line from `typecheckPolicyWithEnvironments` lets the typechecker short-circuit through any reference to an undeclared entity. The witness encodes `permit(principal, action, resource) when { true || (principal == Foo::\"x\") };` — `true || …` types as `bool .tt` without inspecting the right operand, so `validate` returns `.ok ()` despite `Foo` being absent from the schema." } }, { "mutations": [ "validate_request_principal_exists_1a76346_1" ], "tasks": [ { "property": "ValidateRequestPrincipalExists", "witnesses": [ { "test_fn": "witness_validate_request_principal_exists_case_ghost_user", "note": "schema with Photo + Action::\"a\" applies-to-principal=[User], request with principal=User::\"ghost\"; fix rejects, bug accepts" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "1a7634653370892318d14bd9213668bf23c022de" ], "commit_subjects": [ "Add `Environment.WellFormed` as a new precondition for type checking and fix relevant proofs (#658)" ], "prs": [ 658 ], "summary": "Request-validation soundness gap. Pre-#658, `instanceOfEntityType` only\nverified that the entity's literal type matched the expected request\ntype (and, for enum types, that the eid was a valid member). Non-enum\nentities passed regardless of whether they were declared anywhere in\nthe schema, so a 'ghost' principal like `User::\"ghost\"` matched a\nrequest type even when `User` had no entry in `env.ets`. Downstream\ntypecheckers then assume requests are well-formed, so the soundness gap\nsilently propagates to authorization decisions.\n\nThe fix added `Environment.WellFormed` as a precondition and reworked\n`instanceOfEntityType` to additionally require that the entity be\npresent in either `env.ets` or `env.acts`.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/Validation/RequestEntityValidator.lean" ], "locations": [ { "file": "cedar-lean/Cedar/Validation/RequestEntityValidator.lean", "line": 52, "symbol": "Cedar.Validation.instanceOfEntityType" } ], "patch": "patches/validate_request_principal_exists_1a76346_1.patch" }, "bug": { "short_name": "validate_request_principal_exists", "invariant": "If `validateRequest schema request = .ok ()`, then `request.principal` is declared in the schema (either `schema.ets.isValidEntityUID` or `schema.acts.contains`).", "how_triggered": "Replacing the existence check `(env.ets.isValidEntityUID e || env.acts.contains e)` in `instanceOfEntityType` with `true` collapses the second conjunct, so any UID whose entity type matches the request type passes — including `User::\"ghost\"` against a schema that has no `User` entity declared." } }, { "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "tasks": [ { "property": "SchemaWellFormedNoSingletonBools", "witnesses": [ { "test_fn": "witness_schema_well_formed_no_singleton_bools_case_attr_bool_tt", "note": "schema declares User.flag : (.bool .tt) — fix rejects via validateLifted, bug accepts" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "e785e2ed37e0ec9f4c4ecb42f84f794c4735b11f" ], "commit_subjects": [ "Require that well-formed `TypeEnv` does not have singleton Bool types (#689)" ], "prs": [ 689 ], "summary": "TypeEnv well-formedness gap. The Cedar typechecker's soundness proofs\nassume every schema-level type is *lifted* — i.e. boolean types appear\nonly as `.bool .anyBool`, never as the singleton `.bool .tt` or\n`.bool .ff`. Without enforcement, a malicious schema declaring an\nattribute as `(.bool .tt)` would pass `Schema.validateWellFormed`, then\nthe typechecker would prove the literal-specific judgement (`flag :\nbool .tt`) about user-provided attribute data — unsound under the\noperational semantics, since the user can put `flag = false` in their\nentity.\n\nThe fix added `CedarType.validateLifted` and called it on every schema\nentry's attribute and tag types from inside\n`StandardSchemaEntry.validateWellFormed` and\n`ActionSchemaEntry.validateWellFormed`.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/Validation/EnvironmentValidator.lean" ], "locations": [ { "file": "cedar-lean/Cedar/Validation/EnvironmentValidator.lean", "line": 126, "symbol": "Cedar.Validation.StandardSchemaEntry.validateWellFormed" } ], "patch": "patches/schema_well_formed_no_singleton_bools_e785e2e_1.patch" }, "bug": { "short_name": "schema_well_formed_no_singleton_bools", "invariant": "If `Schema.validateWellFormed schema = .ok ()`, then for every standard entity entry in `schema.ets`, the attribute record passes `CedarType.validateLifted` (no `.bool .tt` / `.bool .ff` nested anywhere).", "how_triggered": "Removing the `(CedarType.record entry.attrs).validateLifted` line from `StandardSchemaEntry.validateWellFormed` lets the validator accept entities whose attributes have singleton-bool types. The witness builds a schema with `User.flag : (.bool .tt)` and observes `Schema.validateWellFormed` returning `.ok ()` instead of `\"bool type is not lifted\"`." } }, { "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "tasks": [ { "property": "DefineEntityRejectsNonMember", "witnesses": [ { "test_fn": "witness_define_entity_rejects_non_member_case_zzz", "note": "User enum [alice, bob], call defineEntity for User::\"zzz\"; fix throws, bug returns U_enc_m2" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "fe5a0464ef36716ff37ced2d7a4e62ef91a23d7e" ], "commit_subjects": [ "Fix escaping for euid in term protobuf (#855)" ], "prs": [ 855 ], "summary": "SymCC encoder soundness gap. Pre-#855, `defineEntity` looked up an\nenum member's index via `members.idxOf entity.eid` (the non-Option\nvariant). For an entity whose type has a registered enum but whose\n`eid` is *not* a declared member, `List.idxOf` returns\n`members.length` — an index outside the legal range. The encoder\nthen emits `{tyEnc}_m{members.length}` as the SMT identifier,\nreferencing a member that does not exist. Solvers either return\nspurious UNSAT or accept an unsound model; either way the symbolic\nanalysis loses its meaning.\n\nThe fix replaced `idxOf` with `idxOf?` and explicitly threw an\n`IO.userError` on the `none` case.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/SymCC/Encoder.lean" ], "locations": [ { "file": "cedar-lean/Cedar/SymCC/Encoder.lean", "line": 269, "symbol": "Cedar.SymCC.Encoder.defineEntity" } ], "patch": "patches/encoder_define_entity_rejects_non_member_fe5a046_1.patch" }, "bug": { "short_name": "encoder_define_entity_rejects_non_member", "invariant": "If `defineEntity tyEnc entity` returns `Ok` for an entity whose type is registered as an enum, then `entity.eid` is one of the declared members.", "how_triggered": "Replacing the inner `match members.idxOf? entity.eid with | .some idx => … | .none => throw …` with the single line `return s!\"{enumId tyEnc (members.idxOf entity.eid)}\"` lets `defineEntity` succeed for non-member eids: `List.idxOf` returns `members.length`, producing the bogus identifier `U_enc_m2` for `[\"alice\", \"bob\"]`-membered `User::\"zzz\"`." } }, { "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "tasks": [ { "property": "ValidateWithLevelAccepts", "witnesses": [ { "test_fn": "witness_validate_with_level_accepts_case_action_in_action", "note": "policy `permit when { Action::\"a\" in Action::\"a\" }`, level=1; fix accepts, bug rejects with .levelError" } ] } ], "source": { "repo": "https://github.com/cedar-policy/cedar-spec", "commits": [ "c186f0f4d34c7f244836279e0b4aa6535e1ce252" ], "commit_subjects": [ "Update level checking to allow access to literals equal to environment action (#573)" ], "prs": [ 573 ], "summary": "Level-checker completeness gap. Pre-#573, `TypedExpr.checkEntityAccessLevel`\nhad no case for literal entity UIDs in entity-access positions, so the\nfallthrough `_, _ => false` rejected expressions like `Action::\"a\" in\nAction::\"a\"` (where the action literal is the left operand of `.mem`).\nPolicies that used a literal action in any entity-access position\nfailed level checking with `.levelError` even though they were\nsemantically valid. Rust's level checker accepted them, breaking\nLean/Rust differential parity.\n\nThe fix added the case `.lit (.entityUID euid) _, _ => euid == env.reqty.action`\nso a literal matching the environment's action passes level checking.\nThis is a *completeness* fix (the buggy validator is over-strict, not\nunsound), but ETNA's pattern still applies: the witness asserts a\nknown-good policy is accepted, and the variant patch causes the witness\nto fail with `.levelError`.\n" }, "injection": { "kind": "patch", "files": [ "cedar-lean/Cedar/Validation/Levels.lean" ], "locations": [ { "file": "cedar-lean/Cedar/Validation/Levels.lean", "line": 61, "symbol": "Cedar.Validation.TypedExpr.checkEntityAccessLevel" } ], "patch": "patches/validate_with_level_accepts_c186f0f_1.patch" }, "bug": { "short_name": "validate_with_level_accepts", "invariant": "For the chosen `(policies, schema, level)` fixture, `validateWithLevel` returns `.ok ()`. (A unit-test-style invariant: the level checker should not over-reject literal action references.)", "how_triggered": "Replacing `euid == env.reqty.action` with `false` in the literal-entity case of `checkEntityAccessLevel` makes the level checker reject `Action::\"a\" in Action::\"a\"`. The witness policy's level check then fails with `.levelError`." } } ] }, "metrics": [ { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:04:01.583028+00:00", "status": "failed", "tests": 198, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"-0.8335\") — Decimal.parse \"-0.8335\" = some { toUInt64 := 8335 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:04:03.660673+00:00", "status": "failed", "tests": 644, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"-0.2\") — Decimal.parse \"-0.2\" = some { toUInt64 := 2000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:04:04.412162+00:00", "status": "failed", "tests": 169, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-0.6\") — Decimal.parse \"-0.6\" = some { toUInt64 := 6000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:04:05.259963+00:00", "status": "failed", "tests": 852, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"-0.7\") — Decimal.parse \"-0.7\" = some { toUInt64 := 7000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:04:05.984666+00:00", "status": "failed", "tests": 687, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"-0.4\") — Decimal.parse \"-0.4\" = some { toUInt64 := 4000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:04:06.722523+00:00", "status": "failed", "tests": 701, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"-0.61\") — Decimal.parse \"-0.61\" = some { toUInt64 := 6100 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:04:07.458864+00:00", "status": "failed", "tests": 970, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"-0.2059\") — Decimal.parse \"-0.2059\" = some { toUInt64 := 2059 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:04:08.196060+00:00", "status": "failed", "tests": 451, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"-0.7\") — Decimal.parse \"-0.7\" = some { toUInt64 := 7000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:04:09.016752+00:00", "status": "failed", "tests": 710, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"-0.812\") — Decimal.parse \"-0.812\" = some { toUInt64 := 8120 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:04:09.769321+00:00", "status": "failed", "tests": 175, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-0.518\") — Decimal.parse \"-0.518\" = some { toUInt64 := 5180 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:04:10.668700+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:04:11.610530+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:04:12.381866+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:04:13.195293+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:04:14.057460+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:04:14.941+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:04:15.810290+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:04:17.034838+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:04:18.166042+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNegativeSignPreserved", "mutations": [ "decimal_parse_negative_sign_preserved_84fe9c6_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:04:19.134049+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"-0.5\" = some { toUInt64 := 5000 } but a leading '-' must yield a non-positive decimal", "hash": "69347aee4f2b05325618ce5dea99b3e93268477f" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:04:33.120127+00:00", "status": "failed", "tests": 59, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"-5927.8_41\") — Decimal.parse \"-5927.8_41\" = some { toUInt64 := 18446744073650280775 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:04:35.008595+00:00", "status": "failed", "tests": 26, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-5366.92_6\") — Decimal.parse \"-5366.92_6\" = some { toUInt64 := 18446744073655890690 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:04:35.808861+00:00", "status": "failed", "tests": 12, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"2_71.94\") — Decimal.parse \"2_71.94\" = some { toUInt64 := 2719400 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:04:36.623996+00:00", "status": "failed", "tests": 12, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-30.43_3\") — Decimal.parse \"-30.43_3\" = some { toUInt64 := 18446744073709251183 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:04:37.382648+00:00", "status": "failed", "tests": 2, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"0_2.956\") — Decimal.parse \"0_2.956\" = some { toUInt64 := 29560 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:04:38.152187+00:00", "status": "failed", "tests": 43, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-2_73.8_5\") — Decimal.parse \"-2_73.8_5\" = some { toUInt64 := 18446744073706820766 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:04:38.966212+00:00", "status": "failed", "tests": 70, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-61_0.408\") — Decimal.parse \"-61_0.408\" = some { toUInt64 := 18446744073703447536 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:04:39.811352+00:00", "status": "failed", "tests": 9, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"3_1.923\") — Decimal.parse \"3_1.923\" = some { toUInt64 := 319230 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:04:40.584810+00:00", "status": "failed", "tests": 15, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"-797.87_5\") — Decimal.parse \"-797.87_5\" = some { toUInt64 := 18446744073701580741 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:04:41.329043+00:00", "status": "failed", "tests": 75, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"95_0.94\") — Decimal.parse \"95_0.94\" = some { toUInt64 := 9509400 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:04:42.076104+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:04:42.872484+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:04:43.664654+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:04:44.643524+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:04:45.874295+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:04:46.775052+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:04:47.600297+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:04:48.482455+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:04:49.264721+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DecimalParseNoUnderscore", "mutations": [ "decimal_parse_no_underscore_a0c5812_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:04:50.268573+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Decimal.parse \"1_2.34\" = some { toUInt64 := 123400 } but underscores are disallowed", "hash": "37fe968e947ec9fbe00f066861b69d78d99565bc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:05:12.756172+00:00", "status": "failed", "tests": 493687, "discards": 0, "time": "23446000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))],\n tags := some (Cedar.Validation.CedarType.entity { id := \"Action\", path := [] }) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"p1\" },\n { attrs := Cedar.Data.Map.mk\n [(\"0AAAC3Ea3 bA2`c\\\\CaC>BNcC5<3010,0\\x0f:!cbAbE;UB\",\n Cedar.Spec.Value.set\n (Cedar.Data.Set.mk [Cedar.Spec.Value.prim (Cedar.Spec.Prim.int { toUInt64 := 60 })])),\n (\":C3H2\\\\B,:\\x16;\\x0b`B02\\x1d4\\\"0GCA\\x0f:;B \\\\0BC ;9,CAAA\\x1b K2`01<,;A;CA/ /I,Jb ,B`\\x1213\\\\ bC2/1b(\\tA;:%cD3\",\n Cedar.Spec.Value.prim (Cedar.Spec.Prim.int { toUInt64 := 61 }))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity Action::\"p1\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:05:38.847959+00:00", "status": "failed", "tests": 796618, "discards": 0, "time": "36904000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.entity { id := \"Foo\", path := [] }) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.decimal))),\n (\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Action\", path := [] }))] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"edit\" },\n { attrs := Cedar.Data.Map.mk\n [(\":\\\\ 0113`2;/\",\n Cedar.Spec.Value.set (Cedar.Data.Set.mk [Cedar.Spec.Value.prim (Cedar.Spec.Prim.string \"age\")])),\n (\"Cb0\",\n Cedar.Spec.Value.prim\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"ghost\" })),\n (\"\\\\a \\x00\\x04\", Cedar.Spec.Value.record (Cedar.Data.Map.mk []))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity Photo::\"edit\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:06:16.802205+00:00", "status": "failed", "tests": 24604, "discards": 0, "time": "1074000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"x\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt))),\n (\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"x\" },\n { attrs := Cedar.Data.Map.mk\n [(\"\\x01\",\n Cedar.Spec.Value.prim\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"a\" })),\n (\"\\x033,\",\n Cedar.Spec.Value.set\n (Cedar.Data.Set.mk\n [Cedar.Spec.Value.prim\n (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n Cedar.Spec.Value.prim\n (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"z\" })])),\n (\"1\",\n Cedar.Spec.Value.prim\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"x\" }))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity Album::\"x\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:06:18.772233+00:00", "status": "failed", "tests": 18876, "discards": 0, "time": "788000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { attrs := Cedar.Data.Map.mk\n [(\"\\x04,ac\\x1f1A9\\\\\\x05\\\\3B0 4Ac%,1C;;CC394\\x06c,;:`\", Cedar.Spec.Value.set (Cedar.Data.Set.mk [])),\n (\"Bc-;802\\x18C2BA,`2<3\\\\>\\x1a :`0/A;:'2\\x1e-aAb;BA1 \\\"&C\",\n Cedar.Spec.Value.record\n (Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Spec.Value.prim\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"p1\" }))]))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity Album::\"a\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:06:20.369790+00:00", "status": "failed", "tests": 216892, "discards": 0, "time": "10085000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime))),\n (\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"x\" },\n { attrs := Cedar.Data.Map.mk [], ancestors := Cedar.Data.Set.mk [], tags := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"bob\" },\n { attrs := Cedar.Data.Map.mk [(\"`$01+\\x06C;,\", Cedar.Spec.Value.prim (Cedar.Spec.Prim.int { toUInt64 := 89 }))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity Photo::\"bob\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:06:31.248943+00:00", "status": "failed", "tests": 35267, "discards": 0, "time": "2720000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"ghost\" },\n { attrs := Cedar.Data.Map.mk\n [(\"\\x1dbA/B\\x1c2,,c0B\\\\1:a1CC`, 1,>\\x11;2c:\\x18Cc,0\\x12,3`b1;33,a1\\\\BA\",\n Cedar.Spec.Value.set (Cedar.Data.Set.mk []))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity Album::\"ghost\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:06:35.183657+00:00", "status": "failed", "tests": 33560, "discards": 0, "time": "1854000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Action\", path := [] })),\n (\"owner\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int)),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"bob\" },\n { attrs := Cedar.Data.Map.mk\n [(\"2 20`9cC1#`bB\\x19B:0\\\"32:`C2B\\x07C:3\\x0d;C\\\\\\x05)C;\\x06/0*;a2 \",\n Cedar.Spec.Value.set\n (Cedar.Data.Set.mk\n [Cedar.Spec.Value.prim (Cedar.Spec.Prim.int { toUInt64 := 25 }),\n Cedar.Spec.Value.prim (Cedar.Spec.Prim.bool true)]))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity Foo::\"bob\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:06:38.360191+00:00", "status": "failed", "tests": 117972, "discards": 0, "time": "5596000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))],\n tags := some (Cedar.Validation.CedarType.string) }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.int) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"bob\" },\n { attrs := Cedar.Data.Map.mk\n [(\"\\x14:1Ca3b\\x14G,B\\\\#3AF9\\x0b3;cC\", Cedar.Spec.Value.prim (Cedar.Spec.Prim.string \"flag\"))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity Album::\"bob\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:06:44.771176+00:00", "status": "failed", "tests": 300785, "discards": 0, "time": "13034000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool))),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }))],\n tags := none }),\n ({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))],\n tags := some (Cedar.Validation.CedarType.string) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int)),\n (\"name\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"a\" },\n { attrs := Cedar.Data.Map.mk\n [(\"':-3\\x0012` T :D,``::%c.`110A;c)03/:1?B\\\\\\x14Cb,c4. b1c>:b\\\\\\x00b,`\",\n Cedar.Spec.Value.set\n (Cedar.Data.Set.mk\n [Cedar.Spec.Value.prim (Cedar.Spec.Prim.bool false),\n Cedar.Spec.Value.prim\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"bob\" })])),\n (\"1/aA(1,,\\\\ \\x0e`B `B;%3\\\\ acA0\\\\c/b/A\\x18/a1A0caA;;;E\\x10\",\n Cedar.Spec.Value.prim (Cedar.Spec.Prim.int { toUInt64 := 28 }))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity Photo::\"a\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:06:58.634961+00:00", "status": "failed", "tests": 178026, "discards": 0, "time": "8328000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))] })] },\n Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"edit\" },\n { attrs := Cedar.Data.Map.mk\n [(\"0\\t,A\\x0721\\\\0c\\t2\\x122\",\n Cedar.Spec.Value.record\n (Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Spec.Value.prim\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"x\" })),\n (\"flag\",\n Cedar.Spec.Value.prim\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"view\" }))])),\n (\"1A;1/\\\\ c;\\n\\x16\\x14\\x04a/\\x130A\\x12A\\x193\",\n Cedar.Spec.Value.set\n (Cedar.Data.Set.mk\n [Cedar.Spec.Value.prim\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }),\n Cedar.Spec.Value.prim (Cedar.Spec.Prim.bool false)])),\n (\"a\\x13`\\\\\\x05C\",\n Cedar.Spec.Value.prim\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"bob\" }))],\n ancestors := Cedar.Data.Set.mk [],\n tags := Cedar.Data.Map.mk [] })])) — validateEntities passed but action entity Photo::\"edit\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:07:07.881930+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:07:08.743406+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:07:09.510571+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:07:10.423649+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:07:11.269100+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:07:12.327410+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:07:13.177533+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:07:14.008674+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:07:14.778635+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateActionEntityNoAttrs", "mutations": [ "validator_action_entity_no_attrs_d7ab5ab_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:07:15.597432+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateEntities passed but action entity Action::\"a\" has non-empty attrs", "hash": "0c4df4f1a17bf9d3546a5d85cab9768520f277a4" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:07:28.629725+00:00", "status": "failed", "tests": 37, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"B\\x1eA\\\"c\\x0e:\\x15a\\x10c,12\\\\\\x1b\\x0d\\\\\") — encodeString(\"B\\x1eA\\\"c\\x0e:\\x15a\\x10c,12\\\\\\x1b\\x0d\\\\\") wrapped to \"\\\"B\\\\u{1e}A\\\"c\\\\u{e}:\\\\u{15}a\\\\u{10}c,12\\\\u{5c}\\\\u{1b}\\\\u{d}\\\\u{5c}\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:07:30.487627+00:00", "status": "failed", "tests": 43, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"0b\\\";\\\\,,\\x08/C\\x06c\\x1b:b;b\\x1faba;\") — encodeString(\"0b\\\";\\\\,,\\x08/C\\x06c\\x1b:b;b\\x1faba;\") wrapped to \"\\\"0b\\\";\\\\u{5c},,\\\\u{8}/C\\\\u{6}c\\\\u{1b}:b;b\\\\u{1f}aba;\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:07:31.235490+00:00", "status": "failed", "tests": 44, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"12\\x1e\\x19CC:)20\\\"\\t/c\\x0e;\") — encodeString(\"12\\x1e\\x19CC:)20\\\"\\t/c\\x0e;\") wrapped to \"\\\"12\\\\u{1e}\\\\u{19}CC:)20\\\"\\\\u{9}/c\\\\u{e};\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:07:31.980354+00:00", "status": "failed", "tests": 35, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\":A:b\\tCB\\x0f03bb\\\\\\x18:\\x0e`\\x03\\\" 2,\\x03;\\x11Ba:/2\") — encodeString(\":A:b\\tCB\\x0f03bb\\\\\\x18:\\x0e`\\x03\\\" 2,\\x03;\\x11Ba:/2\") wrapped to \"\\\":A:b\\\\u{9}CB\\\\u{f}03bb\\\\u{5c}\\\\u{18}:\\\\u{e}`\\\\u{3}\\\" 2,\\\\u{3};\\\\u{11}Ba:/2\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:07:32.730356+00:00", "status": "failed", "tests": 57, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"\\\\C\\x06/,B\\n\\\\\\x1c\\\" ;`b5 2\\x0b`\\tbb\\x12C0\\x08\\x1fB22:\\x053.C/,,\\\\\\x1f1aC\\\\! 13\\x03\\n\") — encodeString(\"\\\\C\\x06/,B\\n\\\\\\x1c\\\" ;`b5 2\\x0b`\\tbb\\x12C0\\x08\\x1fB22:\\x053.C/,,\\\\\\x1f1aC\\\\! 13\\x03\\n\") wrapped to \"\\\"\\\\u{5c}C\\\\u{6}/,B\\\\u{a}\\\\u{5c}\\\\u{1c}\\\" ;`b5 2\\\\u{b}`\\\\u{9}bb\\\\u{12}C0\\\\u{8}\\\\u{1f}B22:\\\\u{5}3.C/,,\\\\u{5c}\\\\u{1f}1aC\\\\u{5c}! 13\\\\u{3}\\\\u{a}\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:07:33.473836+00:00", "status": "failed", "tests": 36, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"\\x0bc\\x04c11;/`1 \\x15\\x19:\\\":0b1:0\") — encodeString(\"\\x0bc\\x04c11;/`1 \\x15\\x19:\\\":0b1:0\") wrapped to \"\\\"\\\\u{b}c\\\\u{4}c11;/`1 \\\\u{15}\\\\u{19}:\\\":0b1:0\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:07:34.251305+00:00", "status": "failed", "tests": 84, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(\"\\\\\\\\b1aH3@ a`\\\\b\\\"\\\\`,A Q@b\\x0c0JcC1:BC,,\\\\\\x0b\\tQ`3\\\\H\") — encodeString(\"\\\\\\\\b1aH3@ a`\\\\b\\\"\\\\`,A Q@b\\x0c0JcC1:BC,,\\\\\\x0b\\tQ`3\\\\H\") wrapped to \"\\\"\\\\u{5c}\\\\u{5c}b1aH3@ a`\\\\u{5c}b\\\"\\\\u{5c}`,A Q@b\\\\u{c}0JcC1:BC,,\\\\u{5c}\\\\u{b}\\\\u{9}Q`3\\\\u{5c}H\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:07:35.016999+00:00", "status": "failed", "tests": 43, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"\\x14Cbac`3;AAB\\\\;,\\\\!A`:c0\\\"3\\n,c\\x0423\") — encodeString(\"\\x14Cbac`3;AAB\\\\;,\\\\!A`:c0\\\"3\\n,c\\x0423\") wrapped to \"\\\"\\\\u{14}Cbac`3;AAB\\\\u{5c};,\\\\u{5c}!A`:c0\\\"3\\\\u{a},c\\\\u{4}23\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:07:35.752862+00:00", "status": "failed", "tests": 39, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"Cb\\x1e`1\\x18A\\x1c1Ac0B\\x1a2b1ba//3`c0 \\\",\\x19\") — encodeString(\"Cb\\x1e`1\\x18A\\x1c1Ac0B\\x1a2b1ba//3`c0 \\\",\\x19\") wrapped to \"\\\"Cb\\\\u{1e}`1\\\\u{18}A\\\\u{1c}1Ac0B\\\\u{1a}2b1ba//3`c0 \\\",\\\\u{19}\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:07:36.515640+00:00", "status": "failed", "tests": 35, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(\"0c\\\\cc2A\\x17BA,\\x04!\\\"2A,a:a\\x08`\\\\:B\") — encodeString(\"0c\\\\cc2A\\x17BA,\\x04!\\\"2A,a:a\\x08`\\\\:B\") wrapped to \"\\\"0c\\\\u{5c}cc2A\\\\u{17}BA,\\\\u{4}!\\\"2A,a:a\\\\u{8}`\\\\u{5c}:B\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:07:37.282471+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:07:38.038822+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:07:38.793632+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:07:39.557821+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:07:40.315828+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:07:41.048878+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:07:41.794675+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:07:42.571402+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:07:43.327593+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SmtEncodeStringBalancedQuotes", "mutations": [ "smt_encode_string_balanced_quotes_84708ca_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:07:44.080471+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "encodeString(\"x\\\"y\") wrapped to \"\\\"x\\\"y\\\"\" has 3 '\"' (odd; malformed SMT)", "hash": "5d688770bded024af282bbf5fa7341c8afdb8385" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:07:57.256600+00:00", "status": "failed", "tests": 6535, "discards": 0, "time": "416000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"z\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] }),\n ({ ty := { id := \"Album\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"x\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Photo\", path := [] }, eid := \"x\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"z\" },\n { ty := { id := \"User\", path := [] }, eid := \"b\" }],\n context := Cedar.Data.Map.mk [] })] })) — validate passed but policy p0 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:07:59.471684+00:00", "status": "failed", "tests": 70428, "discards": 0, "time": "4589000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none }),\n ({ id := \"Photo\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"a\", \"y\"]))],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"z\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Foo\", path := [] }, eid := \"y\" },\n { ty := { id := \"User\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk [] })] })) — validate passed but policy p1 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:08:04.826648+00:00", "status": "failed", "tests": 95064, "discards": 0, "time": "6833000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"bob\" },\n { ty := { id := \"User\", path := [] }, eid := \"b\" }],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Foo\", path := [] }))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Foo\", path := [] }, eid := \"view\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }))] })] })) — validate passed but policy p2 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:08:12.404284+00:00", "status": "failed", "tests": 11211, "discards": 0, "time": "694000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"ghost\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }],\n context := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] }),\n ({ ty := { id := \"Album\", path := [] }, eid := \"y\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"edit\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"x\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"view\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] })] })) — validate passed but policy p2 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:08:13.848141+00:00", "status": "failed", "tests": 18030, "discards": 0, "time": "1124000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 60 }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 7 })))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"a\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Foo\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk []))],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"z\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"x\" },\n { ty := { id := \"User\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration)))] }),\n ({ ty := { id := \"Album\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"view\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"view\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"y\" }],\n context := Cedar.Data.Map.mk [] })] })) — validate passed but policy p0 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:08:15.809621+00:00", "status": "failed", "tests": 66831, "discards": 0, "time": "4425000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"view\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime))),\n (\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))] })] })) — validate passed but policy p2 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:08:21.206446+00:00", "status": "failed", "tests": 11402, "discards": 0, "time": "882000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] }],\n { ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"x\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Album\", path := [] }, eid := \"alice\" }],\n context := Cedar.Data.Map.mk [] })] })) — validate passed but policy p2 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:08:22.977891+00:00", "status": "failed", "tests": 99213, "discards": 0, "time": "7031000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"User\", path := [] }, eid := \"z\" }],\n context := Cedar.Data.Map.mk\n [(\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"x\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"z\" },\n { ty := { id := \"User\", path := [] }, eid := \"b\" }],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))] })] })) — validate passed but policy p2 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:08:30.931199+00:00", "status": "failed", "tests": 11424, "discards": 0, "time": "762000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"User\", path := [] }, eid := \"b\" }],\n context := Cedar.Data.Map.mk [] })] })) — validate passed but policy p0 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:08:32.507778+00:00", "status": "failed", "tests": 26103, "discards": 0, "time": "1678000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"User\", path := [] }, eid := \"p1\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))] })] })) — validate passed but policy p0 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:08:35.024488+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:08:35.761883+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:08:36.648204+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:08:37.393185+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:08:38.184916+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:08:38.983247+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:08:39.747648+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:08:40.512394+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:08:41.278096+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRejectsUndeclaredEntities", "mutations": [ "validate_rejects_undeclared_entities_eb3bfff_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:08:42.066653+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validate passed but policy p0 references undeclared entities", "hash": "966603cf35b573d77fa24c60f42a7dccb76b1c1a" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:08:57.320528+00:00", "status": "failed", "tests": 5553, "discards": 0, "time": "55000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk\n [{ id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int)),\n (\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration)))] })] },\n { principal := { ty := { id := \"Album\", path := [] }, eid := \"b\" },\n action := { ty := { id := \"Album\", path := [] }, eid := \"bob\" },\n resource := { ty := { id := \"Foo\", path := [] }, eid := \"z\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal Album::\"b\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:08:59.316477+00:00", "status": "failed", "tests": 322, "discards": 0, "time": "3000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"a\", \"y\"])),\n ({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string)),\n (\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))],\n tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))],\n tags := some (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"z\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"ghost\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"view\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"edit\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"z\" },\n { ty := { id := \"User\", path := [] }, eid := \"bob\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))] })] },\n { principal := { ty := { id := \"Action\", path := [] }, eid := \"view\" },\n action := { ty := { id := \"Foo\", path := [] }, eid := \"p1\" },\n resource := { ty := { id := \"Photo\", path := [] }, eid := \"alice\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal Action::\"view\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:09:00.336386+00:00", "status": "failed", "tests": 1168, "discards": 0, "time": "12000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none }),\n ({ id := \"User\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"bob\", \"x\"]))],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"x\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"x\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"x\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Photo\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)))] })] },\n { principal := { ty := { id := \"User\", path := [] }, eid := \"edit\" },\n action := { ty := { id := \"Foo\", path := [] }, eid := \"x\" },\n resource := { ty := { id := \"Action\", path := [] }, eid := \"a\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal User::\"edit\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:09:01.264059+00:00", "status": "failed", "tests": 2791, "discards": 0, "time": "26000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"view\" },\n { ty := { id := \"User\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk [] })] },\n { principal := { ty := { id := \"Action\", path := [] }, eid := \"ghost\" },\n action := { ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n resource := { ty := { id := \"Photo\", path := [] }, eid := \"b\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal Action::\"ghost\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:09:02.104426+00:00", "status": "failed", "tests": 4365, "discards": 0, "time": "41000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"edit\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"z\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"view\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }],\n context := Cedar.Data.Map.mk [] })] },\n { principal := { ty := { id := \"User\", path := [] }, eid := \"bob\" },\n action := { ty := { id := \"User\", path := [] }, eid := \"view\" },\n resource := { ty := { id := \"Album\", path := [] }, eid := \"edit\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal User::\"bob\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:09:03.368673+00:00", "status": "failed", "tests": 4616, "discards": 0, "time": "45000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Action\", path := [] }, eid := \"view\" }],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"z\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"y\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"z\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] })] },\n { principal := { ty := { id := \"User\", path := [] }, eid := \"x\" },\n action := { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" },\n resource := { ty := { id := \"User\", path := [] }, eid := \"p1\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal User::\"x\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:09:04.274917+00:00", "status": "failed", "tests": 684, "discards": 0, "time": "7000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"a\" },\n { ty := { id := \"User\", path := [] }, eid := \"z\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.decimal)))] })] },\n { principal := { ty := { id := \"Foo\", path := [] }, eid := \"view\" },\n action := { ty := { id := \"User\", path := [] }, eid := \"b\" },\n resource := { ty := { id := \"User\", path := [] }, eid := \"p1\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal Foo::\"view\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:09:05.142659+00:00", "status": "failed", "tests": 578, "discards": 0, "time": "6000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int)),\n (\"owner\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int))],\n tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int)),\n (\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Photo\", path := [] }, eid := \"x\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"z\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"y\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Album\", path := [] }, eid := \"ghost\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { ty := { id := \"Album\", path := [] }, eid := \"b\" }],\n context := Cedar.Data.Map.mk [] })] },\n { principal := { ty := { id := \"Foo\", path := [] }, eid := \"edit\" },\n action := { ty := { id := \"User\", path := [] }, eid := \"alice\" },\n resource := { ty := { id := \"Foo\", path := [] }, eid := \"z\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal Foo::\"edit\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:09:05.957773+00:00", "status": "failed", "tests": 394, "discards": 0, "time": "3000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none }),\n ({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.string) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"z\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"User\", path := [] }, eid := \"bob\" },\n { ty := { id := \"User\", path := [] }, eid := \"p1\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int)),\n (\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"y\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Foo\", path := [] }, eid := \"z\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }],\n context := Cedar.Data.Map.mk [] })] },\n { principal := { ty := { id := \"Photo\", path := [] }, eid := \"edit\" },\n action := { ty := { id := \"Photo\", path := [] }, eid := \"bob\" },\n resource := { ty := { id := \"User\", path := [] }, eid := \"a\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal Photo::\"edit\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:09:06.723152+00:00", "status": "failed", "tests": 1940, "discards": 0, "time": "18000us", "error": null, "tool": "plausible", "counterexample": "(({ ets := Cedar.Data.Map.mk [],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"User\", path := [] }, eid := \"x\" }],\n context := Cedar.Data.Map.mk [] })] },\n { principal := { ty := { id := \"User\", path := [] }, eid := \"p1\" },\n action := { ty := { id := \"Album\", path := [] }, eid := \"p1\" },\n resource := { ty := { id := \"Action\", path := [] }, eid := \"p1\" },\n context := Cedar.Data.Map.mk [] })) — validateRequest passed but principal User::\"p1\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:09:07.492473+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:09:08.255888+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:09:09.119131+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:09:09.970618+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:09:10.867012+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:09:11.744565+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:09:12.657052+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:09:13.532840+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:09:14.432084+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateRequestPrincipalExists", "mutations": [ "validate_request_principal_exists_1a76346_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:09:15.487007+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateRequest passed but principal User::\"ghost\" is not declared in schema", "hash": "ef99aba4946b572a35f19b9a3827fa59c6630060" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:09:29.310582+00:00", "status": "failed", "tests": 55194, "discards": 0, "time": "433000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.entity { id := \"Foo\", path := [] }) }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr))),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"User\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))] })] }) — Schema.validateWellFormed passed but entity type Photo has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:09:31.868909+00:00", "status": "failed", "tests": 984, "discards": 0, "time": "8000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"ghost\"])),\n ({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt))),\n (\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))],\n tags := none }),\n ({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Foo\", path := [] }))],\n tags := some (Cedar.Validation.CedarType.string) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"User\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] })] }) — Schema.validateWellFormed passed but entity type Album has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:09:32.684925+00:00", "status": "failed", "tests": 2285, "discards": 0, "time": "19000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] })] }) — Schema.validateWellFormed passed but entity type Photo has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:09:33.567470+00:00", "status": "failed", "tests": 2621, "discards": 0, "time": "22000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int)),\n (\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := none }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int)),\n (\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }))],\n tags := some (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)) }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [], attrs := Cedar.Data.Map.mk [], tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"x\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] })] }) — Schema.validateWellFormed passed but entity type Foo has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:09:34.530013+00:00", "status": "failed", "tests": 88332, "discards": 0, "time": "891000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"z\"])),\n ({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))],\n tags := some (Cedar.Validation.CedarType.int) }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt))),\n (\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))],\n tags := some (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"z\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string)),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)))] })] }) — Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:09:36.289490+00:00", "status": "failed", "tests": 8184, "discards": 0, "time": "72000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }))],\n tags := none }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] })] }) — Schema.validateWellFormed passed but entity type Photo has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:09:37.267066+00:00", "status": "failed", "tests": 18402, "discards": 0, "time": "211000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))],\n tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration))),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := some (Cedar.Validation.CedarType.int) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }))] })] }) — Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:09:38.342277+00:00", "status": "failed", "tests": 4344, "discards": 0, "time": "35000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr))),\n (\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration)))],\n tags := none }),\n ({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"User\", path := [] }, eid := \"y\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr))),\n (\"owner\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))] })] }) — Schema.validateWellFormed passed but entity type Foo has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:09:39.265968+00:00", "status": "failed", "tests": 40357, "discards": 0, "time": "332000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr))),\n (\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration)) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string)),\n (\"owner\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int))] })] }) — Schema.validateWellFormed passed but entity type Photo has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:09:40.424094+00:00", "status": "failed", "tests": 2643, "discards": 0, "time": "23000us", "error": null, "tool": "plausible", "counterexample": "({ ets := Cedar.Data.Map.mk\n [({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt))),\n (\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.decimal)) }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [], attrs := Cedar.Data.Map.mk [], tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"x\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string)),\n (\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }))] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Action\", path := [] }))] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Action\", path := [] }, eid := \"x\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)))] })] }) — Schema.validateWellFormed passed but entity type Foo has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:09:41.376002+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:09:42.398351+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:09:43.425586+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:09:44.310307+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:09:45.253760+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:09:46.008673+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:09:46.755879+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:09:47.528897+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:09:48.310627+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "SchemaWellFormedNoSingletonBools", "mutations": [ "schema_well_formed_no_singleton_bools_e785e2e_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:09:49.249880+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "Schema.validateWellFormed passed but entity type User has an unlifted (singleton-bool) attribute", "hash": "f5b9107f2105ffea13ee12a6b27f0503169b96fc" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:10:05.851311+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"Foo\", path := [] }, eid := \"b\" })) — defineEntity for non-member b returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:10:07.872965+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" })) — defineEntity for non-member ghost returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:10:08.832646+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"Album\", path := [] }, eid := \"a\" })) — defineEntity for non-member a returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:10:09.758064+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "1000us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"Foo\", path := [] }, eid := \"b\" })) — defineEntity for non-member b returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:10:10.692907+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"User\", path := [] }, eid := \"a\" })) — defineEntity for non-member a returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:10:11.611349+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"Action\", path := [] }, eid := \"y\" })) — defineEntity for non-member y returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:10:12.479883+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"Photo\", path := [] }, eid := \"b\" })) — defineEntity for non-member b returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:10:13.354064+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"Action\", path := [] }, eid := \"ghost\" })) — defineEntity for non-member ghost returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:10:14.184771+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"User\", path := [] }, eid := \"a\" })) — defineEntity for non-member a returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:10:15.160073+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([], { ty := { id := \"User\", path := [] }, eid := \"p1\" })) — defineEntity for non-member p1 returned \"U_enc_m0\" instead of throwing (members: [])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:10:15.995191+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:10:16.885823+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:10:17.778317+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:10:18.584110+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:10:19.481638+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:10:20.307925+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "1000us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:10:21.088941+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:10:21.912347+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:10:22.771601+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "DefineEntityRejectsNonMember", "mutations": [ "encoder_define_entity_rejects_non_member_fe5a046_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:10:23.541006+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "defineEntity for non-member zzz returned \"U_enc_m2\" instead of throwing (members: [alice, bob])", "hash": "2f279ad4bc2037fcfa79fa16070f6728fe51a805" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:10:39.851600+00:00", "status": "failed", "tests": 254, "discards": 0, "time": "19000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"view\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"bob\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 52 }))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"alice\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"a\" })) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"alice\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\")))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"bob\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"view\" },\n { ty := { id := \"User\", path := [] }, eid := \"alice\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"z\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\"))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\")))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Photo\", path := [] }, eid := \"x\" },\n { ty := { id := \"Action\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 88 })))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 92 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"z\" },\n { ty := { id := \"Album\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"z\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"z\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\")))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"alice\" },\n { ty := { id := \"User\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 17 })))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true)) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"z\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Photo\", path := [] }, eid := \"a\" },\n { ty := { id := \"Action\", path := [] }, eid := \"view\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)))],\n tags := some (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"y\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Photo\", path := [] }, eid := \"bob\" },\n { ty := { id := \"User\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string)),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }))] })] },\n 19)) — validateWithLevel rejected policy p1 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:10:41.704035+00:00", "status": "failed", "tests": 206, "discards": 0, "time": "21000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"view\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := some (Cedar.Validation.CedarType.int) }),\n ({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string)),\n (\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n tags := some (Cedar.Validation.CedarType.entity { id := \"Action\", path := [] }) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"User\", path := [] }, eid := \"y\" }],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"view\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"x\" },\n { ty := { id := \"User\", path := [] }, eid := \"edit\" },\n { ty := { id := \"User\", path := [] }, eid := \"view\" }],\n context := Cedar.Data.Map.mk\n [(\"name\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int)),\n (\"owner\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)))] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n { ty := { id := \"Action\", path := [] }, eid := \"y\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))] })] },\n 2)) — validateWithLevel rejected policy p2 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:10:42.509042+00:00", "status": "failed", "tests": 194, "discards": 0, "time": "13000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 4 })))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\"))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"z\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 33 }))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\") }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"alice\" },\n { ty := { id := \"Action\", path := [] }, eid := \"z\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"edit\" })) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"x\" },\n { ty := { id := \"Action\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 59 }) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\")))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 21 }))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID\n { ty := { id := \"Action\", path := [] }, eid := \"p1\" }))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Foo\", path := [] })),\n (\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))],\n tags := none }),\n ({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Foo\", path := [] }))],\n tags := some (Cedar.Validation.CedarType.int) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"p1\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"y\" }],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr))),\n (\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))] }),\n ({ ty := { id := \"Photo\", path := [] }, eid := \"y\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"x\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Foo\", path := [] }, eid := \"b\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"view\" }],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Album\", path := [] }))] })] },\n 15)) — validateWithLevel rejected policy p0 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:10:43.292256+00:00", "status": "failed", "tests": 55, "discards": 0, "time": "2000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"bob\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 13 }))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)) }] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff))),\n (\"owner\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int))],\n tags := none }),\n ({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [], attrs := Cedar.Data.Map.mk [], tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Foo\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"view\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"y\" }],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"bob\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n { ty := { id := \"Action\", path := [] }, eid := \"y\" },\n { ty := { id := \"Action\", path := [] }, eid := \"z\" }],\n context := Cedar.Data.Map.mk [] })] },\n 6)) — validateWithLevel rejected policy p0 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:10:44.514655+00:00", "status": "failed", "tests": 270, "discards": 0, "time": "17000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 34 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Photo\", path := [] }, eid := \"alice\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\") }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Photo\", path := [] }, eid := \"edit\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 90 }))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\") }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 94 }) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID\n { ty := { id := \"User\", path := [] }, eid := \"alice\" })) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"edit\" })))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 44 }))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 86 }))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"bob\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"User\", path := [] }, eid := \"a\" },\n { ty := { id := \"Album\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 78 }) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"view\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"ghost\" })))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"y\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"view\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"z\" },\n { ty := { id := \"Action\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Action\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := some (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)) }),\n ({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [], attrs := Cedar.Data.Map.mk [], tags := none }),\n ({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Photo\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Foo\", path := [] }, eid := \"b\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"bob\" },\n { ty := { id := \"User\", path := [] }, eid := \"b\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"y\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"y\" },\n { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }],\n context := Cedar.Data.Map.mk [] })] },\n 66)) — validateWithLevel rejected policy p2 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:10:45.376777+00:00", "status": "failed", "tests": 197, "discards": 0, "time": "12000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"p1\" })) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"ghost\" },\n { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 54 })))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"z\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"x\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"b\" }) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"z\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\") }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\") }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"x\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 83 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" })))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 83 }) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\") }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"z\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 83 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"edit\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"p1\" },\n { ty := { id := \"User\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\") }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"b\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"z\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\"))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\")))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"x\" })) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"p1\" },\n { ty := { id := \"Album\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"b\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" })))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"edit\" },\n { ty := { id := \"User\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 47 })))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID\n { ty := { id := \"Photo\", path := [] }, eid := \"y\" }))) }] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [], attrs := Cedar.Data.Map.mk [], tags := none }),\n ({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"view\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"z\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string)),\n (\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"ghost\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"name\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))] })] },\n 90)) — validateWithLevel rejected policy p2 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:10:46.196234+00:00", "status": "failed", "tests": 40, "discards": 0, "time": "3000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"edit\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\"))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"User\", path := [] }, eid := \"ghost\" },\n { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\") }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"bob\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 88 }))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID\n { ty := { id := \"Album\", path := [] }, eid := \"p1\" }))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n { ty := { id := \"Action\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"alice\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))],\n tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Action\", path := [] })),\n (\"owner\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int))],\n tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.duration)) })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [],\n context := Cedar.Data.Map.mk\n [(\"flag\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.entity { id := \"Foo\", path := [] })),\n (\"name\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"view\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"User\", path := [] }, eid := \"b\" }],\n context := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt))),\n (\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Action\", path := [] }))] })] },\n 1)) — validateWithLevel rejected policy p2 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:10:47.058469+00:00", "status": "failed", "tests": 13, "discards": 0, "time": "0us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"bob\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\"))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"User\", path := [] }, eid := \"edit\" },\n { ty := { id := \"Photo\", path := [] }, eid := \"view\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none }),\n ({ id := \"Foo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"owner\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.decimal)))],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Album\", path := [] }, eid := \"y\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"User\", path := [] }, eid := \"edit\" },\n { ty := { id := \"User\", path := [] }, eid := \"p1\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"edit\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Foo\", path := [] }, eid := \"a\" }],\n context := Cedar.Data.Map.mk [] })] },\n 12)) — validateWithLevel rejected policy p0 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:10:47.847551+00:00", "status": "failed", "tests": 289, "discards": 0, "time": "16000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"alice\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Photo\", path := [] }, eid := \"y\" },\n { ty := { id := \"User\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.resource) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\"))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"view\" }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 64 })) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 62 }) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 60 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true)) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"ghost\" },\n { ty := { id := \"Album\", path := [] }, eid := \"alice\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"z\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"b\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 28 })) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\"))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\"))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"User\", path := [] }, eid := \"edit\" },\n { ty := { id := \"User\", path := [] }, eid := \"z\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 24 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 38 }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\"))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\")))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\"))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"alice\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"p1\" },\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Photo\", path := [] }, eid := \"a\" },\n { ty := { id := \"User\", path := [] }, eid := \"z\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"b\" }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [],\n attrs := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))],\n tags := none }),\n ({ id := \"User\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk\n [{ id := \"Action\", path := [] },\n { id := \"Album\", path := [] },\n { id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"p1\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Album\", path := [] }, eid := \"x\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"x\" },\n { ty := { id := \"User\", path := [] }, eid := \"bob\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Action\", path := [] }, eid := \"y\" },\n { appliesToPrincipal := Cedar.Data.Set.mk\n [{ id := \"Album\", path := [] },\n { id := \"Photo\", path := [] },\n { id := \"User\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Foo\", path := [] }, eid := \"x\" }],\n context := Cedar.Data.Map.mk\n [(\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] }),\n ({ ty := { id := \"User\", path := [] }, eid := \"b\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"edit\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"z\" },\n { ty := { id := \"User\", path := [] }, eid := \"edit\" }],\n context := Cedar.Data.Map.mk\n [(\"age\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string)),\n (\"flag\",\n Cedar.Validation.Qualified.optional\n (Cedar.Validation.CedarType.entity { id := \"Album\", path := [] }))] })] },\n 80)) — validateWithLevel rejected policy p2 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "plausible", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:10:48.711950+00:00", "status": "failed", "tests": 191, "discards": 0, "time": "14000us", "error": null, "tool": "plausible", "counterexample": "(([{ id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\"))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"b\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"alice\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\") }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"y\" },\n { ty := { id := \"User\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"z\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"edit\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Action\", path := [] }, eid := \"view\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 59 })))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n { ty := { id := \"Action\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.less)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"x\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"a\" }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\")))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"a\" })) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"view\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.eq)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 10 }))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 52 })))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\"))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 20 }))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\") }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"z\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"z\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"bob\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\") }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"z\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"alice\" }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"p1\" },\n { ty := { id := \"Action\", path := [] }, eid := \"p1\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 15 }) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\")))\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"z\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.resource) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"b\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"b\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"bob\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"edit\" },\n { ty := { id := \"Album\", path := [] }, eid := \"bob\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\")))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"bob\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"alice\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\")) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"y\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))) }] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Foo\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"User\", path := [] }, eid := \"x\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n condition := [] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.or\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"a\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Foo\", path := [] }, eid := \"view\" },\n { ty := { id := \"User\", path := [] }, eid := \"edit\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Action\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"User\", path := [] }, eid := \"x\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"view\" }),\n condition := [] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"alice\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\") }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"a\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"x\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.resource) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"Album\", path := [] }, eid := \"alice\" },\n { ty := { id := \"Album\", path := [] }, eid := \"x\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"Album\", path := [] }\n { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"Photo\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n actionScope := Cedar.Spec.ActionScope.actionInAny\n [{ ty := { id := \"User\", path := [] }, eid := \"a\" },\n { ty := { id := \"Foo\", path := [] }, eid := \"view\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when,\n body := Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.binaryApp\n (Cedar.Spec.BinaryOp.mem)\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\")))\n (Cedar.Spec.Expr.and\n (Cedar.Spec.Expr.lit\n (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"b\" }))\n (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n actionScope := Cedar.Spec.ActionScope.actionInAny [],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.resource) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"y\" }),\n condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n { id := \"p2\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"bob\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\") }] },\n { id := \"p0\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.forbid,\n principalScope := Cedar.Spec.PrincipalScope.principalScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"alice\" }),\n condition := [] },\n { id := \"p1\",\n effect := Cedar.Spec.Effect.permit,\n principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"y\" }],\n resourceScope := Cedar.Spec.ResourceScope.resourceScope\n (Cedar.Spec.Scope.isMem\n { id := \"User\", path := [] }\n { ty := { id := \"Album\", path := [] }, eid := \"view\" }),\n condition := [] }],\n { ets := Cedar.Data.Map.mk\n [({ id := \"Album\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n attrs := Cedar.Data.Map.mk\n [(\"age\",\n Cedar.Validation.Qualified.required\n (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool))),\n (\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))],\n tags := none }),\n ({ id := \"Photo\", path := [] },\n Cedar.Validation.EntitySchemaEntry.standard\n { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Foo\", path := [] }],\n attrs := Cedar.Data.Map.mk [],\n tags := none })],\n acts := Cedar.Data.Map.mk\n [({ ty := { id := \"Action\", path := [] }, eid := \"y\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n ancestors := Cedar.Data.Set.mk\n [{ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n { ty := { id := \"Action\", path := [] }, eid := \"x\" }],\n context := Cedar.Data.Map.mk [] }),\n ({ ty := { id := \"Foo\", path := [] }, eid := \"y\" },\n { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n appliesToResource := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Foo\", path := [] }, eid := \"view\" }],\n context := Cedar.Data.Map.mk [] })] },\n 71)) — validateWithLevel rejected policy p0 with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 0, "timeout": 60.0, "timestamp": "2026-04-29T19:10:49.604485+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 1, "timeout": 60.0, "timestamp": "2026-04-29T19:10:50.431833+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 2, "timeout": 60.0, "timestamp": "2026-04-29T19:10:51.250308+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 3, "timeout": 60.0, "timestamp": "2026-04-29T19:10:52.008079+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 4, "timeout": 60.0, "timestamp": "2026-04-29T19:10:52.796775+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 5, "timeout": 60.0, "timestamp": "2026-04-29T19:10:53.607452+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 6, "timeout": 60.0, "timestamp": "2026-04-29T19:10:54.394605+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 7, "timeout": 60.0, "timestamp": "2026-04-29T19:10:55.152181+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 8, "timeout": 60.0, "timestamp": "2026-04-29T19:10:55.884737+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" }, { "experiment": "smoke", "workload": "cedar-lean", "language": "lean", "strategy": "etna", "property": "ValidateWithLevelAccepts", "mutations": [ "validate_with_level_accepts_c186f0f_1" ], "mode": "solve", "trial": 9, "timeout": 60.0, "timestamp": "2026-04-29T19:10:56.603721+00:00", "status": "failed", "tests": 1, "discards": 0, "time": "0us", "error": null, "tool": "etna", "counterexample": "validateWithLevel rejected policy p_action_lit with .levelError — the level checker rejected an entity-access expression it should have allowed", "hash": "8fc55478ce9a168327f70895167185d66bc54b07" } ] }