Struct AcceptanceContract 

pub struct AcceptanceContract {
    pub lo: i64,
    pub hi: i64,
}

A receiver-declared acceptance contract: a single integer parameter accepted only within [lo, hi] (inclusive), returning an integer. The bound is what the receiver promises to honor; anything outside is refused at the seam.

Fields

lo: i64

hi: i64

Implementations

impl AcceptanceContract

pub fn new(lo: i64, hi: i64) -> Self

pub fn apply(&self, function: &RuntimeValue, arg: i64) -> Result<i64, String>

Validate function and arg against this contract, then evaluate. The two failure modes are distinct and both surface as Err:

• signature — function must be a shipped pure computation (generated) of exactly one argument. An ordinary closure (arena body) or a wrong arity is refused; the contract only ever runs the bounded sandbox, never interpreter-resident code.
• range — arg must satisfy lo ≤ arg ≤ hi. Out-of-range is refused, NOT clamped: the receiver asked for a bounded domain, so an out-of-domain input is an error at the edge, not a quietly-different computation.

Trait Implementations

impl Clone for AcceptanceContract

fn clone(&self) -> AcceptanceContract

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AcceptanceContract

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for AcceptanceContract

fn eq(&self, other: &AcceptanceContract) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for AcceptanceContract

impl Eq for AcceptanceContract

impl StructuralPartialEq for AcceptanceContract