func main(): i32 { let value = load_value() catch failure { fallback_for(failure.message()) } if value == 42 { return 0 } return 1 } func load_value(): i32! { return error.new("example.unavailable", "the primary value is unavailable") } func fallback_for(message: &str): i32 { return 42 }

use std/fmt.Format use std/io struct Point { x: i32 y: i32 } instance Point { impl Format method &self.try_format_into(output: &+String): void! { output.try_push_str("(")? self.x.try_format_into(output)? output.try_push_str(", ")? self.y.try_format_into(output)? output.try_push_str(")")? return } } func main(): i32! { let point = Point { x: 3, y: 4 } let message = "point = ${point}\n" io.print(&message)? return 0 }

use std/io use std/vec.Vec struct Point { x: i32 y: i32 } instance Point { operator (&self == other: &Self): bool { return self.x == other.x && self.y == other.y } } func main(): i32! { let first = Point { x: 3, y: 4 } let same = Point { x: 3, y: 4 } let other = Point { x: 5, y: 6 } if first != same || first == other { return 1 } let points = Vec [move first, move other] if points[0] != same { return 1 } var values = Vec [1, 2, 3] values[1] = 4 if values[0] + values[1] + values[2] != 8 { return 1 } io.print("equality found the point\n")? return 0 }

struct Buffer { values: [i32; 3] } instance Buffer { operator (&self[index: usize]): &i32 { return &self.values[index] } operator (&+self[index: usize]): &+i32 { return &+self.values[index] } } func at<C>(container: &C, index: usize): i32 where (&C[usize]): &i32 { return container[index] } func main(): i32 { var buffer = Buffer { values: [3, 4, 5] } buffer[1] = 9 if at(&buffer, 1) != 9 { return 1 } return 0 }

v0.32.0 Phase 1 Review

Result: complete with no open finding. This review covers owned command configuration and the Darwin prepared launch plan. The public methods remain unpublished until the terminal operations consume every configured fact in Phase 2.

Ownership and Mutation

Command owns every configured path, environment name and entry, and finite input byte.
Fallible text validation and ownership complete before replacing prior state. Rejected input therefore leaves the command unchanged.
clear_env drops explicit changes and disables inheritance in the same command authority.
Repeated environment changes retain source order but only the last change for one name reaches the child environment. This is one operation log, not a second resolved environment authority.

Prepared-plan Authority

launch_plan_darwin.nct is the only source that turns Command state into post-fork addresses.
The plan owns Command, argv, and envp together, so every pointer remains valid through exec.
Untouched inherited entries use their original environment-vector addresses. Public UTF-8 environment views are not used to reconstruct process state.
Working-directory and finite-input projections borrow only from the prepared plan; callers cannot manufacture substitute storage.

Boundary Review

Configuration validates and owns source values but does not know syscall or polling policy.
The prepared-plan layer projects stable target inputs but does not launch, wait, or select public failures.
Existing child launch code now consumes the prepared environment vector and no longer chooses an alternate raw environment authority.
No parser, checker, backend, compatibility alias, or source-visible partial feature was added.

Evidence

the standard-library corpus, installed-home CLI paths, and public subprocess examples pass all 34 nocter library tests;
private tests cover failure-atomic mutation, copied finite input, exact last-change environment resolution, explicit empty input, stable working-directory storage, and raw inherited-entry preservation;
repository formatting, complete workspace testing, and documentation checks remain Phase 5 release evidence rather than being duplicated here.

Phase 2 can replace capture-only readiness with one command-I/O session without revisiting command configuration or reconstructing prepared process inputs.