Research proof index

Bridge from Response.erroringPolicies membership back to the evaluator: if a policy id appears in the erroring set produced by isAuthorized, then some policy in ps with that id genuinely errored on evaluation. Because policy ids need not be unique, this recovers a policy with the id, not necessarily a specific one.

If evaluatePolicy succeeds on a concrete request, and the schema and entities pass validation, then InstanceOfWellFormedEnvironment holds for the environment determined by the schema and request.

SymEnv.extract? always produces a concrete Env that satisfies Env.EnumCompleteFor.

Full equivalence for implies? and impliesOpt?, including both the .ok and .error cases

This theorem covers the "happy path" -- showing that if optimized policy compilation succeeds, then wellTypedPolicies succeeds and implies? and impliesOpt? are equivalent.

Toplevel theorem about the correctness of CompiledPolicy.intoCompiledPolicySet Compiling to a CompiledPolicy and then using intoCompiledPolicySet should give exactly the same result as compiling with CompiledPolicySet.compile directly