v0.13.2Control flow and dataflow are rebuilt on explicit semantics, Z3 translation matches executable C# numeric rules, and the build chain is hermetic and supply-chain verified with hash- and size-pinned Z3 binaries.See what's new

review-packet

Assemble a change-oriented report that leads with what remains unproven

Bash
calor review-packet <files...> [options]

The review packet begins with the unproven remainder, not a success count. It then reports assumptions, vacuity, counterexamples, per-module interop and waiver fractions, and caller impact for changed declarations.

Examples

Bash
calor review-packet src/Pricing.calr
calor review-packet src/*.calr --baseline-ref origin/main
calor review-packet src/Pricing.calr --changed f001 --changed Calculate
calor review-packet src/Pricing.calr --json

Options

OptionDescription
--changedDeclaration ID or name treated as changed; repeatable
--baseline-refGit ref used to derive changed declarations from zero-context diff ranges
--permissive-effectsRecord the effect waiver on the packet's first line
--contract-modedebug, release, or off; off is disclosed as a waiver
--timeout, -tZ3 budget per contract in milliseconds; default 5000
--output, -oWrite the Markdown packet to a file
--jsonEmit the same data in a schema 2.0 envelope

The seven proof statuses are proven, refuted, assumed, unknown, timeout, unsupported, and unavailable. A refinement-type note is included because refinement obligations are analysis-only and do not emit runtime guards (Calor1356). A selector that matches no declaration is a warning (Calor1358), so a typo cannot silently remove caller impact.

--baseline-ref maps changed lines to declaration extents. An edit between declarations is attributed to the preceding declaration, which can over-include impact but does not omit it.

See Verification Guarantees for how to interpret each status.