Research proof index

The main correctness theorem for batched authorization: If the batched authorizer reaches a definitive decision, that decision agrees with the concrete authorizer. Request and policy well-typedness are checked by batchedAuthorize, so we do not need those as an explicit precondition. We do need entity to explicitly require well-typed entities because `ba...

The main correctness theorem for batched evaluation: Batched evaluation with an entity loader produces the same result as normal evaluation with the complete entity store.

Full equivalence for checkAlwaysMatches and checkAlwaysMatchesOpt, including both the .ok and .error cases

Full equivalence for checkDisjoint and checkDisjointOpt, including both the .ok and .error cases

If an expression checks at level n and then evaluates an entity (or a record containing an entity), then that entity must reachable in n + 1 steps.

Full equivalence for checkEquivalent and checkEquivalentOpt, including both the .ok and .error cases