{
  "experiment": "ci-run",
  "generated_at": "2026-04-29 04:52 UTC",
  "workload_docs": {
    "cedar-lean": [
      {
        "mutations": [
          "decimal_parse_negative_sign_preserved_84fe9c6_1"
        ],
        "tasks": [
          {
            "property": "DecimalParseNegativeSignPreserved",
            "witnesses": [
              {
                "test_fn": "witness_decimal_parse_negative_sign_preserved_case_neg_zero",
                "note": "minimal repro: \"-0.5\""
              }
            ]
          }
        ],
        "source": {
          "repo": "https://github.com/cedar-policy/cedar-spec",
          "commits": [
            "84fe9c6d4121f6fcb6b4f032cce0ae08f23ad8d4"
          ],
          "commit_subjects": [
            "Fix parsing of decimal literals (#799)"
          ],
          "prs": [
            799
          ],
          "summary": "Decimal.parse computed the result's sign from the parsed integer part\n(`if l ≥ 0 then add else subtract`). For inputs like \"-0.5\" the integer\npart is \"-0\", which `String.toInt?` returns as `0`, so the sign test\ntook the wrong branch and emitted `+0.5000` instead of `-0.5000`.\nThe fix tests the leading minus textually: `if !left.startsWith \"-\"`.\n"
        },
        "injection": {
          "kind": "patch",
          "files": [
            "cedar-lean/Cedar/Spec/Ext/Decimal.lean"
          ],
          "locations": [
            {
              "file": "cedar-lean/Cedar/Spec/Ext/Decimal.lean",
              "line": 59,
              "symbol": "Cedar.Spec.Ext.Decimal.parse"
            }
          ],
          "patch": "patches/decimal_parse_negative_sign_preserved_84fe9c6_1.patch"
        },
        "bug": {
          "short_name": "decimal_parse_negative_sign_preserved",
          "invariant": "If `Decimal.parse s = some d`, then a leading '-' in `s` must yield a non-positive `d` — i.e. textual sign is preserved through parsing.",
          "how_triggered": "Inferring sign from `l ≥ 0` instead of from the literal prefix `-` causes \"-0.<frac>\" inputs (whose integer part round-trips to 0) to be mis-signed: parse(\"-0.5\") returns `+0.5000`."
        }
      },
      {
        "mutations": [
          "decimal_parse_no_underscore_a0c5812_1"
        ],
        "tasks": [
          {
            "property": "DecimalParseNoUnderscore",
            "witnesses": [
              {
                "test_fn": "witness_decimal_parse_no_underscore_case_int_part",
                "note": "minimal repro: \"1_2.34\""
              }
            ]
          }
        ],
        "source": {
          "repo": "https://github.com/cedar-policy/cedar-spec",
          "commits": [
            "a0c5812f171bcf142e43dedf8518d94becb0e11b"
          ],
          "commit_subjects": [
            "fix behavior of Decimal.parse with underscores (#877)"
          ],
          "prs": [
            877
          ],
          "summary": "Lean's `String.toInt?`/`String.toNat?` silently accept `_` characters\n(`String.toInt? \"1_2\" = some 12`). Cedar's spec disallows underscores in\ndecimal literals; without a guard the parser leaked Lean's behavior and\nlet inputs like \"1_2.34\" parse to 12.3400. The fix introduced\n`toInt?'`/`toNat?'` wrappers in `Cedar.Spec.Ext.Util` that reject any\ninput containing `_` before delegating.\n"
        },
        "injection": {
          "kind": "patch",
          "files": [
            "cedar-lean/Cedar/Spec/Ext/Util.lean"
          ],
          "locations": [
            {
              "file": "cedar-lean/Cedar/Spec/Ext/Util.lean",
              "line": 12,
              "symbol": "Cedar.Spec.Ext.toInt?'"
            },
            {
              "file": "cedar-lean/Cedar/Spec/Ext/Util.lean",
              "line": 19,
              "symbol": "Cedar.Spec.Ext.toNat?'"
            }
          ],
          "patch": "patches/decimal_parse_no_underscore_a0c5812_1.patch"
        },
        "bug": {
          "short_name": "decimal_parse_no_underscore",
          "invariant": "If `Decimal.parse s = some _`, then `s` does not contain `_`.",
          "how_triggered": "Removing the `if str.contains '_' then .none else …` gates from `toInt?'`/`toNat?'` exposes Lean's lenient `String.toInt?` behavior to the parser, so `Decimal.parse \"1_2.34\"` returns `some 12.3400` instead of `none`."
        }
      },
      {
        "mutations": [
          "validator_action_entity_no_attrs_d7ab5ab_1"
        ],
        "tasks": [
          {
            "property": "ValidateActionEntityNoAttrs",
            "witnesses": [
              {
                "test_fn": "witness_validate_action_entity_no_attrs_case_action_with_attr",
                "note": "Action::\"a\" with attrs={x:1} — fix rejects, bug accepts"
              }
            ]
          }
        ],
        "source": {
          "repo": "https://github.com/cedar-policy/cedar-spec",
          "commits": [
            "d7ab5abeff0d55f23914b5f2257da8fe3e917002"
          ],
          "commit_subjects": [
            "Fix validator soundness when `updateSchema` is not used (#648)"
          ],
          "prs": [
            648
          ],
          "summary": "Validator soundness gap: `validateEntities` did not verify that action\nentities in the entity store have empty `attrs` (and empty `tags`)\nunless callers first invoked `updateSchema` to inject synthetic\nEntitySchemaEntries. Cedar's spec forbids action entities from carrying\nattributes — without the check, an ill-typed entity store passes\nvalidation, breaking the type-soundness assumption used by every\nauthorization theorem in `Thm/Validation/`. The fix folded the action\nchecks directly into `instanceOfSchemaEntry` (combining\n`instanceOfEntitySchema` and `instanceOfActionSchema` into the new\n`instanceOfSchema`), removing the `updateSchema` workaround entirely.\n"
        },
        "injection": {
          "kind": "patch",
          "files": [
            "cedar-lean/Cedar/Validation/RequestEntityValidator.lean"
          ],
          "locations": [
            {
              "file": "cedar-lean/Cedar/Validation/RequestEntityValidator.lean",
              "line": 132,
              "symbol": "Cedar.Validation.instanceOfSchema.instanceOfActionSchemaEntry"
            }
          ],
          "patch": "patches/validator_action_entity_no_attrs_d7ab5ab_1.patch"
        },
        "bug": {
          "short_name": "validator_action_entity_no_attrs",
          "invariant": "If `validateEntities schema entities = .ok ()`, then every action entity in `entities` (member of any environment's `acts`) has empty `attrs`.",
          "how_triggered": "Short-circuiting the `data.attrs == Map.empty` guard in `instanceOfActionSchemaEntry` (changing the test to `(data.attrs == Map.empty) || true`) accepts action entities with non-empty `attrs`. The witness installs `Action::\"a\"` with `{x: 1}` and observes `validateEntities` returning `.ok ()`."
        }
      },
      {
        "mutations": [
          "smt_encode_string_balanced_quotes_84708ca_1"
        ],
        "tasks": [
          {
            "property": "SmtEncodeStringBalancedQuotes",
            "witnesses": [
              {
                "test_fn": "witness_smt_encode_string_balanced_quotes_case_quote_in_middle",
                "note": "input \"x\\\"y\" — fix doubles the inner quote, bug emits malformed SMT"
              }
            ]
          }
        ],
        "source": {
          "repo": "https://github.com/cedar-policy/cedar-spec",
          "commits": [
            "84708ca6ab57d462306429d345b1414842330127"
          ],
          "commit_subjects": [
            "Fix SMT encoding of string literals (#640)"
          ],
          "prs": [
            640
          ],
          "summary": "The SMT encoder did not double `\"` characters inside string literals,\nviolating the SMT-LIB 2.7 standard which prescribes `\"` (a doubled quote)\nas the only escape sequence inside a string literal. Inputs containing\n`\"` produced malformed SMT, breaking symbolic verification soundness:\ndownstream solvers either reject the query or silently misparse it.\n\nThe fix added the doubling rule. Cedar-lean has since refactored\n`encodeString` to per-character encoding (also handling `\\\\` and\nnon-ASCII via `\\u{…}`), but the doubling step at the `\"` branch is\nstill load-bearing.\n"
        },
        "injection": {
          "kind": "patch",
          "files": [
            "cedar-lean/Cedar/SymCC/Encoder.lean"
          ],
          "locations": [
            {
              "file": "cedar-lean/Cedar/SymCC/Encoder.lean",
              "line": 170,
              "symbol": "Cedar.SymCC.encodeString"
            }
          ],
          "patch": "patches/smt_encode_string_balanced_quotes_84708ca_1.patch"
        },
        "bug": {
          "short_name": "smt_encode_string_balanced_quotes",
          "invariant": "For any string `s`, the SMT literal `\"…encodeString s…\"` contains an even number of `\"` characters (every literal `\"` inside is doubled).",
          "how_triggered": "Replacing `return \"\\\"\\\"\"` (doubled quote) with `return \"\\\"\"` (single quote) in the `c = '\"'` branch of `encodeString` lets a single `\"` leak through; the witness `x\"y` then encodes to `\"x\"y\"` (3 `\"` chars, odd) instead of `\"x\"\"y\"` (4, even)."
        }
      },
      {
        "mutations": [
          "validate_rejects_undeclared_entities_eb3bfff_1"
        ],
        "tasks": [
          {
            "property": "ValidateRejectsUndeclaredEntities",
            "witnesses": [
              {
                "test_fn": "witness_validate_rejects_undeclared_entities_case_unknown_principal",
                "note": "policy with `true || (principal == Foo::\"x\")`; fix rejects undeclared Foo, bug accepts"
              }
            ]
          }
        ],
        "source": {
          "repo": "https://github.com/cedar-policy/cedar-spec",
          "commits": [
            "eb3bfff4fcebff716ae86983ae78fd6407e13290"
          ],
          "commit_subjects": [
            "Make lean validator check entity type and action existence before type checking (#779)"
          ],
          "prs": [
            779
          ],
          "summary": "Validator entity-existence soundness gap. The Lean typechecker\nshort-circuits on type errors (e.g. on `true || expr`, it returns\n`bool .tt` without descending into `expr`), so a policy referencing an\nundeclared entity type inside a short-circuited subexpression passed\nLean validation while the Rust validator (which performs entity\nexistence as a separate pass) rejected it. The two validators\ndisagreed, breaking differential soundness.\n\nThe fix added `checkEntities`, an unconditional pre-pass at the top of\n`typecheckPolicyWithEnvironments` that traverses each policy's `Expr`\nand rejects any reference to an entity UID/type not declared in the\nschema.\n"
        },
        "injection": {
          "kind": "patch",
          "files": [
            "cedar-lean/Cedar/Validation/Validator.lean"
          ],
          "locations": [
            {
              "file": "cedar-lean/Cedar/Validation/Validator.lean",
              "line": 217,
              "symbol": "Cedar.Validation.typecheckPolicyWithEnvironments"
            }
          ],
          "patch": "patches/validate_rejects_undeclared_entities_eb3bfff_1.patch"
        },
        "bug": {
          "short_name": "validate_rejects_undeclared_entities",
          "invariant": "If `validate policies schema = .ok ()`, then for every policy `p` in `policies`, `checkEntities schema p.toExpr = .ok ()` — i.e. `validate` agrees with `checkEntities` on the entity-existence question.",
          "how_triggered": "Removing the `(checkEntities schema policy.toExpr).mapError ...` line from `typecheckPolicyWithEnvironments` lets the typechecker short-circuit through any reference to an undeclared entity. The witness encodes `permit(principal, action, resource) when { true || (principal == Foo::\"x\") };` — `true || …` types as `bool .tt` without inspecting the right operand, so `validate` returns `.ok ()` despite `Foo` being absent from the schema."
        }
      },
      {
        "mutations": [
          "validate_request_principal_exists_1a76346_1"
        ],
        "tasks": [
          {
            "property": "ValidateRequestPrincipalExists",
            "witnesses": [
              {
                "test_fn": "witness_validate_request_principal_exists_case_ghost_user",
                "note": "schema with Photo + Action::\"a\" applies-to-principal=[User], request with principal=User::\"ghost\"; fix rejects, bug accepts"
              }
            ]
          }
        ],
        "source": {
          "repo": "https://github.com/cedar-policy/cedar-spec",
          "commits": [
            "1a7634653370892318d14bd9213668bf23c022de"
          ],
          "commit_subjects": [
            "Add `Environment.WellFormed` as a new precondition for type checking and fix relevant proofs (#658)"
          ],
          "prs": [
            658
          ],
          "summary": "Request-validation soundness gap. Pre-#658, `instanceOfEntityType` only\nverified that the entity's literal type matched the expected request\ntype (and, for enum types, that the eid was a valid member). Non-enum\nentities passed regardless of whether they were declared anywhere in\nthe schema, so a 'ghost' principal like `User::\"ghost\"` matched a\nrequest type even when `User` had no entry in `env.ets`. Downstream\ntypecheckers then assume requests are well-formed, so the soundness gap\nsilently propagates to authorization decisions.\n\nThe fix added `Environment.WellFormed` as a precondition and reworked\n`instanceOfEntityType` to additionally require that the entity be\npresent in either `env.ets` or `env.acts`.\n"
        },
        "injection": {
          "kind": "patch",
          "files": [
            "cedar-lean/Cedar/Validation/RequestEntityValidator.lean"
          ],
          "locations": [
            {
              "file": "cedar-lean/Cedar/Validation/RequestEntityValidator.lean",
              "line": 52,
              "symbol": "Cedar.Validation.instanceOfEntityType"
            }
          ],
          "patch": "patches/validate_request_principal_exists_1a76346_1.patch"
        },
        "bug": {
          "short_name": "validate_request_principal_exists",
          "invariant": "If `validateRequest schema request = .ok ()`, then `request.principal` is declared in the schema (either `schema.ets.isValidEntityUID` or `schema.acts.contains`).",
          "how_triggered": "Replacing the existence check `(env.ets.isValidEntityUID e || env.acts.contains e)` in `instanceOfEntityType` with `true` collapses the second conjunct, so any UID whose entity type matches the request type passes — including `User::\"ghost\"` against a schema that has no `User` entity declared."
        }
      },
      {
        "mutations": [
          "schema_well_formed_no_singleton_bools_e785e2e_1"
        ],
        "tasks": [
          {
            "property": "SchemaWellFormedNoSingletonBools",
            "witnesses": [
              {
                "test_fn": "witness_schema_well_formed_no_singleton_bools_case_attr_bool_tt",
                "note": "schema declares User.flag : (.bool .tt) — fix rejects via validateLifted, bug accepts"
              }
            ]
          }
        ],
        "source": {
          "repo": "https://github.com/cedar-policy/cedar-spec",
          "commits": [
            "e785e2ed37e0ec9f4c4ecb42f84f794c4735b11f"
          ],
          "commit_subjects": [
            "Require that well-formed `TypeEnv` does not have singleton Bool types (#689)"
          ],
          "prs": [
            689
          ],
          "summary": "TypeEnv well-formedness gap. The Cedar typechecker's soundness proofs\nassume every schema-level type is *lifted* — i.e. boolean types appear\nonly as `.bool .anyBool`, never as the singleton `.bool .tt` or\n`.bool .ff`. Without enforcement, a malicious schema declaring an\nattribute as `(.bool .tt)` would pass `Schema.validateWellFormed`, then\nthe typechecker would prove the literal-specific judgement (`flag :\nbool .tt`) about user-provided attribute data — unsound under the\noperational semantics, since the user can put `flag = false` in their\nentity.\n\nThe fix added `CedarType.validateLifted` and called it on every schema\nentry's attribute and tag types from inside\n`StandardSchemaEntry.validateWellFormed` and\n`ActionSchemaEntry.validateWellFormed`.\n"
        },
        "injection": {
          "kind": "patch",
          "files": [
            "cedar-lean/Cedar/Validation/EnvironmentValidator.lean"
          ],
          "locations": [
            {
              "file": "cedar-lean/Cedar/Validation/EnvironmentValidator.lean",
              "line": 126,
              "symbol": "Cedar.Validation.StandardSchemaEntry.validateWellFormed"
            }
          ],
          "patch": "patches/schema_well_formed_no_singleton_bools_e785e2e_1.patch"
        },
        "bug": {
          "short_name": "schema_well_formed_no_singleton_bools",
          "invariant": "If `Schema.validateWellFormed schema = .ok ()`, then for every standard entity entry in `schema.ets`, the attribute record passes `CedarType.validateLifted` (no `.bool .tt` / `.bool .ff` nested anywhere).",
          "how_triggered": "Removing the `(CedarType.record entry.attrs).validateLifted` line from `StandardSchemaEntry.validateWellFormed` lets the validator accept entities whose attributes have singleton-bool types. The witness builds a schema with `User.flag : (.bool .tt)` and observes `Schema.validateWellFormed` returning `.ok ()` instead of `\"bool type is not lifted\"`."
        }
      },
      {
        "mutations": [
          "encoder_define_entity_rejects_non_member_fe5a046_1"
        ],
        "tasks": [
          {
            "property": "DefineEntityRejectsNonMember",
            "witnesses": [
              {
                "test_fn": "witness_define_entity_rejects_non_member_case_zzz",
                "note": "User enum [alice, bob], call defineEntity for User::\"zzz\"; fix throws, bug returns U_enc_m2"
              }
            ]
          }
        ],
        "source": {
          "repo": "https://github.com/cedar-policy/cedar-spec",
          "commits": [
            "fe5a0464ef36716ff37ced2d7a4e62ef91a23d7e"
          ],
          "commit_subjects": [
            "Fix escaping for euid in term protobuf (#855)"
          ],
          "prs": [
            855
          ],
          "summary": "SymCC encoder soundness gap. Pre-#855, `defineEntity` looked up an\nenum member's index via `members.idxOf entity.eid` (the non-Option\nvariant). For an entity whose type has a registered enum but whose\n`eid` is *not* a declared member, `List.idxOf` returns\n`members.length` — an index outside the legal range. The encoder\nthen emits `{tyEnc}_m{members.length}` as the SMT identifier,\nreferencing a member that does not exist. Solvers either return\nspurious UNSAT or accept an unsound model; either way the symbolic\nanalysis loses its meaning.\n\nThe fix replaced `idxOf` with `idxOf?` and explicitly threw an\n`IO.userError` on the `none` case.\n"
        },
        "injection": {
          "kind": "patch",
          "files": [
            "cedar-lean/Cedar/SymCC/Encoder.lean"
          ],
          "locations": [
            {
              "file": "cedar-lean/Cedar/SymCC/Encoder.lean",
              "line": 269,
              "symbol": "Cedar.SymCC.Encoder.defineEntity"
            }
          ],
          "patch": "patches/encoder_define_entity_rejects_non_member_fe5a046_1.patch"
        },
        "bug": {
          "short_name": "encoder_define_entity_rejects_non_member",
          "invariant": "If `defineEntity tyEnc entity` returns `Ok` for an entity whose type is registered as an enum, then `entity.eid` is one of the declared members.",
          "how_triggered": "Replacing the inner `match members.idxOf? entity.eid with | .some idx => … | .none => throw …` with the single line `return s!\"{enumId tyEnc (members.idxOf entity.eid)}\"` lets `defineEntity` succeed for non-member eids: `List.idxOf` returns `members.length`, producing the bogus identifier `U_enc_m2` for `[\"alice\", \"bob\"]`-membered `User::\"zzz\"`."
        }
      },
      {
        "mutations": [
          "validate_with_level_accepts_c186f0f_1"
        ],
        "tasks": [
          {
            "property": "ValidateWithLevelAccepts",
            "witnesses": [
              {
                "test_fn": "witness_validate_with_level_accepts_case_action_in_action",
                "note": "policy `permit when { Action::\"a\" in Action::\"a\" }`, level=1; fix accepts, bug rejects with .levelError"
              }
            ]
          }
        ],
        "source": {
          "repo": "https://github.com/cedar-policy/cedar-spec",
          "commits": [
            "c186f0f4d34c7f244836279e0b4aa6535e1ce252"
          ],
          "commit_subjects": [
            "Update level checking to allow access to literals equal to environment action (#573)"
          ],
          "prs": [
            573
          ],
          "summary": "Level-checker completeness gap. Pre-#573, `TypedExpr.checkEntityAccessLevel`\nhad no case for literal entity UIDs in entity-access positions, so the\nfallthrough `_, _ => false` rejected expressions like `Action::\"a\" in\nAction::\"a\"` (where the action literal is the left operand of `.mem`).\nPolicies that used a literal action in any entity-access position\nfailed level checking with `.levelError` even though they were\nsemantically valid. Rust's level checker accepted them, breaking\nLean/Rust differential parity.\n\nThe fix added the case `.lit (.entityUID euid) _, _ => euid == env.reqty.action`\nso a literal matching the environment's action passes level checking.\nThis is a *completeness* fix (the buggy validator is over-strict, not\nunsound), but ETNA's pattern still applies: the witness asserts a\nknown-good policy is accepted, and the variant patch causes the witness\nto fail with `.levelError`.\n"
        },
        "injection": {
          "kind": "patch",
          "files": [
            "cedar-lean/Cedar/Validation/Levels.lean"
          ],
          "locations": [
            {
              "file": "cedar-lean/Cedar/Validation/Levels.lean",
              "line": 61,
              "symbol": "Cedar.Validation.TypedExpr.checkEntityAccessLevel"
            }
          ],
          "patch": "patches/validate_with_level_accepts_c186f0f_1.patch"
        },
        "bug": {
          "short_name": "validate_with_level_accepts",
          "invariant": "For the chosen `(policies, schema, level)` fixture, `validateWithLevel` returns `.ok ()`. (A unit-test-style invariant: the level checker should not over-reject literal action references.)",
          "how_triggered": "Replacing `euid == env.reqty.action` with `false` in the literal-entity case of `checkEntityAccessLevel` makes the level checker reject `Action::\"a\" in Action::\"a\"`. The witness policy's level check then fails with `.levelError`."
        }
      }
    ]
  },
  "metrics": [
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNegativeSignPreserved",
      "mutations": [
        "decimal_parse_negative_sign_preserved_84fe9c6_1"
      ],
      "mode": "solve",
      "trial": 0,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:29.690225347+00:00",
      "status": "failed",
      "tests": 34,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"-0.2\") — Decimal.parse \"-0.2\" = some { toUInt64 := 2000 } but a leading '-' must yield a non-positive decimal",
      "hash": "eb0cce0a77e405eae25d6795823120b05637ed30"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNegativeSignPreserved",
      "mutations": [
        "decimal_parse_negative_sign_preserved_84fe9c6_1"
      ],
      "mode": "solve",
      "trial": 1,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:30.177523178+00:00",
      "status": "failed",
      "tests": 28,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"-0.469\") — Decimal.parse \"-0.469\" = some { toUInt64 := 4690 } but a leading '-' must yield a non-positive decimal",
      "hash": "eb0cce0a77e405eae25d6795823120b05637ed30"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNegativeSignPreserved",
      "mutations": [
        "decimal_parse_negative_sign_preserved_84fe9c6_1"
      ],
      "mode": "solve",
      "trial": 2,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:30.663407755+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "1000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "eb0cce0a77e405eae25d6795823120b05637ed30"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNegativeSignPreserved",
      "mutations": [
        "decimal_parse_negative_sign_preserved_84fe9c6_1"
      ],
      "mode": "solve",
      "trial": 3,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:31.148232849+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "eb0cce0a77e405eae25d6795823120b05637ed30"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNegativeSignPreserved",
      "mutations": [
        "decimal_parse_negative_sign_preserved_84fe9c6_1"
      ],
      "mode": "solve",
      "trial": 4,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:31.642597110+00:00",
      "status": "failed",
      "tests": 67,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"-0.6\") — Decimal.parse \"-0.6\" = some { toUInt64 := 6000 } but a leading '-' must yield a non-positive decimal",
      "hash": "eb0cce0a77e405eae25d6795823120b05637ed30"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNegativeSignPreserved",
      "mutations": [
        "decimal_parse_negative_sign_preserved_84fe9c6_1"
      ],
      "mode": "solve",
      "trial": 5,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:32.132202500+00:00",
      "status": "failed",
      "tests": 18,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"-0.466\") — Decimal.parse \"-0.466\" = some { toUInt64 := 4660 } but a leading '-' must yield a non-positive decimal",
      "hash": "eb0cce0a77e405eae25d6795823120b05637ed30"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNegativeSignPreserved",
      "mutations": [
        "decimal_parse_negative_sign_preserved_84fe9c6_1"
      ],
      "mode": "solve",
      "trial": 6,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:32.619064329+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "1000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "eb0cce0a77e405eae25d6795823120b05637ed30"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNegativeSignPreserved",
      "mutations": [
        "decimal_parse_negative_sign_preserved_84fe9c6_1"
      ],
      "mode": "solve",
      "trial": 7,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:33.106671949+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "eb0cce0a77e405eae25d6795823120b05637ed30"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNegativeSignPreserved",
      "mutations": [
        "decimal_parse_negative_sign_preserved_84fe9c6_1"
      ],
      "mode": "solve",
      "trial": 8,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:33.594928214+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "eb0cce0a77e405eae25d6795823120b05637ed30"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNegativeSignPreserved",
      "mutations": [
        "decimal_parse_negative_sign_preserved_84fe9c6_1"
      ],
      "mode": "solve",
      "trial": 9,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:34.082142326+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "eb0cce0a77e405eae25d6795823120b05637ed30"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNoUnderscore",
      "mutations": [
        "decimal_parse_no_underscore_a0c5812_1"
      ],
      "mode": "solve",
      "trial": 0,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:42.507785061+00:00",
      "status": "failed",
      "tests": 11,
      "discards": 0,
      "time": "1000us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"-0.1_33\") — Decimal.parse \"-0.1_33\" = some { toUInt64 := 18446744073709551483 } but underscores are disallowed",
      "hash": "e4073a5845742f01f3c588c664cfb890049eb2d6"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNoUnderscore",
      "mutations": [
        "decimal_parse_no_underscore_a0c5812_1"
      ],
      "mode": "solve",
      "trial": 1,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:42.994800272+00:00",
      "status": "failed",
      "tests": 18,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"-08_8.8820\") — Decimal.parse \"-08_8.8820\" = some { toUInt64 := 18446744073708662796 } but underscores are disallowed",
      "hash": "e4073a5845742f01f3c588c664cfb890049eb2d6"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNoUnderscore",
      "mutations": [
        "decimal_parse_no_underscore_a0c5812_1"
      ],
      "mode": "solve",
      "trial": 2,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:43.483895772+00:00",
      "status": "failed",
      "tests": 1,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"-5_0.2\") — Decimal.parse \"-5_0.2\" = some { toUInt64 := 18446744073709049616 } but underscores are disallowed",
      "hash": "e4073a5845742f01f3c588c664cfb890049eb2d6"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNoUnderscore",
      "mutations": [
        "decimal_parse_no_underscore_a0c5812_1"
      ],
      "mode": "solve",
      "trial": 3,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:43.970005010+00:00",
      "status": "failed",
      "tests": 12,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"-2216.05_9\") — Decimal.parse \"-2216.05_9\" = some { toUInt64 := 18446744073687391557 } but underscores are disallowed",
      "hash": "e4073a5845742f01f3c588c664cfb890049eb2d6"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNoUnderscore",
      "mutations": [
        "decimal_parse_no_underscore_a0c5812_1"
      ],
      "mode": "solve",
      "trial": 4,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:44.459756677+00:00",
      "status": "failed",
      "tests": 74,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"0.9_8\") — Decimal.parse \"0.9_8\" = some { toUInt64 := 980 } but underscores are disallowed",
      "hash": "e4073a5845742f01f3c588c664cfb890049eb2d6"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNoUnderscore",
      "mutations": [
        "decimal_parse_no_underscore_a0c5812_1"
      ],
      "mode": "solve",
      "trial": 5,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:44.957450307+00:00",
      "status": "failed",
      "tests": 4,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"-3_83.7\") — Decimal.parse \"-3_83.7\" = some { toUInt64 := 18446744073705714616 } but underscores are disallowed",
      "hash": "e4073a5845742f01f3c588c664cfb890049eb2d6"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNoUnderscore",
      "mutations": [
        "decimal_parse_no_underscore_a0c5812_1"
      ],
      "mode": "solve",
      "trial": 6,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:45.446459826+00:00",
      "status": "failed",
      "tests": 1,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"5.70_4\") — Decimal.parse \"5.70_4\" = some { toUInt64 := 50704 } but underscores are disallowed",
      "hash": "e4073a5845742f01f3c588c664cfb890049eb2d6"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNoUnderscore",
      "mutations": [
        "decimal_parse_no_underscore_a0c5812_1"
      ],
      "mode": "solve",
      "trial": 7,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:45.946222090+00:00",
      "status": "failed",
      "tests": 1,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"6_5.3_6\") — Decimal.parse \"6_5.3_6\" = some { toUInt64 := 650360 } but underscores are disallowed",
      "hash": "e4073a5845742f01f3c588c664cfb890049eb2d6"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNoUnderscore",
      "mutations": [
        "decimal_parse_no_underscore_a0c5812_1"
      ],
      "mode": "solve",
      "trial": 8,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:46.440738432+00:00",
      "status": "failed",
      "tests": 1,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"0_30.532\") — Decimal.parse \"0_30.532\" = some { toUInt64 := 305320 } but underscores are disallowed",
      "hash": "e4073a5845742f01f3c588c664cfb890049eb2d6"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DecimalParseNoUnderscore",
      "mutations": [
        "decimal_parse_no_underscore_a0c5812_1"
      ],
      "mode": "solve",
      "trial": 9,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:46.949460086+00:00",
      "status": "failed",
      "tests": 21,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"-54_3.91\") — Decimal.parse \"-54_3.91\" = some { toUInt64 := 18446744073704112516 } but underscores are disallowed",
      "hash": "e4073a5845742f01f3c588c664cfb890049eb2d6"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateActionEntityNoAttrs",
      "mutations": [
        "validator_action_entity_no_attrs_d7ab5ab_1"
      ],
      "mode": "solve",
      "trial": 0,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:55.498725928+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "12000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "ce3840552d280ded202d3288d92f7087c0d65c1b"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateActionEntityNoAttrs",
      "mutations": [
        "validator_action_entity_no_attrs_d7ab5ab_1"
      ],
      "mode": "solve",
      "trial": 1,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:56.005207669+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "10000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "ce3840552d280ded202d3288d92f7087c0d65c1b"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateActionEntityNoAttrs",
      "mutations": [
        "validator_action_entity_no_attrs_d7ab5ab_1"
      ],
      "mode": "solve",
      "trial": 2,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:56.510340957+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "12000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "ce3840552d280ded202d3288d92f7087c0d65c1b"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateActionEntityNoAttrs",
      "mutations": [
        "validator_action_entity_no_attrs_d7ab5ab_1"
      ],
      "mode": "solve",
      "trial": 3,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:57.035830346+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "11000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "ce3840552d280ded202d3288d92f7087c0d65c1b"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateActionEntityNoAttrs",
      "mutations": [
        "validator_action_entity_no_attrs_d7ab5ab_1"
      ],
      "mode": "solve",
      "trial": 4,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:57.564975901+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "11000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "ce3840552d280ded202d3288d92f7087c0d65c1b"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateActionEntityNoAttrs",
      "mutations": [
        "validator_action_entity_no_attrs_d7ab5ab_1"
      ],
      "mode": "solve",
      "trial": 5,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:58.093269270+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "12000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "ce3840552d280ded202d3288d92f7087c0d65c1b"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateActionEntityNoAttrs",
      "mutations": [
        "validator_action_entity_no_attrs_d7ab5ab_1"
      ],
      "mode": "solve",
      "trial": 6,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:58.620005805+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "11000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "ce3840552d280ded202d3288d92f7087c0d65c1b"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateActionEntityNoAttrs",
      "mutations": [
        "validator_action_entity_no_attrs_d7ab5ab_1"
      ],
      "mode": "solve",
      "trial": 7,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:59.142955321+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "12000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "ce3840552d280ded202d3288d92f7087c0d65c1b"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateActionEntityNoAttrs",
      "mutations": [
        "validator_action_entity_no_attrs_d7ab5ab_1"
      ],
      "mode": "solve",
      "trial": 8,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:50:59.658631509+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "11000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "ce3840552d280ded202d3288d92f7087c0d65c1b"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateActionEntityNoAttrs",
      "mutations": [
        "validator_action_entity_no_attrs_d7ab5ab_1"
      ],
      "mode": "solve",
      "trial": 9,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:00.162300187+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "12000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "ce3840552d280ded202d3288d92f7087c0d65c1b"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SmtEncodeStringBalancedQuotes",
      "mutations": [
        "smt_encode_string_balanced_quotes_84708ca_1"
      ],
      "mode": "solve",
      "trial": 0,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:09.326697177+00:00",
      "status": "failed",
      "tests": 42,
      "discards": 0,
      "time": "1000us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"b3$%2`\\\" 0\\x1a #\\x1e: 2`\\x1b1\\x161)%`b:\\x1dA 3%A/,\\x14\") — encodeString(\"b3$%2`\\\" 0\\x1a #\\x1e: 2`\\x1b1\\x161)%`b:\\x1dA 3%A/,\\x14\") wrapped to \"\\\"b3$%2`\\\" 0\\\\u{1a} #\\\\u{1e}: 2`\\\\u{1b}1\\\\u{16}1)%`b:\\\\u{1d}A 3%A/,\\\\u{14}\\\"\" has 3 '\"' (odd; malformed SMT)",
      "hash": "3965a13c1488e16b6acc17bbc25427d20735da26"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SmtEncodeStringBalancedQuotes",
      "mutations": [
        "smt_encode_string_balanced_quotes_84708ca_1"
      ],
      "mode": "solve",
      "trial": 1,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:09.815636973+00:00",
      "status": "failed",
      "tests": 35,
      "discards": 0,
      "time": "1000us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"3 /`cc\\x1822\\tb\\x0e\\x15:C\\\"1\\x1a\\x17`\\x18\\t/\") — encodeString(\"3 /`cc\\x1822\\tb\\x0e\\x15:C\\\"1\\x1a\\x17`\\x18\\t/\") wrapped to \"\\\"3 /`cc\\\\u{18}22\\\\u{9}b\\\\u{e}\\\\u{15}:C\\\"1\\\\u{1a}\\\\u{17}`\\\\u{18}\\\\u{9}/\\\"\" has 3 '\"' (odd; malformed SMT)",
      "hash": "3965a13c1488e16b6acc17bbc25427d20735da26"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SmtEncodeStringBalancedQuotes",
      "mutations": [
        "smt_encode_string_balanced_quotes_84708ca_1"
      ],
      "mode": "solve",
      "trial": 2,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:10.305309213+00:00",
      "status": "failed",
      "tests": 40,
      "discards": 0,
      "time": "1000us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\";/\\\"2, \\x050c3;/\\x16B\\x14/; ;3\\x03`$:\\\\\\\\\\x052\\x0f`BAB/b \\\\,1\") — encodeString(\";/\\\"2, \\x050c3;/\\x16B\\x14/; ;3\\x03`$:\\\\\\\\\\x052\\x0f`BAB/b \\\\,1\") wrapped to \"\\\";/\\\"2, \\\\u{5}0c3;/\\\\u{16}B\\\\u{14}/; ;3\\\\u{3}`$:\\\\u{5c}\\\\u{5c}\\\\u{5}2\\\\u{f}`BAB/b \\\\u{5c},1\\\"\" has 3 '\"' (odd; malformed SMT)",
      "hash": "3965a13c1488e16b6acc17bbc25427d20735da26"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SmtEncodeStringBalancedQuotes",
      "mutations": [
        "smt_encode_string_balanced_quotes_84708ca_1"
      ],
      "mode": "solve",
      "trial": 3,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:10.797462696+00:00",
      "status": "failed",
      "tests": 42,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"\\x16A\\\" \\x061a)/&\") — encodeString(\"\\x16A\\\" \\x061a)/&\") wrapped to \"\\\"\\\\u{16}A\\\" \\\\u{6}1a)/&\\\"\" has 3 '\"' (odd; malformed SMT)",
      "hash": "3965a13c1488e16b6acc17bbc25427d20735da26"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SmtEncodeStringBalancedQuotes",
      "mutations": [
        "smt_encode_string_balanced_quotes_84708ca_1"
      ],
      "mode": "solve",
      "trial": 4,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:11.288864387+00:00",
      "status": "failed",
      "tests": 38,
      "discards": 0,
      "time": "1000us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"\\\"\\x00b2a`a3b \\x05\\x111\\x08A:\\\\c\") — encodeString(\"\\\"\\x00b2a`a3b \\x05\\x111\\x08A:\\\\c\") wrapped to \"\\\"\\\"\\\\u{0}b2a`a3b \\\\u{5}\\\\u{11}1\\\\u{8}A:\\\\u{5c}c\\\"\" has 3 '\"' (odd; malformed SMT)",
      "hash": "3965a13c1488e16b6acc17bbc25427d20735da26"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SmtEncodeStringBalancedQuotes",
      "mutations": [
        "smt_encode_string_balanced_quotes_84708ca_1"
      ],
      "mode": "solve",
      "trial": 5,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:11.778079542+00:00",
      "status": "failed",
      "tests": 49,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"/0b33;:cB132,\\\"\\x12a\\x0f\\x01acb\\x0c`\\x01B*c\") — encodeString(\"/0b33;:cB132,\\\"\\x12a\\x0f\\x01acb\\x0c`\\x01B*c\") wrapped to \"\\\"/0b33;:cB132,\\\"\\\\u{12}a\\\\u{f}\\\\u{1}acb\\\\u{c}`\\\\u{1}B*c\\\"\" has 3 '\"' (odd; malformed SMT)",
      "hash": "3965a13c1488e16b6acc17bbc25427d20735da26"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SmtEncodeStringBalancedQuotes",
      "mutations": [
        "smt_encode_string_balanced_quotes_84708ca_1"
      ],
      "mode": "solve",
      "trial": 6,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:12.269033473+00:00",
      "status": "failed",
      "tests": 45,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"\\x02,B3\\x06(B\\\"c\\x0232;,\") — encodeString(\"\\x02,B3\\x06(B\\\"c\\x0232;,\") wrapped to \"\\\"\\\\u{2},B3\\\\u{6}(B\\\"c\\\\u{2}32;,\\\"\" has 3 '\"' (odd; malformed SMT)",
      "hash": "3965a13c1488e16b6acc17bbc25427d20735da26"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SmtEncodeStringBalancedQuotes",
      "mutations": [
        "smt_encode_string_balanced_quotes_84708ca_1"
      ],
      "mode": "solve",
      "trial": 7,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:12.760922569+00:00",
      "status": "failed",
      "tests": 35,
      "discards": 0,
      "time": "1000us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"`\\\\A \\x11c \\x08A::\\x00`\\x01 1c\\x0e01 \\x0f\\x18\\x19c,\\\"\") — encodeString(\"`\\\\A \\x11c \\x08A::\\x00`\\x01 1c\\x0e01 \\x0f\\x18\\x19c,\\\"\") wrapped to \"\\\"`\\\\u{5c}A \\\\u{11}c \\\\u{8}A::\\\\u{0}`\\\\u{1} 1c\\\\u{e}01 \\\\u{f}\\\\u{18}\\\\u{19}c,\\\"\\\"\" has 3 '\"' (odd; malformed SMT)",
      "hash": "3965a13c1488e16b6acc17bbc25427d20735da26"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SmtEncodeStringBalancedQuotes",
      "mutations": [
        "smt_encode_string_balanced_quotes_84708ca_1"
      ],
      "mode": "solve",
      "trial": 8,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:13.253538850+00:00",
      "status": "failed",
      "tests": 40,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\":b\\x08\\\"a,\\x05b2bAb;1c::$'0,;\\x0d\\x16 ;:\\nB:&\\x17Cb`2 \") — encodeString(\":b\\x08\\\"a,\\x05b2bAb;1c::$'0,;\\x0d\\x16 ;:\\nB:&\\x17Cb`2 \") wrapped to \"\\\":b\\\\u{8}\\\"a,\\\\u{5}b2bAb;1c::$'0,;\\\\u{d}\\\\u{16} ;:\\\\u{a}B:&\\\\u{17}Cb`2 \\\"\" has 3 '\"' (odd; malformed SMT)",
      "hash": "3965a13c1488e16b6acc17bbc25427d20735da26"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SmtEncodeStringBalancedQuotes",
      "mutations": [
        "smt_encode_string_balanced_quotes_84708ca_1"
      ],
      "mode": "solve",
      "trial": 9,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:13.743412682+00:00",
      "status": "failed",
      "tests": 35,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(\"\\\"311/2b\") — encodeString(\"\\\"311/2b\") wrapped to \"\\\"\\\"311/2b\\\"\" has 3 '\"' (odd; malformed SMT)",
      "hash": "3965a13c1488e16b6acc17bbc25427d20735da26"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRejectsUndeclaredEntities",
      "mutations": [
        "validate_rejects_undeclared_entities_eb3bfff_1"
      ],
      "mode": "solve",
      "trial": 0,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:24.499637994+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "17000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "9ba8c9084fdf6fd8ba8323b6764ff2ca57b1f453"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRejectsUndeclaredEntities",
      "mutations": [
        "validate_rejects_undeclared_entities_eb3bfff_1"
      ],
      "mode": "solve",
      "trial": 1,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:25.009562556+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "17000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "9ba8c9084fdf6fd8ba8323b6764ff2ca57b1f453"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRejectsUndeclaredEntities",
      "mutations": [
        "validate_rejects_undeclared_entities_eb3bfff_1"
      ],
      "mode": "solve",
      "trial": 2,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:25.519347727+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "19000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "9ba8c9084fdf6fd8ba8323b6764ff2ca57b1f453"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRejectsUndeclaredEntities",
      "mutations": [
        "validate_rejects_undeclared_entities_eb3bfff_1"
      ],
      "mode": "solve",
      "trial": 3,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:26.031275351+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "18000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "9ba8c9084fdf6fd8ba8323b6764ff2ca57b1f453"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRejectsUndeclaredEntities",
      "mutations": [
        "validate_rejects_undeclared_entities_eb3bfff_1"
      ],
      "mode": "solve",
      "trial": 4,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:26.542304679+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "18000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "9ba8c9084fdf6fd8ba8323b6764ff2ca57b1f453"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRejectsUndeclaredEntities",
      "mutations": [
        "validate_rejects_undeclared_entities_eb3bfff_1"
      ],
      "mode": "solve",
      "trial": 5,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:27.050123204+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "18000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "9ba8c9084fdf6fd8ba8323b6764ff2ca57b1f453"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRejectsUndeclaredEntities",
      "mutations": [
        "validate_rejects_undeclared_entities_eb3bfff_1"
      ],
      "mode": "solve",
      "trial": 6,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:27.568371457+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "17000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "9ba8c9084fdf6fd8ba8323b6764ff2ca57b1f453"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRejectsUndeclaredEntities",
      "mutations": [
        "validate_rejects_undeclared_entities_eb3bfff_1"
      ],
      "mode": "solve",
      "trial": 7,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:28.079709113+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "18000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "9ba8c9084fdf6fd8ba8323b6764ff2ca57b1f453"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRejectsUndeclaredEntities",
      "mutations": [
        "validate_rejects_undeclared_entities_eb3bfff_1"
      ],
      "mode": "solve",
      "trial": 8,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:28.589214365+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "19000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "9ba8c9084fdf6fd8ba8323b6764ff2ca57b1f453"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRejectsUndeclaredEntities",
      "mutations": [
        "validate_rejects_undeclared_entities_eb3bfff_1"
      ],
      "mode": "solve",
      "trial": 9,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:29.105471426+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "17000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "9ba8c9084fdf6fd8ba8323b6764ff2ca57b1f453"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRequestPrincipalExists",
      "mutations": [
        "validate_request_principal_exists_1a76346_1"
      ],
      "mode": "solve",
      "trial": 0,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:39.671125359+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "2000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "57b0b66ed9dcb43a290d82e431ac6c2637c4d265"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRequestPrincipalExists",
      "mutations": [
        "validate_request_principal_exists_1a76346_1"
      ],
      "mode": "solve",
      "trial": 1,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:40.164627662+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "3000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "57b0b66ed9dcb43a290d82e431ac6c2637c4d265"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRequestPrincipalExists",
      "mutations": [
        "validate_request_principal_exists_1a76346_1"
      ],
      "mode": "solve",
      "trial": 2,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:40.657622514+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "3000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "57b0b66ed9dcb43a290d82e431ac6c2637c4d265"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRequestPrincipalExists",
      "mutations": [
        "validate_request_principal_exists_1a76346_1"
      ],
      "mode": "solve",
      "trial": 3,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:41.148842024+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "3000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "57b0b66ed9dcb43a290d82e431ac6c2637c4d265"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRequestPrincipalExists",
      "mutations": [
        "validate_request_principal_exists_1a76346_1"
      ],
      "mode": "solve",
      "trial": 4,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:41.642228362+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "2000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "57b0b66ed9dcb43a290d82e431ac6c2637c4d265"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRequestPrincipalExists",
      "mutations": [
        "validate_request_principal_exists_1a76346_1"
      ],
      "mode": "solve",
      "trial": 5,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:42.137745012+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "3000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "57b0b66ed9dcb43a290d82e431ac6c2637c4d265"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRequestPrincipalExists",
      "mutations": [
        "validate_request_principal_exists_1a76346_1"
      ],
      "mode": "solve",
      "trial": 6,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:42.641091275+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "3000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "57b0b66ed9dcb43a290d82e431ac6c2637c4d265"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRequestPrincipalExists",
      "mutations": [
        "validate_request_principal_exists_1a76346_1"
      ],
      "mode": "solve",
      "trial": 7,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:43.138058915+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "2000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "57b0b66ed9dcb43a290d82e431ac6c2637c4d265"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRequestPrincipalExists",
      "mutations": [
        "validate_request_principal_exists_1a76346_1"
      ],
      "mode": "solve",
      "trial": 8,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:43.632413412+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "3000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "57b0b66ed9dcb43a290d82e431ac6c2637c4d265"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateRequestPrincipalExists",
      "mutations": [
        "validate_request_principal_exists_1a76346_1"
      ],
      "mode": "solve",
      "trial": 9,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:44.125451987+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "3000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "57b0b66ed9dcb43a290d82e431ac6c2637c4d265"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SchemaWellFormedNoSingletonBools",
      "mutations": [
        "schema_well_formed_no_singleton_bools_e785e2e_1"
      ],
      "mode": "solve",
      "trial": 0,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:52.692875739+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "2000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "5afdc888963ada8eaac6afc1e68085ef13eba374"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SchemaWellFormedNoSingletonBools",
      "mutations": [
        "schema_well_formed_no_singleton_bools_e785e2e_1"
      ],
      "mode": "solve",
      "trial": 1,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:53.187745726+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "2000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "5afdc888963ada8eaac6afc1e68085ef13eba374"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SchemaWellFormedNoSingletonBools",
      "mutations": [
        "schema_well_formed_no_singleton_bools_e785e2e_1"
      ],
      "mode": "solve",
      "trial": 2,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:53.692672144+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "2000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "5afdc888963ada8eaac6afc1e68085ef13eba374"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SchemaWellFormedNoSingletonBools",
      "mutations": [
        "schema_well_formed_no_singleton_bools_e785e2e_1"
      ],
      "mode": "solve",
      "trial": 3,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:54.183144567+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "2000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "5afdc888963ada8eaac6afc1e68085ef13eba374"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SchemaWellFormedNoSingletonBools",
      "mutations": [
        "schema_well_formed_no_singleton_bools_e785e2e_1"
      ],
      "mode": "solve",
      "trial": 4,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:54.686916837+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "2000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "5afdc888963ada8eaac6afc1e68085ef13eba374"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SchemaWellFormedNoSingletonBools",
      "mutations": [
        "schema_well_formed_no_singleton_bools_e785e2e_1"
      ],
      "mode": "solve",
      "trial": 5,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:55.173326687+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "2000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "5afdc888963ada8eaac6afc1e68085ef13eba374"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SchemaWellFormedNoSingletonBools",
      "mutations": [
        "schema_well_formed_no_singleton_bools_e785e2e_1"
      ],
      "mode": "solve",
      "trial": 6,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:55.682484486+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "3000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "5afdc888963ada8eaac6afc1e68085ef13eba374"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SchemaWellFormedNoSingletonBools",
      "mutations": [
        "schema_well_formed_no_singleton_bools_e785e2e_1"
      ],
      "mode": "solve",
      "trial": 7,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:56.165645577+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "2000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "5afdc888963ada8eaac6afc1e68085ef13eba374"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SchemaWellFormedNoSingletonBools",
      "mutations": [
        "schema_well_formed_no_singleton_bools_e785e2e_1"
      ],
      "mode": "solve",
      "trial": 8,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:56.657332766+00:00",
      "status": "failed",
      "tests": 179,
      "discards": 0,
      "time": "2000us",
      "error": null,
      "tool": "plausible",
      "counterexample": "({ ets := Cedar.Data.Map.mk\n           [({ id := \"Action\", path := [] },\n             Cedar.Validation.EntitySchemaEntry.standard\n               { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n                 attrs := Cedar.Data.Map.mk\n                            [(\"age\",\n                              Cedar.Validation.Qualified.required\n                                (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))],\n                 tags := none }),\n            ({ id := \"Album\", path := [] },\n             Cedar.Validation.EntitySchemaEntry.standard\n               { ancestors := Cedar.Data.Set.mk [],\n                 attrs := Cedar.Data.Map.mk\n                            [(\"flag\",\n                              Cedar.Validation.Qualified.required\n                                (Cedar.Validation.CedarType.entity { id := \"Photo\", path := [] }))],\n                 tags := none }),\n            ({ id := \"Photo\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"p1\"]))],\n  acts := Cedar.Data.Map.mk\n            [({ ty := { id := \"User\", path := [] }, eid := \"z\" },\n              { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n                appliesToResource := Cedar.Data.Set.mk\n                                       [{ id := \"Action\", path := [] },\n                                        { id := \"Album\", path := [] },\n                                        { id := \"User\", path := [] }],\n                ancestors := Cedar.Data.Set.mk [],\n                context := Cedar.Data.Map.mk\n                             [(\"age\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] })] }) — Schema.validateWellFormed passed but entity type Action has an unlifted (singleton-bool) attribute",
      "hash": "5afdc888963ada8eaac6afc1e68085ef13eba374"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "SchemaWellFormedNoSingletonBools",
      "mutations": [
        "schema_well_formed_no_singleton_bools_e785e2e_1"
      ],
      "mode": "solve",
      "trial": 9,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:51:57.149175531+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "3000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "5afdc888963ada8eaac6afc1e68085ef13eba374"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DefineEntityRejectsNonMember",
      "mutations": [
        "encoder_define_entity_rejects_non_member_fe5a046_1"
      ],
      "mode": "solve",
      "trial": 0,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:06.152046536+00:00",
      "status": "failed",
      "tests": 1,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([], { ty := { id := \"Album\", path := [] }, eid := \"z\" })) — defineEntity for non-member z returned \"U_enc_m0\" instead of throwing (members: [])",
      "hash": "ae1234b1ea7f290cacd8125651e9902e03755f2a"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DefineEntityRejectsNonMember",
      "mutations": [
        "encoder_define_entity_rejects_non_member_fe5a046_1"
      ],
      "mode": "solve",
      "trial": 1,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:06.650627150+00:00",
      "status": "failed",
      "tests": 1,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([], { ty := { id := \"Action\", path := [] }, eid := \"bob\" })) — defineEntity for non-member bob returned \"U_enc_m0\" instead of throwing (members: [])",
      "hash": "ae1234b1ea7f290cacd8125651e9902e03755f2a"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DefineEntityRejectsNonMember",
      "mutations": [
        "encoder_define_entity_rejects_non_member_fe5a046_1"
      ],
      "mode": "solve",
      "trial": 2,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:07.144641589+00:00",
      "status": "failed",
      "tests": 1,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([], { ty := { id := \"Photo\", path := [] }, eid := \"b\" })) — defineEntity for non-member b returned \"U_enc_m0\" instead of throwing (members: [])",
      "hash": "ae1234b1ea7f290cacd8125651e9902e03755f2a"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DefineEntityRejectsNonMember",
      "mutations": [
        "encoder_define_entity_rejects_non_member_fe5a046_1"
      ],
      "mode": "solve",
      "trial": 3,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:07.644205856+00:00",
      "status": "failed",
      "tests": 1,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([], { ty := { id := \"User\", path := [] }, eid := \"view\" })) — defineEntity for non-member view returned \"U_enc_m0\" instead of throwing (members: [])",
      "hash": "ae1234b1ea7f290cacd8125651e9902e03755f2a"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DefineEntityRejectsNonMember",
      "mutations": [
        "encoder_define_entity_rejects_non_member_fe5a046_1"
      ],
      "mode": "solve",
      "trial": 4,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:08.142675352+00:00",
      "status": "failed",
      "tests": 1,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([], { ty := { id := \"Photo\", path := [] }, eid := \"a\" })) — defineEntity for non-member a returned \"U_enc_m0\" instead of throwing (members: [])",
      "hash": "ae1234b1ea7f290cacd8125651e9902e03755f2a"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DefineEntityRejectsNonMember",
      "mutations": [
        "encoder_define_entity_rejects_non_member_fe5a046_1"
      ],
      "mode": "solve",
      "trial": 5,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:08.642617278+00:00",
      "status": "failed",
      "tests": 1,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([], { ty := { id := \"Photo\", path := [] }, eid := \"z\" })) — defineEntity for non-member z returned \"U_enc_m0\" instead of throwing (members: [])",
      "hash": "ae1234b1ea7f290cacd8125651e9902e03755f2a"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DefineEntityRejectsNonMember",
      "mutations": [
        "encoder_define_entity_rejects_non_member_fe5a046_1"
      ],
      "mode": "solve",
      "trial": 6,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:09.145246081+00:00",
      "status": "failed",
      "tests": 1,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([], { ty := { id := \"Photo\", path := [] }, eid := \"y\" })) — defineEntity for non-member y returned \"U_enc_m0\" instead of throwing (members: [])",
      "hash": "ae1234b1ea7f290cacd8125651e9902e03755f2a"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DefineEntityRejectsNonMember",
      "mutations": [
        "encoder_define_entity_rejects_non_member_fe5a046_1"
      ],
      "mode": "solve",
      "trial": 7,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:09.646578558+00:00",
      "status": "failed",
      "tests": 1,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([], { ty := { id := \"Photo\", path := [] }, eid := \"view\" })) — defineEntity for non-member view returned \"U_enc_m0\" instead of throwing (members: [])",
      "hash": "ae1234b1ea7f290cacd8125651e9902e03755f2a"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DefineEntityRejectsNonMember",
      "mutations": [
        "encoder_define_entity_rejects_non_member_fe5a046_1"
      ],
      "mode": "solve",
      "trial": 8,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:10.143702585+00:00",
      "status": "failed",
      "tests": 1,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([], { ty := { id := \"Action\", path := [] }, eid := \"a\" })) — defineEntity for non-member a returned \"U_enc_m0\" instead of throwing (members: [])",
      "hash": "ae1234b1ea7f290cacd8125651e9902e03755f2a"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "DefineEntityRejectsNonMember",
      "mutations": [
        "encoder_define_entity_rejects_non_member_fe5a046_1"
      ],
      "mode": "solve",
      "trial": 9,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:10.641163929+00:00",
      "status": "failed",
      "tests": 1,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([], { ty := { id := \"User\", path := [] }, eid := \"y\" })) — defineEntity for non-member y returned \"U_enc_m0\" instead of throwing (members: [])",
      "hash": "ae1234b1ea7f290cacd8125651e9902e03755f2a"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateWithLevelAccepts",
      "mutations": [
        "validate_with_level_accepts_c186f0f_1"
      ],
      "mode": "solve",
      "trial": 0,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:24.596925946+00:00",
      "status": "failed",
      "tests": 105,
      "discards": 0,
      "time": "9000us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([{ id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.isMem\n                       { id := \"User\", path := [] }\n                       { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Photo\", path := [] }\n                         { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\") }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }),\n    condition := [] }],\n { ets := Cedar.Data.Map.mk\n            [({ id := \"Photo\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [], attrs := Cedar.Data.Map.mk [], tags := none }),\n             ({ id := \"User\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n                  attrs := Cedar.Data.Map.mk [],\n                  tags := some (Cedar.Validation.CedarType.string) })],\n   acts := Cedar.Data.Map.mk\n             [({ ty := { id := \"Action\", path := [] }, eid := \"edit\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk\n                                         [{ id := \"Action\", path := [] },\n                                          { id := \"Album\", path := [] },\n                                          { id := \"Foo\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"Foo\", path := [] }, eid := \"x\" },\n                                 { ty := { id := \"Foo\", path := [] }, eid := \"y\" }],\n                 context := Cedar.Data.Map.mk [] }),\n              ({ ty := { id := \"Foo\", path := [] }, eid := \"b\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"Album\", path := [] }, eid := \"bob\" },\n                                 { ty := { id := \"User\", path := [] }, eid := \"a\" },\n                                 { ty := { id := \"User\", path := [] }, eid := \"bob\" }],\n                 context := Cedar.Data.Map.mk [] }),\n              ({ ty := { id := \"User\", path := [] }, eid := \"b\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Foo\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"Photo\", path := [] }, eid := \"alice\" },\n                                 { ty := { id := \"User\", path := [] }, eid := \"p1\" }],\n                 context := Cedar.Data.Map.mk [] })] },\n 4)) — validateWithLevel rejected policy p0 with .levelError — the level checker rejected an entity-access expression it should have allowed",
      "hash": "3470dc08c010604655e10659819b1de6f8341b18"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateWithLevelAccepts",
      "mutations": [
        "validate_with_level_accepts_c186f0f_1"
      ],
      "mode": "solve",
      "trial": 1,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:25.092050967+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "18000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "3470dc08c010604655e10659819b1de6f8341b18"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateWithLevelAccepts",
      "mutations": [
        "validate_with_level_accepts_c186f0f_1"
      ],
      "mode": "solve",
      "trial": 2,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:25.596945518+00:00",
      "status": "failed",
      "tests": 47,
      "discards": 0,
      "time": "2000us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([{ id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Photo\", path := [] }, eid := \"b\" },\n                      { ty := { id := \"Photo\", path := [] }, eid := \"x\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"User\", path := [] }, eid := \"a\" },\n                      { ty := { id := \"User\", path := [] }, eid := \"p1\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n                              (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 8 })) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Action\", path := [] }\n                         { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"bob\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.eq)\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\")))\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 73 }))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 60 }))) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"y\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.lit\n                              (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"a\" }) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Foo\", path := [] }, eid := \"bob\" },\n                      { ty := { id := \"Action\", path := [] }, eid := \"a\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Album\", path := [] }\n                         { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Foo\", path := [] }, eid := \"edit\" },\n                      { ty := { id := \"Foo\", path := [] }, eid := \"b\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.binaryApp\n                              (Cedar.Spec.BinaryOp.mem)\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true)))\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 97 }))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Photo\", path := [] }\n                          { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"ghost\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\") }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.eq)\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\")))\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"a\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"z\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.lit\n                                  (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"a\" }))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Album\", path := [] }, eid := \"y\" },\n                      { ty := { id := \"Action\", path := [] }, eid := \"b\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.less)\n                                (Cedar.Spec.Expr.lit\n                                  (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"x\" }))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"b\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Photo\", path := [] }, eid := \"a\" },\n                      { ty := { id := \"Action\", path := [] }, eid := \"z\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Foo\", path := [] }\n                         { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)))\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"User\", path := [] }\n                         { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.less)\n                                (Cedar.Spec.Expr.lit\n                                  (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"a\" }))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Photo\", path := [] }\n                          { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false) }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Action\", path := [] }\n                          { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\"))\n                              (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\")) }] }],\n { ets := Cedar.Data.Map.mk\n            [({ id := \"Photo\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Photo\", path := [] }],\n                  attrs := Cedar.Data.Map.mk\n                             [(\"flag\",\n                               Cedar.Validation.Qualified.optional\n                                 (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)))],\n                  tags := some (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }) })],\n   acts := Cedar.Data.Map.mk\n             [({ ty := { id := \"Action\", path := [] }, eid := \"edit\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [],\n                 appliesToResource := Cedar.Data.Set.mk\n                                        [{ id := \"Album\", path := [] },\n                                         { id := \"Foo\", path := [] },\n                                         { id := \"Photo\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n                                 { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }],\n                 context := Cedar.Data.Map.mk [] }),\n              ({ ty := { id := \"Album\", path := [] }, eid := \"ghost\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"Action\", path := [] }, eid := \"y\" },\n                                 { ty := { id := \"Foo\", path := [] }, eid := \"bob\" },\n                                 { ty := { id := \"Photo\", path := [] }, eid := \"a\" }],\n                 context := Cedar.Data.Map.mk\n                              [(\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int)),\n                               (\"owner\",\n                                Cedar.Validation.Qualified.optional\n                                  (Cedar.Validation.CedarType.entity { id := \"Album\", path := [] }))] }),\n              ({ ty := { id := \"Photo\", path := [] }, eid := \"z\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk\n                                        [{ id := \"Action\", path := [] },\n                                         { id := \"Foo\", path := [] },\n                                         { id := \"Photo\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"Action\", path := [] }, eid := \"ghost\" },\n                                 { ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n                                 { ty := { id := \"User\", path := [] }, eid := \"ghost\" }],\n                 context := Cedar.Data.Map.mk\n                              [(\"age\",\n                                Cedar.Validation.Qualified.required\n                                  (Cedar.Validation.CedarType.entity { id := \"Album\", path := [] })),\n                               (\"flag\",\n                                Cedar.Validation.Qualified.required\n                                  (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)))] })] },\n 8)) — validateWithLevel rejected policy p1 with .levelError — the level checker rejected an entity-access expression it should have allowed",
      "hash": "3470dc08c010604655e10659819b1de6f8341b18"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateWithLevelAccepts",
      "mutations": [
        "validate_with_level_accepts_c186f0f_1"
      ],
      "mode": "solve",
      "trial": 3,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:26.088554567+00:00",
      "status": "passed",
      "tests": 200,
      "discards": 0,
      "time": "17000us",
      "error": null,
      "tool": "plausible",
      "counterexample": null,
      "hash": "3470dc08c010604655e10659819b1de6f8341b18"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateWithLevelAccepts",
      "mutations": [
        "validate_with_level_accepts_c186f0f_1"
      ],
      "mode": "solve",
      "trial": 4,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:26.594347167+00:00",
      "status": "failed",
      "tests": 75,
      "discards": 0,
      "time": "6000us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([{ id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"view\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"x\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Photo\", path := [] }\n                         { ty := { id := \"Album\", path := [] }, eid := \"bob\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"edit\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.mem)\n                                (Cedar.Spec.Expr.lit\n                                  (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"a\" }))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Album\", path := [] }\n                          { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\") }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"User\", path := [] }, eid := \"bob\" },\n                      { ty := { id := \"Foo\", path := [] }, eid := \"a\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"bob\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"User\", path := [] }\n                         { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n                                (Cedar.Spec.Expr.lit\n                                  (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"bob\" })))\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 44 }))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Photo\", path := [] }\n                          { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"User\", path := [] }, eid := \"z\" },\n                      { ty := { id := \"Action\", path := [] }, eid := \"y\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Action\", path := [] }\n                         { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\"))\n                                (Cedar.Spec.Expr.lit\n                                  (Cedar.Spec.Prim.entityUID\n                                    { ty := { id := \"User\", path := [] }, eid := \"edit\" }))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.eq)\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\")))\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"view\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"bob\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Photo\", path := [] }\n                          { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.isMem\n                       { id := \"User\", path := [] }\n                       { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Foo\", path := [] }\n                         { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.binaryApp\n                              (Cedar.Spec.BinaryOp.eq)\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.less)\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)))\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"z\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Photo\", path := [] }\n                         { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n                      { ty := { id := \"Photo\", path := [] }, eid := \"view\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.lit\n                              (Cedar.Spec.Prim.entityUID { ty := { id := \"Album\", path := [] }, eid := \"edit\" }) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"z\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"z\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)) }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.isMem\n                       { id := \"Foo\", path := [] }\n                       { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"User\", path := [] }\n                         { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"User\", path := [] }\n                          { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.isMem\n                       { id := \"Photo\", path := [] }\n                       { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"b\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.binaryApp\n                              (Cedar.Spec.BinaryOp.less)\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.mem)\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 54 }))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\")))\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.eq)\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"User\", path := [] }\n                          { ty := { id := \"Photo\", path := [] }, eid := \"x\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"z\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.binaryApp\n                              (Cedar.Spec.BinaryOp.less)\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 21 }))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)))\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\"))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Album\", path := [] }, eid := \"p1\" },\n                      { ty := { id := \"Album\", path := [] }, eid := \"edit\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\"))) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"bob\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.lit\n                              (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\"))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Album\", path := [] }, eid := \"alice\" },\n                      { ty := { id := \"Foo\", path := [] }, eid := \"z\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Action\", path := [] }\n                         { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"User\", path := [] }\n                         { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"User\", path := [] }\n                          { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"User\", path := [] }\n                         { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.isMem\n                       { id := \"Action\", path := [] }\n                       { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"a\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))) }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Foo\", path := [] }\n                         { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n    condition := [] }],\n { ets := Cedar.Data.Map.mk\n            [({ id := \"Action\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n                  attrs := Cedar.Data.Map.mk\n                             [(\"age\",\n                               Cedar.Validation.Qualified.optional\n                                 (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.decimal)))],\n                  tags := some (Cedar.Validation.CedarType.int) }),\n             ({ id := \"Album\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n                  attrs := Cedar.Data.Map.mk [],\n                  tags := none }),\n             ({ id := \"Photo\", path := [] }, Cedar.Validation.EntitySchemaEntry.enum (Cedar.Data.Set.mk [\"x\"]))],\n   acts := Cedar.Data.Map.mk\n             [({ ty := { id := \"Action\", path := [] }, eid := \"a\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"Photo\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk [],\n                 context := Cedar.Data.Map.mk [] }),\n              ({ ty := { id := \"Action\", path := [] }, eid := \"y\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk\n                                         [{ id := \"Album\", path := [] },\n                                          { id := \"Photo\", path := [] },\n                                          { id := \"User\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Foo\", path := [] }, eid := \"a\" }],\n                 context := Cedar.Data.Map.mk\n                              [(\"flag\",\n                                Cedar.Validation.Qualified.required\n                                  (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff))),\n                               (\"owner\",\n                                Cedar.Validation.Qualified.optional\n                                  (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)))] }),\n              ({ ty := { id := \"Foo\", path := [] }, eid := \"a\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Foo\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"Album\", path := [] }, eid := \"z\" },\n                                 { ty := { id := \"User\", path := [] }, eid := \"view\" }],\n                 context := Cedar.Data.Map.mk [] })] },\n 19)) — validateWithLevel rejected policy p0 with .levelError — the level checker rejected an entity-access expression it should have allowed",
      "hash": "3470dc08c010604655e10659819b1de6f8341b18"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateWithLevelAccepts",
      "mutations": [
        "validate_with_level_accepts_c186f0f_1"
      ],
      "mode": "solve",
      "trial": 5,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:27.095042076+00:00",
      "status": "failed",
      "tests": 4,
      "discards": 0,
      "time": "0us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([{ id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"view\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Photo\", path := [] }\n                         { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Photo\", path := [] }\n                         { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"alice\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)) }] }],\n { ets := Cedar.Data.Map.mk\n            [({ id := \"Action\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n                  attrs := Cedar.Data.Map.mk\n                             [(\"owner\",\n                               Cedar.Validation.Qualified.optional\n                                 (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)))],\n                  tags := none }),\n             ({ id := \"Album\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [],\n                  attrs := Cedar.Data.Map.mk [],\n                  tags := some (Cedar.Validation.CedarType.int) }),\n             ({ id := \"Photo\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [], attrs := Cedar.Data.Map.mk [], tags := none })],\n   acts := Cedar.Data.Map.mk\n             [({ ty := { id := \"Album\", path := [] }, eid := \"a\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"Action\", path := [] }, eid := \"alice\" },\n                                 { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }],\n                 context := Cedar.Data.Map.mk\n                              [(\"age\",\n                                Cedar.Validation.Qualified.required\n                                  (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)))] }),\n              ({ ty := { id := \"Foo\", path := [] }, eid := \"view\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"Photo\", path := [] }, eid := \"y\" },\n                                 { ty := { id := \"Photo\", path := [] }, eid := \"z\" },\n                                 { ty := { id := \"User\", path := [] }, eid := \"alice\" }],\n                 context := Cedar.Data.Map.mk [] }),\n              ({ ty := { id := \"User\", path := [] }, eid := \"view\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [],\n                 ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }],\n                 context := Cedar.Data.Map.mk\n                              [(\"age\",\n                                Cedar.Validation.Qualified.required\n                                  (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)))] })] },\n 0)) — validateWithLevel rejected policy p2 with .levelError — the level checker rejected an entity-access expression it should have allowed",
      "hash": "3470dc08c010604655e10659819b1de6f8341b18"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateWithLevelAccepts",
      "mutations": [
        "validate_with_level_accepts_c186f0f_1"
      ],
      "mode": "solve",
      "trial": 6,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:27.581970822+00:00",
      "status": "failed",
      "tests": 4,
      "discards": 0,
      "time": "1000us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([{ id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"y\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"User\", path := [] }\n                         { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.binaryApp\n                              (Cedar.Spec.BinaryOp.less)\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)) }] }],\n { ets := Cedar.Data.Map.mk\n            [({ id := \"Action\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n                  attrs := Cedar.Data.Map.mk\n                             [(\"flag\",\n                               Cedar.Validation.Qualified.optional\n                                 (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt))),\n                              (\"owner\",\n                               Cedar.Validation.Qualified.optional\n                                 (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.ipAddr)))],\n                  tags := none }),\n             ({ id := \"Foo\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [],\n                  attrs := Cedar.Data.Map.mk\n                             [(\"name\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int)),\n                              (\"owner\",\n                               Cedar.Validation.Qualified.optional\n                                 (Cedar.Validation.CedarType.entity { id := \"Action\", path := [] }))],\n                  tags := some (Cedar.Validation.CedarType.entity { id := \"Action\", path := [] }) }),\n             ({ id := \"User\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n                  attrs := Cedar.Data.Map.mk\n                             [(\"age\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))],\n                  tags := some (Cedar.Validation.CedarType.int) })],\n   acts := Cedar.Data.Map.mk\n             [({ ty := { id := \"Album\", path := [] }, eid := \"z\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [],\n                 ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Action\", path := [] }, eid := \"x\" }],\n                 context := Cedar.Data.Map.mk\n                              [(\"flag\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.string))] }),\n              ({ ty := { id := \"Foo\", path := [] }, eid := \"view\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"Action\", path := [] }, eid := \"alice\" },\n                                 { ty := { id := \"Photo\", path := [] }, eid := \"b\" },\n                                 { ty := { id := \"Photo\", path := [] }, eid := \"x\" }],\n                 context := Cedar.Data.Map.mk\n                              [(\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.int))] }),\n              ({ ty := { id := \"Photo\", path := [] }, eid := \"alice\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"User\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"Action\", path := [] }, eid := \"ghost\" },\n                                 { ty := { id := \"Album\", path := [] }, eid := \"b\" },\n                                 { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }],\n                 context := Cedar.Data.Map.mk [] })] },\n 3)) — validateWithLevel rejected policy p2 with .levelError — the level checker rejected an entity-access expression it should have allowed",
      "hash": "3470dc08c010604655e10659819b1de6f8341b18"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateWithLevelAccepts",
      "mutations": [
        "validate_with_level_accepts_c186f0f_1"
      ],
      "mode": "solve",
      "trial": 7,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:28.068459627+00:00",
      "status": "failed",
      "tests": 142,
      "discards": 0,
      "time": "12000us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([{ id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"b\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.isMem\n                       { id := \"Foo\", path := [] }\n                       { ty := { id := \"User\", path := [] }, eid := \"bob\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"a\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Foo\", path := [] }\n                         { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Album\", path := [] }\n                          { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"x\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n    condition := [] }],\n { ets := Cedar.Data.Map.mk\n            [({ id := \"Foo\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [],\n                  attrs := Cedar.Data.Map.mk [],\n                  tags := some (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt)) }),\n             ({ id := \"Photo\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk\n                                 [{ id := \"Foo\", path := [] },\n                                  { id := \"Photo\", path := [] },\n                                  { id := \"User\", path := [] }],\n                  attrs := Cedar.Data.Map.mk\n                             [(\"age\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int))],\n                  tags := none }),\n             ({ id := \"User\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n                  attrs := Cedar.Data.Map.mk\n                             [(\"age\",\n                               Cedar.Validation.Qualified.required\n                                 (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)))],\n                  tags := some (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool)) })],\n   acts := Cedar.Data.Map.mk\n             [({ ty := { id := \"Foo\", path := [] }, eid := \"ghost\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk\n                                        [{ id := \"Action\", path := [] },\n                                         { id := \"Foo\", path := [] },\n                                         { id := \"User\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"User\", path := [] }, eid := \"b\" },\n                                 { ty := { id := \"User\", path := [] }, eid := \"y\" }],\n                 context := Cedar.Data.Map.mk\n                              [(\"age\",\n                                Cedar.Validation.Qualified.required\n                                  (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool))),\n                               (\"owner\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))] }),\n              ({ ty := { id := \"Foo\", path := [] }, eid := \"view\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [],\n                 appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"Action\", path := [] }, eid := \"z\" },\n                                 { ty := { id := \"Foo\", path := [] }, eid := \"y\" }],\n                 context := Cedar.Data.Map.mk [] })] },\n 19)) — validateWithLevel rejected policy p2 with .levelError — the level checker rejected an entity-access expression it should have allowed",
      "hash": "3470dc08c010604655e10659819b1de6f8341b18"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateWithLevelAccepts",
      "mutations": [
        "validate_with_level_accepts_c186f0f_1"
      ],
      "mode": "solve",
      "trial": 8,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:28.571405340+00:00",
      "status": "failed",
      "tests": 32,
      "discards": 0,
      "time": "1000us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([{ id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\") }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"bob\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"User\", path := [] }, eid := \"ghost\" },\n                      { ty := { id := \"User\", path := [] }, eid := \"alice\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\"))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.resource) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"view\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Album\", path := [] }\n                         { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"z\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"alice\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))\n                                (Cedar.Spec.Expr.lit\n                                  (Cedar.Spec.Prim.entityUID\n                                    { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Album\", path := [] }\n                          { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"ghost\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"User\", path := [] }\n                         { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 64 })))\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)) }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"User\", path := [] }\n                          { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"age\")))\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 71 }))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 24 }))) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Foo\", path := [] }\n                          { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"y\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.isMem\n                       { id := \"User\", path := [] }\n                       { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\") }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Action\", path := [] }, eid := \"z\" },\n                      { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"y\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"y\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.binaryApp\n                              (Cedar.Spec.BinaryOp.eq)\n                              (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"alice\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.binaryApp\n                              (Cedar.Spec.BinaryOp.less)\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 55 }))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"name\")))\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"User\", path := [] }, eid := \"x\" },\n                      { ty := { id := \"User\", path := [] }, eid := \"alice\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"edit\" }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"p1\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)))\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"User\", path := [] }\n                          { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Foo\", path := [] }\n                          { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"User\", path := [] }\n                         { ty := { id := \"User\", path := [] }, eid := \"p1\" }),\n    condition := [] }],\n { ets := Cedar.Data.Map.mk\n            [({ id := \"Album\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }],\n                  attrs := Cedar.Data.Map.mk [],\n                  tags := some (Cedar.Validation.CedarType.entity { id := \"User\", path := [] }) }),\n             ({ id := \"Foo\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"Foo\", path := [] }],\n                  attrs := Cedar.Data.Map.mk\n                             [(\"flag\", Cedar.Validation.Qualified.required (Cedar.Validation.CedarType.string))],\n                  tags := none }),\n             ({ id := \"Photo\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n                  attrs := Cedar.Data.Map.mk\n                             [(\"age\",\n                               Cedar.Validation.Qualified.required\n                                 (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.anyBool))),\n                              (\"flag\",\n                               Cedar.Validation.Qualified.optional\n                                 (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)))],\n                  tags := some (Cedar.Validation.CedarType.ext (Cedar.Validation.ExtType.datetime)) })],\n   acts := Cedar.Data.Map.mk\n             [({ ty := { id := \"User\", path := [] }, eid := \"a\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }, { id := \"User\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk [{ ty := { id := \"Foo\", path := [] }, eid := \"bob\" }],\n                 context := Cedar.Data.Map.mk [] })] },\n 21)) — validateWithLevel rejected policy p2 with .levelError — the level checker rejected an entity-access expression it should have allowed",
      "hash": "3470dc08c010604655e10659819b1de6f8341b18"
    },
    {
      "experiment": "ci-run",
      "workload": "cedar-lean",
      "language": "lean",
      "strategy": "plausible",
      "property": "ValidateWithLevelAccepts",
      "mutations": [
        "validate_with_level_accepts_c186f0f_1"
      ],
      "mode": "solve",
      "trial": 9,
      "timeout": 60.0,
      "timestamp": "2026-04-29T04:52:29.060467644+00:00",
      "status": "failed",
      "tests": 65,
      "discards": 0,
      "time": "4000us",
      "error": null,
      "tool": "plausible",
      "counterexample": "(([{ id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"User\", path := [] }, eid := \"edit\" },\n                      { ty := { id := \"User\", path := [] }, eid := \"z\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Foo\", path := [] }\n                          { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"x\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.isMem\n                       { id := \"Photo\", path := [] }\n                       { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"edit\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Action\", path := [] }\n                          { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.isMem\n                       { id := \"Action\", path := [] }\n                       { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"bob\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"x\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true)))\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"alice\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Album\", path := [] }\n                          { ty := { id := \"User\", path := [] }, eid := \"view\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Foo\", path := [] }\n                         { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.isMem\n                       { id := \"Photo\", path := [] }\n                       { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"x\" }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Foo\", path := [] }\n                          { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"b\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Action\", path := [] }\n                         { ty := { id := \"Photo\", path := [] }, eid := \"p1\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"p1\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Album\", path := [] }\n                          { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"ghost\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"User\", path := [] }\n                         { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.binaryApp\n                              (Cedar.Spec.BinaryOp.eq)\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.lit\n                                  (Cedar.Spec.Prim.entityUID { ty := { id := \"Photo\", path := [] }, eid := \"z\" }))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource)))\n                              (Cedar.Spec.Expr.lit\n                                (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"bob\" })) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.binaryApp\n                              (Cedar.Spec.BinaryOp.less)\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n                                (Cedar.Spec.Expr.lit\n                                  (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"x\" })))\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.less)\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool true))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"x\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Photo\", path := [] }, eid := \"bob\" },\n                      { ty := { id := \"User\", path := [] }, eid := \"x\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"bob\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"owner\") }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"ghost\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Album\", path := [] }, eid := \"edit\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"User\", path := [] }\n                          { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.binaryApp\n                              (Cedar.Spec.BinaryOp.less)\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.eq)\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 15 }))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"alice\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Photo\", path := [] }\n                          { ty := { id := \"Photo\", path := [] }, eid := \"a\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Photo\", path := [] }\n                         { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Foo\", path := [] }, eid := \"alice\" },\n                      { ty := { id := \"Foo\", path := [] }, eid := \"b\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"alice\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.eq)\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 56 }))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 22 }))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"bob\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.isMem\n                       { id := \"Album\", path := [] }\n                       { ty := { id := \"Foo\", path := [] }, eid := \"p1\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"alice\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Foo\", path := [] }\n                         { ty := { id := \"Action\", path := [] }, eid := \"ghost\" }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"y\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Album\", path := [] }, eid := \"alice\" },\n                      { ty := { id := \"User\", path := [] }, eid := \"y\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.binaryApp\n                              (Cedar.Spec.BinaryOp.eq)\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"alice\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Foo\", path := [] }, eid := \"x\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"view\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.less)\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n                                (Cedar.Spec.Expr.lit\n                                  (Cedar.Spec.Prim.entityUID\n                                    { ty := { id := \"Photo\", path := [] }, eid := \"a\" }))) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"edit\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"a\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Album\", path := [] }\n                         { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 70 }))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.action)))\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"bob\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.lit\n                                (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"y\" }))\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.less)\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.string \"flag\"))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal))) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"view\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.isMem\n                       { id := \"Foo\", path := [] }\n                       { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Action\", path := [] }\n                         { ty := { id := \"Photo\", path := [] }, eid := \"bob\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.binaryApp\n                              (Cedar.Spec.BinaryOp.eq)\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.lit\n                                  (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"b\" }))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.context)) }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Photo\", path := [] }, eid := \"x\" },\n                      { ty := { id := \"Album\", path := [] }, eid := \"alice\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Photo\", path := [] }, eid := \"a\" },\n                      { ty := { id := \"Album\", path := [] }, eid := \"alice\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Album\", path := [] }\n                         { ty := { id := \"Album\", path := [] }, eid := \"p1\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"a\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 43 }) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Action\", path := [] }\n                          { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"z\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"z\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.isMem\n                       { id := \"User\", path := [] }\n                       { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"User\", path := [] }\n                         { ty := { id := \"Foo\", path := [] }, eid := \"edit\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.context) }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.isMem\n                       { id := \"Action\", path := [] }\n                       { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Album\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.or\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.less)\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.action))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false)))\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.eq)\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 46 }))\n                                (Cedar.Spec.Expr.lit\n                                  (Cedar.Spec.Prim.entityUID\n                                    { ty := { id := \"Album\", path := [] }, eid := \"b\" }))) }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"edit\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.lit\n                              (Cedar.Spec.Prim.entityUID { ty := { id := \"Foo\", path := [] }, eid := \"b\" }) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"alice\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.binaryApp\n                              (Cedar.Spec.BinaryOp.mem)\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.mem)\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.context))\n                                (Cedar.Spec.Expr.lit\n                                  (Cedar.Spec.Prim.entityUID { ty := { id := \"User\", path := [] }, eid := \"z\" })))\n                              (Cedar.Spec.Expr.binaryApp\n                                (Cedar.Spec.BinaryOp.mem)\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 37 }))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Foo\", path := [] }, eid := \"ghost\" },\n                      { ty := { id := \"Foo\", path := [] }, eid := \"a\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Action\", path := [] }, eid := \"bob\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.action) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"x\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.mem { ty := { id := \"User\", path := [] }, eid := \"b\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Photo\", path := [] }, eid := \"ghost\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Photo\", path := [] }\n                          { ty := { id := \"Photo\", path := [] }, eid := \"alice\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"Foo\", path := [] }, eid := \"a\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Foo\", path := [] }\n                          { ty := { id := \"Photo\", path := [] }, eid := \"z\" }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"z\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Action\", path := [] }\n                          { ty := { id := \"Album\", path := [] }, eid := \"bob\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"User\", path := [] }, eid := \"a\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"Foo\", path := [] }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when, body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n  { id := \"p2\",\n    effect := Cedar.Spec.Effect.forbid,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Action\", path := [] }, eid := \"y\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny\n                     [{ ty := { id := \"Album\", path := [] }, eid := \"view\" },\n                      { ty := { id := \"Photo\", path := [] }, eid := \"z\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)))\n                              (Cedar.Spec.Expr.or\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.int { toUInt64 := 70 }))\n                                (Cedar.Spec.Expr.var (Cedar.Spec.Var.resource))) }] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.mem { ty := { id := \"Foo\", path := [] }, eid := \"y\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [{ ty := { id := \"Action\", path := [] }, eid := \"edit\" }],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.isMem\n                         { id := \"Photo\", path := [] }\n                         { ty := { id := \"Photo\", path := [] }, eid := \"b\" }),\n    condition := [] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Photo\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.eq { ty := { id := \"User\", path := [] }, eid := \"a\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.any),\n    condition := [{ kind := Cedar.Spec.ConditionKind.unless,\n                    body := Cedar.Spec.Expr.var (Cedar.Spec.Var.principal) }] },\n  { id := \"p1\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope\n                        (Cedar.Spec.Scope.isMem\n                          { id := \"Foo\", path := [] }\n                          { ty := { id := \"Action\", path := [] }, eid := \"x\" }),\n    actionScope := Cedar.Spec.ActionScope.actionInAny [],\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope (Cedar.Spec.Scope.is { id := \"User\", path := [] }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.any),\n    actionScope := Cedar.Spec.ActionScope.actionScope\n                     (Cedar.Spec.Scope.mem { ty := { id := \"Album\", path := [] }, eid := \"y\" }),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Photo\", path := [] }, eid := \"view\" }),\n    condition := [] },\n  { id := \"p0\",\n    effect := Cedar.Spec.Effect.permit,\n    principalScope := Cedar.Spec.PrincipalScope.principalScope (Cedar.Spec.Scope.is { id := \"Action\", path := [] }),\n    actionScope := Cedar.Spec.ActionScope.actionScope (Cedar.Spec.Scope.any),\n    resourceScope := Cedar.Spec.ResourceScope.resourceScope\n                       (Cedar.Spec.Scope.eq { ty := { id := \"Album\", path := [] }, eid := \"a\" }),\n    condition := [{ kind := Cedar.Spec.ConditionKind.when,\n                    body := Cedar.Spec.Expr.and\n                              (Cedar.Spec.Expr.and\n                                (Cedar.Spec.Expr.lit (Cedar.Spec.Prim.bool false))\n                                (Cedar.Spec.Expr.lit\n                                  (Cedar.Spec.Prim.entityUID { ty := { id := \"Action\", path := [] }, eid := \"x\" })))\n                              (Cedar.Spec.Expr.var (Cedar.Spec.Var.principal)) }] }],\n { ets := Cedar.Data.Map.mk\n            [({ id := \"Foo\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }],\n                  attrs := Cedar.Data.Map.mk [],\n                  tags := none }),\n             ({ id := \"User\", path := [] },\n              Cedar.Validation.EntitySchemaEntry.standard\n                { ancestors := Cedar.Data.Set.mk [{ id := \"Foo\", path := [] }, { id := \"User\", path := [] }],\n                  attrs := Cedar.Data.Map.mk\n                             [(\"age\", Cedar.Validation.Qualified.optional (Cedar.Validation.CedarType.int))],\n                  tags := some (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.ff)) })],\n   acts := Cedar.Data.Map.mk\n             [({ ty := { id := \"Action\", path := [] }, eid := \"p1\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Album\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"User\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"User\", path := [] }, eid := \"a\" },\n                                 { ty := { id := \"User\", path := [] }, eid := \"bob\" }],\n                 context := Cedar.Data.Map.mk\n                              [(\"flag\",\n                                Cedar.Validation.Qualified.required\n                                  (Cedar.Validation.CedarType.bool (Cedar.Validation.BoolType.tt))),\n                               (\"name\",\n                                Cedar.Validation.Qualified.optional\n                                  (Cedar.Validation.CedarType.entity { id := \"Album\", path := [] }))] }),\n              ({ ty := { id := \"Foo\", path := [] }, eid := \"x\" },\n               { appliesToPrincipal := Cedar.Data.Set.mk [{ id := \"Photo\", path := [] }, { id := \"User\", path := [] }],\n                 appliesToResource := Cedar.Data.Set.mk [{ id := \"Action\", path := [] }, { id := \"Album\", path := [] }],\n                 ancestors := Cedar.Data.Set.mk\n                                [{ ty := { id := \"Album\", path := [] }, eid := \"ghost\" },\n                                 { ty := { id := \"User\", path := [] }, eid := \"edit\" }],\n                 context := Cedar.Data.Map.mk [] })] },\n 7)) — validateWithLevel rejected policy p2 with .levelError — the level checker rejected an entity-access expression it should have allowed",
      "hash": "3470dc08c010604655e10659819b1de6f8341b18"
    }
  ]
}