use std/io use std/vec.Vec struct Counter { value: i32 } blocking func main(): i32! { var counters = Vec [Counter { value: 1 }, Counter { value: 2 }, Counter { value: 3 }] for counter in &+counters { counter.value += 10 } var borrowed_total: i32 = 0 for counter in &counters { borrowed_total += counter.value } var moved_total: i32 = 0 for counter in move counters { moved_total += counter.value } let message = "borrowed: ${borrowed_total}, moved: ${moved_total}\n" io.print(&message)? return 0 }

func main(): i32 { let value = load_value() catch failure { fallback_for(failure.message()) } if value == 42 { return 0 } return 1 } func load_value(): i32! { return error.new("example.unavailable", "the primary value is unavailable") } func fallback_for(message: &str): i32 { return 42 }

use std/task use std/time use std/time.Duration async func delayed(value: i32): i32 { await time.sleep(Duration.from_milliseconds(1)) return value } async func main(): i32! { let (left, right) = await task.join(delayed(20), delayed(22)) if left + right != 42 { return error.new("example.unexpected_total", "joined tasks returned the wrong total") } return 0 }

use std/io use std/url.Url blocking func main(): i32! { let url = Url.parse("HTTP://Example.COM:80/a/../status?q=ready#fragment")? let canonical = url.to_string() let authority = url.authority() let target = url.request_target() io.println(&canonical)? io.println(&authority)? io.println(&target)? return 0 }

nocter-macho

Responsibility

Write one deterministic ARM64 Mach-O executable image from an already encoded Arm64Program.

Contract

The crate owns Mach-O headers, segments, load commands, offsets, alignment, entry metadata, loader binding streams, and final bytes. It consumes explicit ARM64 data-pointer fixups and trusted typed runtime-import slots, then emits the rebase and bind metadata needed for position-independent readonly data. It is the sole authority mapping logical runtime-library identities to Darwin install names and dylib ordinals. It does not perform instruction selection, select an imported service, inspect a source declaration, validate package semantics, or publish artifacts.

Invariants

File offsets and virtual addresses derive only from the closed encoded program.
Image writing cannot introduce or select executable symbols; it can only encode imports retained by the completed ARM64 program.
One canonical loaded-library sequence drives load commands, bind ordinals, layout, and image identity; a framework cannot be added through a symbol-specific special case.
Readonly data is writable only during loader fixups and is protected after rebasing.
Imported symbols contribute to the deterministic image UUID and code signature.
Native qualification executes compiler-materialized blocks both synchronously through Network.framework and asynchronously through a dispatch queue and descriptor event channel.
Native connection qualification retains callback errors across that channel and releases all provider and dispatch owners only after the final state and a same-queue synchronous barrier.
Equal input produces byte-identical output.

nocter-macho#

Responsibility#

Contract#

Invariants#

nocter-macho

Responsibility

Contract

Invariants