about summary refs log tree commit diff stats
path: root/html/057immutable.cc.html
diff options
context:
space:
mode:
authorKartik K. Agaram <vc@akkartik.com>2016-12-26 01:17:01 -0800
committerKartik K. Agaram <vc@akkartik.com>2016-12-26 01:26:16 -0800
commite5c11a5137d538b7713dd8708ca767c208824c06 (patch)
tree82976fd80e5d8048840701c351827730b29f89f6 /html/057immutable.cc.html
parent63e1c465e46502bd7c391e31db73e7e5ae19adfd (diff)
downloadmu-e5c11a5137d538b7713dd8708ca767c208824c06.tar.gz
3709 - line numbers in html
Each line number also gets an anchor name, but I'm not hyperlinking them for now
because I don't want to encourage bookmarking these links just yet. They aren't
permalinks because every revision may change what's at any given line number.
Diffstat (limited to 'html/057immutable.cc.html')
-rw-r--r--html/057immutable.cc.html1184
1 files changed, 604 insertions, 580 deletions
diff --git a/html/057immutable.cc.html b/html/057immutable.cc.html
index 262bcf6d..8546a2d0 100644
--- a/html/057immutable.cc.html
+++ b/html/057immutable.cc.html
@@ -6,7 +6,7 @@
 <meta name="Generator" content="Vim/7.4">
 <meta name="plugin-version" content="vim7.4_v2">
 <meta name="syntax" content="cpp">
-<meta name="settings" content="use_css,pre_wrap,no_foldcolumn,expand_tabs,prevent_copy=">
+<meta name="settings" content="number_lines,use_css,pre_wrap,no_foldcolumn,expand_tabs,line_ids,prevent_copy=">
 <meta name="colorscheme" content="minimal">
 <style type="text/css">
 <!--
@@ -14,601 +14,625 @@ pre { white-space: pre-wrap; font-family: monospace; color: #eeeeee; background-
 body { font-size: 12pt; font-family: monospace; color: #eeeeee; background-color: #080808; }
 * { font-size: 12pt; font-size: 1em; }
 .Constant { color: #00a0a0; }
-.traceContains { color: #008000; }
+.Special { color: #c00000; }
 .muRecipe { color: #ff8700; }
-.cSpecial { color: #008000; }
+.traceContains { color: #008000; }
 .Comment { color: #9090ff; }
 .Delimiter { color: #800080; }
-.Special { color: #c00000; }
+.LineNr { color: #444444; }
 .Identifier { color: #c0a020; }
 .Normal { color: #eeeeee; background-color: #080808; padding-bottom: 1px; }
 .muData { color: #ffff00; }
+.cSpecial { color: #008000; }
 -->
 </style>
 
 <script type='text/javascript'>
 <!--
 
+/* function to open any folds containing a jumped-to line before jumping to it */
+function JumpToLine()
+{
+  var lineNum;
+  lineNum = window.location.hash;
+  lineNum = lineNum.substr(1); /* strip off '#' */
+
+  if (lineNum.indexOf('L') == -1) {
+    lineNum = 'L'+lineNum;
+  }
+  lineElem = document.getElementById(lineNum);
+  /* Always jump to new location even if the line was hidden inside a fold, or
+   * we corrected the raw number to a line ID.
+   */
+  if (lineElem) {
+    lineElem.scrollIntoView(true);
+  }
+  return true;
+}
+if ('onhashchange' in window) {
+  window.onhashchange = JumpToLine;
+}
+
 -->
 </script>
 </head>
-<body>
+<body onload='JumpToLine();'>
 <pre id='vimCodeElement'>
-<span class="Comment">//: Ingredients of a recipe are meant to be immutable unless they're also</span>
-<span class="Comment">//: products. This layer will start enforcing this check.</span>
-<span class="Comment">//:</span>
-<span class="Comment">//: One hole for now: variables in surrounding spaces are implicitly mutable.</span>
-<span class="Comment">//: [tag: todo]</span>
-
-<span class="Delimiter">:(scenario can_modify_ingredients_that_are_also_products)</span>
-<span class="Comment"># mutable container</span>
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">p</span>:point<span class="Special"> &lt;- </span>merge <span class="Constant">34</span><span class="Delimiter">,</span> <span class="Constant">35</span>
-  p<span class="Special"> &lt;- </span>foo p
-]
-<span class="muRecipe">def</span> foo p:point<span class="muRecipe"> -&gt; </span>p:point [
-  local-scope
-  load-ingredients
-  p<span class="Special"> &lt;- </span>put p<span class="Delimiter">,</span> <span class="Constant">x:offset</span><span class="Delimiter">,</span> <span class="Constant">34</span>
-]
-$error: <span class="Constant">0</span>
-
-<span class="Delimiter">:(scenario can_modify_ingredients_that_are_also_products_2)</span>
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">p</span>:&amp;:point<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">point:type</span>
-  p<span class="Special"> &lt;- </span>foo p
-]
-<span class="Comment"># mutable address to container</span>
-<span class="muRecipe">def</span> foo p:&amp;:point<span class="muRecipe"> -&gt; </span>p:&amp;:point [
-  local-scope
-  load-ingredients
-  *p<span class="Special"> &lt;- </span>put *p<span class="Delimiter">,</span> <span class="Constant">x:offset</span><span class="Delimiter">,</span> <span class="Constant">34</span>
-]
-$error: <span class="Constant">0</span>
-
-<span class="Delimiter">:(scenario can_modify_ingredients_that_are_also_products_3)</span>
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">p</span>:&amp;:@:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span><span class="Delimiter">,</span> <span class="Constant">3</span>
-  p<span class="Special"> &lt;- </span>foo p
-]
-<span class="Comment"># mutable address</span>
-<span class="muRecipe">def</span> foo p:&amp;:@:num<span class="muRecipe"> -&gt; </span>p:&amp;:@:num [
-  local-scope
-  load-ingredients
-  *p<span class="Special"> &lt;- </span>put-index *p<span class="Delimiter">,</span> <span class="Constant">0</span><span class="Delimiter">,</span> <span class="Constant">34</span>
-]
-$error: <span class="Constant">0</span>
-
-<span class="Delimiter">:(scenario ignore_literal_ingredients_for_immutability_checks)</span>
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">p</span>:&amp;:d1<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">d1:type</span>
-  <span class="Normal">q</span>:num<span class="Special"> &lt;- </span>foo p
-]
-<span class="muRecipe">def</span> foo p:&amp;:d1<span class="muRecipe"> -&gt; </span>q:num [
-  local-scope
-  load-ingredients
-  <span class="Normal">x</span>:&amp;:d1<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">d1:type</span>
-  *x<span class="Special"> &lt;- </span>put *x<span class="Delimiter">,</span> <span class="Constant">p:offset</span><span class="Delimiter">,</span> <span class="Constant">34</span>  <span class="Comment"># ignore this 'p'</span>
-  <span class="Identifier">return</span> <span class="Constant">36</span>
-]
-<span class="muData">container</span> d1 [
-  <span class="Normal">p</span>:num
-  <span class="Normal">q</span>:num
-]
-$error: <span class="Constant">0</span>
-
-<span class="Delimiter">:(scenario cannot_modify_immutable_ingredients)</span>
-<span class="Special">% Hide_errors = true;</span>
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">x</span>:&amp;:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span>
-  foo x
-]
-<span class="Comment"># immutable address to primitive</span>
-<span class="muRecipe">def</span> foo x:&amp;:num [
-  local-scope
-  load-ingredients
-  *x<span class="Special"> &lt;- </span>copy <span class="Constant">34</span>
-]
-<span class="traceContains">+error: foo: cannot modify 'x' in instruction '*x &lt;- copy 34' because it's an ingredient of recipe foo but not also a product</span>
-
-<span class="Delimiter">:(scenario cannot_modify_immutable_containers)</span>
-<span class="Special">% Hide_errors = true;</span>
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">x</span>:point-number<span class="Special"> &lt;- </span>merge <span class="Constant">34</span><span class="Delimiter">,</span> <span class="Constant">35</span><span class="Delimiter">,</span> <span class="Constant">36</span>
-  foo x
-]
-<span class="Comment"># immutable container</span>
-<span class="muRecipe">def</span> foo x:point-number [
-  local-scope
-  load-ingredients
-  <span class="Comment"># copy an element: ok</span>
-  <span class="Normal">y</span>:point<span class="Special"> &lt;- </span>get x<span class="Delimiter">,</span> <span class="Constant">xy:offset</span>
-  <span class="Comment"># modify the element: boom</span>
-  <span class="Comment"># This could be ok if y contains no addresses, but we're not going to try to be that smart.</span>
-  <span class="Comment"># It also makes the rules easier to reason about. If it's just an ingredient, just don't try to change it.</span>
-  y<span class="Special"> &lt;- </span>put y<span class="Delimiter">,</span> <span class="Constant">x:offset</span><span class="Delimiter">,</span> <span class="Constant">37</span>
-]
-<span class="traceContains">+error: foo: cannot modify 'y' in instruction 'y &lt;- put y, x:offset, 37' because that would modify 'x' which is an ingredient of recipe foo but not also a product</span>
-
-<span class="Delimiter">:(scenario can_modify_immutable_pointers)</span>
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">x</span>:&amp;:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span>
-  foo x
-]
-<span class="muRecipe">def</span> foo x:&amp;:num [
-  local-scope
-  load-ingredients
-  <span class="Comment"># modify the address, not the payload</span>
-  x<span class="Special"> &lt;- </span>copy <span class="Constant">0</span>
-]
-$error: <span class="Constant">0</span>
-
-<span class="Delimiter">:(scenario can_modify_immutable_pointers_but_not_their_payloads)</span>
-<span class="Special">% Hide_errors = true;</span>
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">x</span>:&amp;:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span>
-  foo x
-]
-<span class="muRecipe">def</span> foo x:&amp;:num [
-  local-scope
-  load-ingredients
-  <span class="Comment"># modify address; ok</span>
-  x<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span>
-  <span class="Comment"># modify payload: boom</span>
-  <span class="Comment"># this could be ok, but we're not going to try to be that smart</span>
-  *x<span class="Special"> &lt;- </span>copy <span class="Constant">34</span>
-]
-<span class="traceContains">+error: foo: cannot modify 'x' in instruction '*x &lt;- copy 34' because it's an ingredient of recipe foo but not also a product</span>
-
-<span class="Delimiter">:(scenario cannot_call_mutating_recipes_on_immutable_ingredients)</span>
-<span class="Special">% Hide_errors = true;</span>
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">p</span>:&amp;:point<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">point:type</span>
-  foo p
-]
-<span class="muRecipe">def</span> foo p:&amp;:point [
-  local-scope
-  load-ingredients
-  bar p
-]
-<span class="muRecipe">def</span> bar p:&amp;:point<span class="muRecipe"> -&gt; </span>p:&amp;:point [
-  local-scope
-  load-ingredients
-  <span class="Comment"># p could be modified here, but it doesn't have to be, it's already marked</span>
-  <span class="Comment"># mutable in the header</span>
-]
-<span class="traceContains">+error: foo: cannot modify 'p' in instruction 'bar p' because it's an ingredient of recipe foo but not also a product</span>
-
-<span class="Delimiter">:(scenario cannot_modify_copies_of_immutable_ingredients)</span>
-<span class="Special">% Hide_errors = true;</span>
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">p</span>:&amp;:point<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">point:type</span>
-  foo p
-]
-<span class="muRecipe">def</span> foo p:&amp;:point [
-  local-scope
-  load-ingredients
-  <span class="Normal">q</span>:&amp;:point<span class="Special"> &lt;- </span>copy p
-  *q<span class="Special"> &lt;- </span>put *q<span class="Delimiter">,</span> <span class="Constant">x:offset</span><span class="Delimiter">,</span> <span class="Constant">34</span>
-]
-<span class="traceContains">+error: foo: cannot modify 'q' in instruction '*q &lt;- put *q, x:offset, 34' because that would modify p which is an ingredient of recipe foo but not also a product</span>
-
-<span class="Delimiter">:(scenario can_modify_copies_of_mutable_ingredients)</span>
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">p</span>:&amp;:point<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">point:type</span>
-  foo p
-]
-<span class="muRecipe">def</span> foo p:&amp;:point<span class="muRecipe"> -&gt; </span>p:&amp;:point [
-  local-scope
-  load-ingredients
-  <span class="Normal">q</span>:&amp;:point<span class="Special"> &lt;- </span>copy p
-  *q<span class="Special"> &lt;- </span>put *q<span class="Delimiter">,</span> <span class="Constant">x:offset</span><span class="Delimiter">,</span> <span class="Constant">34</span>
-]
-$error: <span class="Constant">0</span>
-
-<span class="Delimiter">:(scenario cannot_modify_address_inside_immutable_ingredients)</span>
-<span class="Special">% Hide_errors = true;</span>
-<span class="muData">container</span> foo [
-  <span class="Normal">x</span>:&amp;:@:num  <span class="Comment"># contains an address</span>
-]
-<span class="muRecipe">def</span> main [
-  <span class="Comment"># don't run anything</span>
-]
-<span class="muRecipe">def</span> foo a:&amp;:foo [
-  local-scope
-  load-ingredients
-  <span class="Normal">x</span>:&amp;:@:num<span class="Special"> &lt;- </span>get *a<span class="Delimiter">,</span> <span class="Constant">x:offset</span>  <span class="Comment"># just a regular get of the container</span>
-  *x<span class="Special"> &lt;- </span>put-index *x<span class="Delimiter">,</span> <span class="Constant">0</span><span class="Delimiter">,</span> <span class="Constant">34</span>  <span class="Comment"># but then a put-index on the result</span>
-]
-<span class="traceContains">+error: foo: cannot modify 'x' in instruction '*x &lt;- put-index *x, 0, 34' because that would modify a which is an ingredient of recipe foo but not also a product</span>
-
-<span class="Delimiter">:(scenario cannot_modify_address_inside_immutable_ingredients_2)</span>
-<span class="muData">container</span> foo [
-  <span class="Normal">x</span>:&amp;:@:num  <span class="Comment"># contains an address</span>
-]
-<span class="muRecipe">def</span> main [
-  <span class="Comment"># don't run anything</span>
-]
-<span class="muRecipe">def</span> foo a:&amp;:foo [
-  local-scope
-  load-ingredients
-  <span class="Normal">b</span>:foo<span class="Special"> &lt;- </span>merge <span class="Constant">0</span>
-  <span class="Comment"># modify b, completely unrelated to immutable ingredient a</span>
-  <span class="Normal">x</span>:&amp;:@:num<span class="Special"> &lt;- </span>get b<span class="Delimiter">,</span> <span class="Constant">x:offset</span>
-  *x<span class="Special"> &lt;- </span>put-index *x<span class="Delimiter">,</span> <span class="Constant">0</span><span class="Delimiter">,</span> <span class="Constant">34</span>
-]
-$error: <span class="Constant">0</span>
-
-<span class="Delimiter">:(scenario cannot_modify_address_inside_immutable_ingredients_3)</span>
-<span class="Special">% Hide_errors = true;</span>
-<span class="muRecipe">def</span> main [
-  <span class="Comment"># don't run anything</span>
-]
-<span class="muRecipe">def</span> foo a:&amp;:@:&amp;:num [
-  local-scope
-  load-ingredients
-  <span class="Normal">x</span>:&amp;:num<span class="Special"> &lt;- </span>index *a<span class="Delimiter">,</span> <span class="Constant">0</span>  <span class="Comment"># just a regular index of the array</span>
-  *x<span class="Special"> &lt;- </span>copy <span class="Constant">34</span>  <span class="Comment"># but then modify the result</span>
-]
-<span class="traceContains">+error: foo: cannot modify 'x' in instruction '*x &lt;- copy 34' because that would modify a which is an ingredient of recipe foo but not also a product</span>
-
-<span class="Delimiter">:(scenario cannot_modify_address_inside_immutable_ingredients_4)</span>
-<span class="muRecipe">def</span> main [
-  <span class="Comment"># don't run anything</span>
-]
-<span class="muRecipe">def</span> foo a:&amp;:@:&amp;:num [
-  local-scope
-  load-ingredients
-  <span class="Normal">b</span>:&amp;:@:&amp;:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Delimiter">{(</span>address number<span class="Delimiter">)</span>: type<span class="Delimiter">},</span> <span class="Constant">3</span>
-  <span class="Comment"># modify b, completely unrelated to immutable ingredient a</span>
-  <span class="Normal">x</span>:&amp;:num<span class="Special"> &lt;- </span>index *b<span class="Delimiter">,</span> <span class="Constant">0</span>
-  *x<span class="Special"> &lt;- </span>copy <span class="Constant">34</span>
-]
-$error: <span class="Constant">0</span>
-
-<span class="Delimiter">:(scenario latter_ingredient_of_index_is_immutable)</span>
-<span class="muRecipe">def</span> main [
-  <span class="Comment"># don't run anything</span>
-]
-<span class="muRecipe">def</span> foo a:&amp;:@:&amp;:@:num<span class="Delimiter">,</span> b:num<span class="muRecipe"> -&gt; </span>a:&amp;:@:&amp;:@:num [
-  local-scope
-  load-ingredients
-  <span class="Normal">x</span>:&amp;:@:num<span class="Special"> &lt;- </span>index *a<span class="Delimiter">,</span> b
-  *x<span class="Special"> &lt;- </span>put-index *x<span class="Delimiter">,</span> <span class="Constant">0</span><span class="Delimiter">,</span> <span class="Constant">34</span>
-]
-$error: <span class="Constant">0</span>
-
-<span class="Delimiter">:(scenario can_traverse_immutable_ingredients)</span>
-<span class="muData">container</span> test-list [
-  <span class="Normal">next</span>:&amp;:test-list
-]
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">p</span>:&amp;:test-list<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">test-list:type</span>
-  foo p
-]
-<span class="muRecipe">def</span> foo p:&amp;:test-list [
-  local-scope
-  load-ingredients
-  <span class="Normal">p2</span>:&amp;:test-list<span class="Special"> &lt;- </span>bar p
-]
-<span class="muRecipe">def</span> bar x:&amp;:test-list<span class="muRecipe"> -&gt; </span>y:&amp;:test-list [
-  local-scope
-  load-ingredients
-  y<span class="Special"> &lt;- </span>get *x<span class="Delimiter">,</span> <span class="Constant">next:offset</span>
-]
-$error: <span class="Constant">0</span>
-
-<span class="Delimiter">:(scenario treat_optional_ingredients_as_mutable)</span>
-<span class="muRecipe">def</span> main [
-  <span class="Normal">k</span>:&amp;:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span>
-  test k
-]
-<span class="Comment"># recipe taking an immutable address ingredient</span>
-<span class="muRecipe">def</span> test k:&amp;:num [
-  local-scope
-  load-ingredients
-  foo k
-]
-<span class="Comment"># ..calling a recipe with an optional address ingredient</span>
-<span class="muRecipe">def</span> foo<span class="muRecipe"> -&gt; </span>[
-  local-scope
-  load-ingredients
-  <span class="Normal">k</span>:&amp;:num<span class="Delimiter">,</span> found?:<span class="Normal">bool</span><span class="Special"> &lt;- </span>next-ingredient
-  <span class="Comment"># we don't further check k for immutability, but assume it's mutable</span>
-]
-$error: <span class="Constant">0</span>
-
-<span class="Delimiter">:(scenario treat_optional_ingredients_as_mutable_2)</span>
-<span class="Special">% Hide_errors = true;</span>
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">p</span>:&amp;:point<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">point:type</span>
-  foo p
-]
-<span class="muRecipe">def</span> foo p:&amp;:point [
-  local-scope
-  load-ingredients
-  bar p
-]
-<span class="muRecipe">def</span> bar [
-  local-scope
-  load-ingredients
-  <span class="Normal">p</span>:&amp;:point<span class="Special"> &lt;- </span>next-ingredient  <span class="Comment"># optional ingredient; assumed to be mutable</span>
-]
-<span class="traceContains">+error: foo: cannot modify 'p' in instruction 'bar p' because it's an ingredient of recipe foo but not also a product</span>
-
-<span class="Comment">//: when checking for immutable ingredients, remember to take space into account</span>
-<span class="Delimiter">:(scenario check_space_of_reagents_in_immutability_checks)</span>
-<span class="muRecipe">def</span> main [
-  <span class="Normal">a</span>:space<span class="Special"> &lt;- </span><span class="Normal">new</span>-closure
-  <span class="Normal">b</span>:&amp;:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span>
-  run-closure b:&amp;:num<span class="Delimiter">,</span> a:space
-]
-<span class="muRecipe">def</span> <span class="Normal">new</span>-closure [
-  <span class="Normal">new</span>-<span class="Normal">default</span>-space
-  <span class="Normal">x</span>:&amp;:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span>
-  <span class="Identifier">return</span> <span class="Normal">default</span>-space
-]
-<span class="muRecipe">def</span> run-closure x:&amp;:num<span class="Delimiter">,</span> s:space [
-  local-scope
-  load-ingredients
-  <span class="Constant">0</span>:space/names:<span class="Normal">new</span>-closure<span class="Special"> &lt;- </span>copy s
-  <span class="Comment"># different space; always mutable</span>
-  *x:&amp;:num/space:<span class="Constant">1</span><span class="Special"> &lt;- </span>copy <span class="Constant">34</span>
-]
-$error: <span class="Constant">0</span>
-
-<span class="Delimiter">:(before &quot;End Transforms&quot;)</span>
-Transform<span class="Delimiter">.</span>push_back<span class="Delimiter">(</span>check_immutable_ingredients<span class="Delimiter">);</span>  <span class="Comment">// idempotent</span>
-
-<span class="Delimiter">:(code)</span>
-<span class="Normal">void</span> check_immutable_ingredients<span class="Delimiter">(</span><span class="Normal">const</span> recipe_ordinal r<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-  <span class="Comment">// to ensure an address reagent isn't modified, it suffices to show that</span>
-  <span class="Comment">//   a) we never write to its contents directly,</span>
-  <span class="Comment">//   b) we never call 'put' or 'put-index' on it, and</span>
-  <span class="Comment">//   c) any non-primitive recipe calls in the body aren't returning it as a product</span>
-  <span class="Normal">const</span> recipe&amp; caller = get<span class="Delimiter">(</span>Recipe<span class="Delimiter">,</span> r<span class="Delimiter">);</span>
-  trace<span class="Delimiter">(</span><span class="Constant">9991</span><span class="Delimiter">,</span> <span class="Constant">&quot;transform&quot;</span><span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;--- check mutability of ingredients in recipe &quot;</span> &lt;&lt; caller<span class="Delimiter">.</span>name &lt;&lt; end<span class="Delimiter">();</span>
-  <span class="Normal">if</span> <span class="Delimiter">(</span>!caller<span class="Delimiter">.</span>has_header<span class="Delimiter">)</span> <span class="Identifier">return</span><span class="Delimiter">;</span>  <span class="Comment">// skip check for old-style recipes calling next-ingredient directly</span>
-  <span class="Normal">for</span> <span class="Delimiter">(</span><span class="Normal">int</span> i = <span class="Constant">0</span><span class="Delimiter">;</span>  i &lt; SIZE<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>ingredients<span class="Delimiter">);</span>  ++i<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-    <span class="Normal">const</span> reagent&amp; current_ingredient = caller<span class="Delimiter">.</span>ingredients<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">);</span>
-    <span class="Normal">if</span> <span class="Delimiter">(</span>is_present_in_products<span class="Delimiter">(</span>caller<span class="Delimiter">,</span> current_ingredient<span class="Delimiter">.</span>name<span class="Delimiter">))</span> <span class="Identifier">continue</span><span class="Delimiter">;</span>  <span class="Comment">// not expected to be immutable</span>
-    <span class="Comment">// End Immutable Ingredients Special-cases</span>
-    set&lt;reagent&gt; immutable_vars<span class="Delimiter">;</span>
-    immutable_vars<span class="Delimiter">.</span>insert<span class="Delimiter">(</span>current_ingredient<span class="Delimiter">);</span>
-    <span class="Normal">for</span> <span class="Delimiter">(</span><span class="Normal">int</span> i = <span class="Constant">0</span><span class="Delimiter">;</span>  i &lt; SIZE<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>steps<span class="Delimiter">);</span>  ++i<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-      <span class="Normal">const</span> instruction&amp; inst = caller<span class="Delimiter">.</span>steps<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">);</span>
-      check_immutable_ingredient_in_instruction<span class="Delimiter">(</span>inst<span class="Delimiter">,</span> immutable_vars<span class="Delimiter">,</span> current_ingredient<span class="Delimiter">.</span>name<span class="Delimiter">,</span> caller<span class="Delimiter">);</span>
-      <span class="Normal">if</span> <span class="Delimiter">(</span>inst<span class="Delimiter">.</span>operation == INDEX &amp;&amp; SIZE<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>ingredients<span class="Delimiter">)</span> &gt; <span class="Constant">1</span> &amp;&amp; inst<span class="Delimiter">.</span>ingredients<span class="Delimiter">.</span>at<span class="Delimiter">(</span><span class="Constant">1</span><span class="Delimiter">).</span>name == current_ingredient<span class="Delimiter">.</span>name<span class="Delimiter">)</span> <span class="Identifier">continue</span><span class="Delimiter">;</span>
-      update_aliases<span class="Delimiter">(</span>inst<span class="Delimiter">,</span> immutable_vars<span class="Delimiter">);</span>
-    <span class="Delimiter">}</span>
-  <span class="Delimiter">}</span>
-<span class="Delimiter">}</span>
-
-<span class="Normal">void</span> update_aliases<span class="Delimiter">(</span><span class="Normal">const</span> instruction&amp; inst<span class="Delimiter">,</span> set&lt;reagent&gt;&amp; current_ingredient_and_aliases<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-  set&lt;<span class="Normal">int</span>&gt; current_ingredient_indices = ingredient_indices<span class="Delimiter">(</span>inst<span class="Delimiter">,</span> current_ingredient_and_aliases<span class="Delimiter">);</span>
-  <span class="Normal">if</span> <span class="Delimiter">(</span>!contains_key<span class="Delimiter">(</span>Recipe<span class="Delimiter">,</span> inst<span class="Delimiter">.</span>operation<span class="Delimiter">))</span> <span class="Delimiter">{</span>
-    <span class="Comment">// primitive recipe</span>
-    <span class="Normal">switch</span> <span class="Delimiter">(</span>inst<span class="Delimiter">.</span>operation<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-      <span class="Normal">case</span> COPY:
-        <span class="Normal">for</span> <span class="Delimiter">(</span>set&lt;<span class="Normal">int</span>&gt;::iterator p = current_ingredient_indices<span class="Delimiter">.</span>begin<span class="Delimiter">();</span>  p != current_ingredient_indices<span class="Delimiter">.</span>end<span class="Delimiter">();</span>  ++p<span class="Delimiter">)</span>
-          current_ingredient_and_aliases<span class="Delimiter">.</span>insert<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span>*p<span class="Delimiter">).</span>name<span class="Delimiter">);</span>
-        <span class="Identifier">break</span><span class="Delimiter">;</span>
-      <span class="Normal">case</span> GET:
-      <span class="Normal">case</span> INDEX:
-      <span class="Normal">case</span> MAYBE_CONVERT:
-        <span class="Comment">// current_ingredient_indices can only have 0 or one value</span>
-        <span class="Normal">if</span> <span class="Delimiter">(</span>!current_ingredient_indices<span class="Delimiter">.</span>empty<span class="Delimiter">()</span> &amp;&amp; !inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>empty<span class="Delimiter">())</span> <span class="Delimiter">{</span>
-          <span class="Normal">if</span> <span class="Delimiter">(</span>is_mu_address<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span><span class="Constant">0</span><span class="Delimiter">))</span> || is_mu_container<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span><span class="Constant">0</span><span class="Delimiter">))</span> || is_mu_exclusive_container<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span><span class="Constant">0</span><span class="Delimiter">)))</span>
-            current_ingredient_and_aliases<span class="Delimiter">.</span>insert<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span><span class="Constant">0</span><span class="Delimiter">));</span>
-        <span class="Delimiter">}</span>
-        <span class="Identifier">break</span><span class="Delimiter">;</span>
-      <span class="Normal">default</span>: <span class="Identifier">break</span><span class="Delimiter">;</span>
-    <span class="Delimiter">}</span>
-  <span class="Delimiter">}</span>
-  <span class="Normal">else</span> <span class="Delimiter">{</span>
-    <span class="Comment">// defined recipe</span>
-    set&lt;<span class="Normal">int</span>&gt; contained_in_product_indices = scan_contained_in_product_indices<span class="Delimiter">(</span>inst<span class="Delimiter">,</span> current_ingredient_indices<span class="Delimiter">);</span>
-    <span class="Normal">for</span> <span class="Delimiter">(</span>set&lt;<span class="Normal">int</span>&gt;::iterator p = contained_in_product_indices<span class="Delimiter">.</span>begin<span class="Delimiter">();</span>  p != contained_in_product_indices<span class="Delimiter">.</span>end<span class="Delimiter">();</span>  ++p<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-      <span class="Normal">if</span> <span class="Delimiter">(</span>*p &lt; SIZE<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">))</span>
-        current_ingredient_and_aliases<span class="Delimiter">.</span>insert<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span>*p<span class="Delimiter">));</span>
-    <span class="Delimiter">}</span>
-  <span class="Delimiter">}</span>
-<span class="Delimiter">}</span>
-
-set&lt;<span class="Normal">int</span>&gt; scan_contained_in_product_indices<span class="Delimiter">(</span><span class="Normal">const</span> instruction&amp; inst<span class="Delimiter">,</span> set&lt;<span class="Normal">int</span>&gt;&amp; ingredient_indices<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-  set&lt;reagent&gt; selected_ingredients<span class="Delimiter">;</span>
-  <span class="Normal">const</span> recipe&amp; callee = get<span class="Delimiter">(</span>Recipe<span class="Delimiter">,</span> inst<span class="Delimiter">.</span>operation<span class="Delimiter">);</span>
-  <span class="Normal">for</span> <span class="Delimiter">(</span>set&lt;<span class="Normal">int</span>&gt;::iterator p = ingredient_indices<span class="Delimiter">.</span>begin<span class="Delimiter">();</span>  p != ingredient_indices<span class="Delimiter">.</span>end<span class="Delimiter">();</span>  ++p<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-    <span class="Normal">if</span> <span class="Delimiter">(</span>*p &gt;= SIZE<span class="Delimiter">(</span>callee<span class="Delimiter">.</span>ingredients<span class="Delimiter">))</span> <span class="Identifier">continue</span><span class="Delimiter">;</span>  <span class="Comment">// optional immutable ingredient</span>
-    selected_ingredients<span class="Delimiter">.</span>insert<span class="Delimiter">(</span>callee<span class="Delimiter">.</span>ingredients<span class="Delimiter">.</span>at<span class="Delimiter">(</span>*p<span class="Delimiter">));</span>
-  <span class="Delimiter">}</span>
-  set&lt;<span class="Normal">int</span>&gt; result<span class="Delimiter">;</span>
-  <span class="Normal">for</span> <span class="Delimiter">(</span><span class="Normal">int</span> i = <span class="Constant">0</span><span class="Delimiter">;</span>  i &lt; SIZE<span class="Delimiter">(</span>callee<span class="Delimiter">.</span>products<span class="Delimiter">);</span>  ++i<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-    <span class="Normal">const</span> reagent&amp; current_product = callee<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">);</span>
-    <span class="Normal">const</span> string_tree* contained_in_name = property<span class="Delimiter">(</span>current_product<span class="Delimiter">,</span> <span class="Constant">&quot;contained-in&quot;</span><span class="Delimiter">);</span>
-    <span class="Normal">if</span> <span class="Delimiter">(</span>contained_in_name &amp;&amp; selected_ingredients<span class="Delimiter">.</span>find<span class="Delimiter">(</span>contained_in_name<span class="Delimiter">-&gt;</span>value<span class="Delimiter">)</span> != selected_ingredients<span class="Delimiter">.</span>end<span class="Delimiter">())</span>
-      result<span class="Delimiter">.</span>insert<span class="Delimiter">(</span>i<span class="Delimiter">);</span>
-  <span class="Delimiter">}</span>
-  <span class="Identifier">return</span> result<span class="Delimiter">;</span>
-<span class="Delimiter">}</span>
-
-<span class="Delimiter">:(scenarios transform)</span>
-<span class="Delimiter">:(scenario immutability_infects_contained_in_variables)</span>
-<span class="Special">% Hide_errors = true;</span>
-<span class="muData">container</span> test-list [
-  <span class="Normal">value</span>:num
-  <span class="Normal">next</span>:&amp;:test-list
-]
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">p</span>:&amp;:test-list<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">test-list:type</span>
-  foo p
-]
-<span class="muRecipe">def</span> foo p:&amp;:test-list [  <span class="Comment"># p is immutable</span>
-  local-scope
-  load-ingredients
-  <span class="Normal">p2</span>:&amp;:test-list<span class="Special"> &lt;- </span>test-next p  <span class="Comment"># p2 is immutable</span>
-  *p2<span class="Special"> &lt;- </span>put *p2<span class="Delimiter">,</span> <span class="Constant">value:offset</span><span class="Delimiter">,</span> <span class="Constant">34</span>
-]
-<span class="muRecipe">def</span> test-next x:&amp;:test-list<span class="muRecipe"> -&gt; </span>y:&amp;:test-list/contained-in:x [
-  local-scope
-  load-ingredients
-  y<span class="Special"> &lt;- </span>get *x<span class="Delimiter">,</span> <span class="Constant">next:offset</span>
-]
-<span class="traceContains">+error: foo: cannot modify 'p2' in instruction '*p2 &lt;- put *p2, value:offset, 34' because that would modify p which is an ingredient of recipe foo but not also a product</span>
-
-<span class="Delimiter">:(code)</span>
-<span class="Normal">void</span> check_immutable_ingredient_in_instruction<span class="Delimiter">(</span><span class="Normal">const</span> instruction&amp; inst<span class="Delimiter">,</span> <span class="Normal">const</span> set&lt;reagent&gt;&amp; current_ingredient_and_aliases<span class="Delimiter">,</span> <span class="Normal">const</span> string&amp; original_ingredient_name<span class="Delimiter">,</span> <span class="Normal">const</span> recipe&amp; caller<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-  <span class="Comment">// first check if the instruction is directly modifying something it shouldn't</span>
-  <span class="Normal">for</span> <span class="Delimiter">(</span><span class="Normal">int</span> i = <span class="Constant">0</span><span class="Delimiter">;</span>  i &lt; SIZE<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">);</span>  ++i<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-    <span class="Normal">if</span> <span class="Delimiter">(</span>has_property<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">),</span> <span class="Constant">&quot;lookup&quot;</span><span class="Delimiter">)</span>
-        &amp;&amp; current_ingredient_and_aliases<span class="Delimiter">.</span>find<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">))</span> != current_ingredient_and_aliases<span class="Delimiter">.</span>end<span class="Delimiter">())</span> <span class="Delimiter">{</span>
-      string current_product_name = inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">).</span>name<span class="Delimiter">;</span>
-      <span class="Normal">if</span> <span class="Delimiter">(</span>current_product_name == original_ingredient_name<span class="Delimiter">)</span>
-        raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;cannot modify '&quot;</span> &lt;&lt; current_product_name &lt;&lt; <span class="Constant">&quot;' in instruction '&quot;</span> &lt;&lt; inst<span class="Delimiter">.</span>original_string &lt;&lt; <span class="Constant">&quot;' because it's an ingredient of recipe &quot;</span> &lt;&lt; caller<span class="Delimiter">.</span>name &lt;&lt; <span class="Constant">&quot; but not also a product</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
-      <span class="Normal">else</span>
-        raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;cannot modify '&quot;</span> &lt;&lt; current_product_name &lt;&lt; <span class="Constant">&quot;' in instruction '&quot;</span> &lt;&lt; inst<span class="Delimiter">.</span>original_string &lt;&lt; <span class="Constant">&quot;' because that would modify &quot;</span> &lt;&lt; original_ingredient_name &lt;&lt; <span class="Constant">&quot; which is an ingredient of recipe &quot;</span> &lt;&lt; caller<span class="Delimiter">.</span>name &lt;&lt; <span class="Constant">&quot; but not also a product</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
-      <span class="Identifier">return</span><span class="Delimiter">;</span>
-    <span class="Delimiter">}</span>
-  <span class="Delimiter">}</span>
-  <span class="Comment">// check if there's any indirect modification going on</span>
-  set&lt;<span class="Normal">int</span>&gt; current_ingredient_indices = ingredient_indices<span class="Delimiter">(</span>inst<span class="Delimiter">,</span> current_ingredient_and_aliases<span class="Delimiter">);</span>
-  <span class="Normal">if</span> <span class="Delimiter">(</span>current_ingredient_indices<span class="Delimiter">.</span>empty<span class="Delimiter">())</span> <span class="Identifier">return</span><span class="Delimiter">;</span>  <span class="Comment">// ingredient not found in call</span>
-  <span class="Normal">for</span> <span class="Delimiter">(</span>set&lt;<span class="Normal">int</span>&gt;::iterator p = current_ingredient_indices<span class="Delimiter">.</span>begin<span class="Delimiter">();</span>  p != current_ingredient_indices<span class="Delimiter">.</span>end<span class="Delimiter">();</span>  ++p<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-    <span class="Normal">const</span> <span class="Normal">int</span> current_ingredient_index = *p<span class="Delimiter">;</span>
-    reagent current_ingredient = inst<span class="Delimiter">.</span>ingredients<span class="Delimiter">.</span>at<span class="Delimiter">(</span>current_ingredient_index<span class="Delimiter">);</span>
-    canonize_type<span class="Delimiter">(</span>current_ingredient<span class="Delimiter">);</span>
-    <span class="Normal">const</span> string&amp; current_ingredient_name = current_ingredient<span class="Delimiter">.</span>name<span class="Delimiter">;</span>
-    <span class="Normal">if</span> <span class="Delimiter">(</span>!contains_key<span class="Delimiter">(</span>Recipe<span class="Delimiter">,</span> inst<span class="Delimiter">.</span>operation<span class="Delimiter">))</span> <span class="Delimiter">{</span>
-      <span class="Comment">// primitive recipe</span>
-      <span class="Comment">// we got here only because we got an instruction with an implicit product, and the instruction didn't explicitly spell it out</span>
-      <span class="Comment">//    put x, y:offset, z</span>
-      <span class="Comment">// instead of</span>
-      <span class="Comment">//    x &lt;- put x, y:offset, z</span>
-      <span class="Normal">if</span> <span class="Delimiter">(</span>inst<span class="Delimiter">.</span>operation == PUT || inst<span class="Delimiter">.</span>operation == PUT_INDEX<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-        <span class="Normal">if</span> <span class="Delimiter">(</span>current_ingredient_index == <span class="Constant">0</span><span class="Delimiter">)</span> <span class="Delimiter">{</span>
-          <span class="Normal">if</span> <span class="Delimiter">(</span>current_ingredient_name == original_ingredient_name<span class="Delimiter">)</span>
-            raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;cannot modify '&quot;</span> &lt;&lt; current_ingredient_name &lt;&lt; <span class="Constant">&quot;' in instruction '&quot;</span> &lt;&lt; inst<span class="Delimiter">.</span>original_string &lt;&lt; <span class="Constant">&quot;' because it's an ingredient of recipe &quot;</span> &lt;&lt; caller<span class="Delimiter">.</span>name &lt;&lt; <span class="Constant">&quot; but not also a product</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
-          <span class="Normal">else</span>
-            raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;cannot modify '&quot;</span> &lt;&lt; current_ingredient_name &lt;&lt; <span class="Constant">&quot;' in instruction '&quot;</span> &lt;&lt; inst<span class="Delimiter">.</span>original_string &lt;&lt; <span class="Constant">&quot;' because that would modify '&quot;</span> &lt;&lt; original_ingredient_name &lt;&lt; <span class="Constant">&quot;' which is an ingredient of recipe &quot;</span> &lt;&lt; caller<span class="Delimiter">.</span>name &lt;&lt; <span class="Constant">&quot; but not also a product</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
-        <span class="Delimiter">}</span>
-      <span class="Delimiter">}</span>
-    <span class="Delimiter">}</span>
-    <span class="Normal">else</span> <span class="Delimiter">{</span>
-      <span class="Comment">// defined recipe</span>
-      <span class="Normal">if</span> <span class="Delimiter">(</span>is_modified_in_recipe<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>operation<span class="Delimiter">,</span> current_ingredient_index<span class="Delimiter">,</span> caller<span class="Delimiter">))</span> <span class="Delimiter">{</span>
-        <span class="Normal">if</span> <span class="Delimiter">(</span>current_ingredient_name == original_ingredient_name<span class="Delimiter">)</span>
-          raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;cannot modify '&quot;</span> &lt;&lt; current_ingredient_name &lt;&lt; <span class="Constant">&quot;' in instruction '&quot;</span> &lt;&lt; inst<span class="Delimiter">.</span>original_string &lt;&lt; <span class="Constant">&quot;' because it's an ingredient of recipe &quot;</span> &lt;&lt; caller<span class="Delimiter">.</span>name &lt;&lt; <span class="Constant">&quot; but not also a product</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
-        <span class="Normal">else</span>
-          raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;cannot modify '&quot;</span> &lt;&lt; current_ingredient_name &lt;&lt; <span class="Constant">&quot;' in instruction '&quot;</span> &lt;&lt; inst<span class="Delimiter">.</span>original_string &lt;&lt; <span class="Constant">&quot;' because that would modify '&quot;</span> &lt;&lt; original_ingredient_name &lt;&lt; <span class="Constant">&quot;' which is an ingredient of recipe &quot;</span> &lt;&lt; caller<span class="Delimiter">.</span>name &lt;&lt; <span class="Constant">&quot; but not also a product</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
-      <span class="Delimiter">}</span>
-    <span class="Delimiter">}</span>
-  <span class="Delimiter">}</span>
-<span class="Delimiter">}</span>
-
-<span class="Normal">bool</span> is_modified_in_recipe<span class="Delimiter">(</span><span class="Normal">const</span> recipe_ordinal r<span class="Delimiter">,</span> <span class="Normal">const</span> <span class="Normal">int</span> ingredient_index<span class="Delimiter">,</span> <span class="Normal">const</span> recipe&amp; caller<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-  <span class="Normal">const</span> recipe&amp; callee = get<span class="Delimiter">(</span>Recipe<span class="Delimiter">,</span> r<span class="Delimiter">);</span>
-  <span class="Normal">if</span> <span class="Delimiter">(</span>!callee<span class="Delimiter">.</span>has_header<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-    raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;can't check mutability of ingredients in recipe &quot;</span> &lt;&lt; callee<span class="Delimiter">.</span>name &lt;&lt; <span class="Constant">&quot; because it uses 'next-ingredient' directly, rather than a recipe header.</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
-    <span class="Identifier">return</span> <span class="Constant">true</span><span class="Delimiter">;</span>
-  <span class="Delimiter">}</span>
-  <span class="Normal">if</span> <span class="Delimiter">(</span>ingredient_index &gt;= SIZE<span class="Delimiter">(</span>callee<span class="Delimiter">.</span>ingredients<span class="Delimiter">))</span> <span class="Identifier">return</span> <span class="Constant">false</span><span class="Delimiter">;</span>  <span class="Comment">// optional immutable ingredient</span>
-  <span class="Identifier">return</span> is_present_in_products<span class="Delimiter">(</span>callee<span class="Delimiter">,</span> callee<span class="Delimiter">.</span>ingredients<span class="Delimiter">.</span>at<span class="Delimiter">(</span>ingredient_index<span class="Delimiter">).</span>name<span class="Delimiter">);</span>
-<span class="Delimiter">}</span>
-
-<span class="Normal">bool</span> is_present_in_products<span class="Delimiter">(</span><span class="Normal">const</span> recipe&amp; callee<span class="Delimiter">,</span> <span class="Normal">const</span> string&amp; ingredient_name<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-  <span class="Normal">for</span> <span class="Delimiter">(</span><span class="Normal">int</span> i = <span class="Constant">0</span><span class="Delimiter">;</span>  i &lt; SIZE<span class="Delimiter">(</span>callee<span class="Delimiter">.</span>products<span class="Delimiter">);</span>  ++i<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-    <span class="Normal">if</span> <span class="Delimiter">(</span>callee<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">).</span>name == ingredient_name<span class="Delimiter">)</span>
-      <span class="Identifier">return</span> <span class="Constant">true</span><span class="Delimiter">;</span>
-  <span class="Delimiter">}</span>
-  <span class="Identifier">return</span> <span class="Constant">false</span><span class="Delimiter">;</span>
-<span class="Delimiter">}</span>
-
-set&lt;<span class="Normal">int</span>&gt; ingredient_indices<span class="Delimiter">(</span><span class="Normal">const</span> instruction&amp; inst<span class="Delimiter">,</span> <span class="Normal">const</span> set&lt;reagent&gt;&amp; ingredient_names<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-  set&lt;<span class="Normal">int</span>&gt; result<span class="Delimiter">;</span>
-  <span class="Normal">for</span> <span class="Delimiter">(</span><span class="Normal">int</span> i = <span class="Constant">0</span><span class="Delimiter">;</span>  i &lt; SIZE<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>ingredients<span class="Delimiter">);</span>  ++i<span class="Delimiter">)</span> <span class="Delimiter">{</span>
-    <span class="Normal">if</span> <span class="Delimiter">(</span>is_literal<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>ingredients<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">)))</span> <span class="Identifier">continue</span><span class="Delimiter">;</span>
-    <span class="Normal">if</span> <span class="Delimiter">(</span>ingredient_names<span class="Delimiter">.</span>find<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>ingredients<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">))</span> != ingredient_names<span class="Delimiter">.</span>end<span class="Delimiter">())</span>
-      result<span class="Delimiter">.</span>insert<span class="Delimiter">(</span>i<span class="Delimiter">);</span>
-  <span class="Delimiter">}</span>
-  <span class="Identifier">return</span> result<span class="Delimiter">;</span>
-<span class="Delimiter">}</span>
-
-<span class="Comment">//: Sometimes you want to pass in two addresses, one pointing inside the</span>
-<span class="Comment">//: other. For example, you want to delete a node from a linked list. You</span>
-<span class="Comment">//: can't pass both pointers back out, because if a caller tries to make both</span>
-<span class="Comment">//: identical then you can't tell which value will be written on the way out.</span>
-<span class="Comment">//:</span>
-<span class="Comment">//: Experimental solution: just tell Mu that one points inside the other.</span>
-<span class="Comment">//: This way we can return just one pointer as high up as necessary to capture</span>
-<span class="Comment">//: all modifications performed by a recipe.</span>
-<span class="Comment">//:</span>
-<span class="Comment">//: We'll see if we end up wanting to abuse /contained-in for other reasons.</span>
-
-<span class="Delimiter">:(scenarios transform)</span>
-<span class="Delimiter">:(scenario can_modify_contained_in_addresses)</span>
-<span class="muData">container</span> test-list [
-  <span class="Normal">value</span>:num
-  <span class="Normal">next</span>:&amp;:test-list
-]
-<span class="muRecipe">def</span> main [
-  local-scope
-  <span class="Normal">p</span>:&amp;:test-list<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">test-list:type</span>
-  foo p
-]
-<span class="muRecipe">def</span> foo p:&amp;:test-list<span class="muRecipe"> -&gt; </span>p:&amp;:test-list [
-  local-scope
-  load-ingredients
-  <span class="Normal">p2</span>:&amp;:test-list<span class="Special"> &lt;- </span>test-next p
-  p<span class="Special"> &lt;- </span>test-remove p2<span class="Delimiter">,</span> p
-]
-<span class="muRecipe">def</span> test-next x:&amp;:test-list<span class="muRecipe"> -&gt; </span>y:&amp;:test-list [
-  local-scope
-  load-ingredients
-  y<span class="Special"> &lt;- </span>get *x<span class="Delimiter">,</span> <span class="Constant">next:offset</span>
-]
-<span class="muRecipe">def</span> test-remove x:&amp;:test-list/contained-in:from<span class="Delimiter">,</span> from:&amp;:test-list<span class="muRecipe"> -&gt; </span>from:&amp;:test-list [
-  local-scope
-  load-ingredients
-  *x<span class="Special"> &lt;- </span>put *x<span class="Delimiter">,</span> <span class="Constant">value:offset</span><span class="Delimiter">,</span> <span class="Constant">34</span>  <span class="Comment"># can modify x</span>
-]
-$error: <span class="Constant">0</span>
-
-<span class="Delimiter">:(before &quot;End Immutable Ingredients Special-cases&quot;)</span>
-<span class="Normal">if</span> <span class="Delimiter">(</span>has_property<span class="Delimiter">(</span>current_ingredient<span class="Delimiter">,</span> <span class="Constant">&quot;contained-in&quot;</span><span class="Delimiter">))</span> <span class="Delimiter">{</span>
-  <span class="Normal">const</span> string_tree* tmp = property<span class="Delimiter">(</span>current_ingredient<span class="Delimiter">,</span> <span class="Constant">&quot;contained-in&quot;</span><span class="Delimiter">);</span>
-  <span class="Normal">if</span> <span class="Delimiter">(</span>!tmp<span class="Delimiter">-&gt;</span>atom
-      || <span class="Delimiter">(</span>!is_present_in_ingredients<span class="Delimiter">(</span>caller<span class="Delimiter">,</span> tmp<span class="Delimiter">-&gt;</span>value<span class="Delimiter">)</span>
-          &amp;&amp; !is_present_in_products<span class="Delimiter">(</span>caller<span class="Delimiter">,</span> tmp<span class="Delimiter">-&gt;</span>value<span class="Delimiter">)))</span> <span class="Delimiter">{</span>
-    raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;/contained-in can only point to another ingredient or product, but got '&quot;</span> &lt;&lt; to_string<span class="Delimiter">(</span>property<span class="Delimiter">(</span>current_ingredient<span class="Delimiter">,</span> <span class="Constant">&quot;contained-in&quot;</span><span class="Delimiter">))</span> &lt;&lt; <span class="Constant">&quot;'</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
-  <span class="Delimiter">}</span>
-  <span class="Identifier">continue</span><span class="Delimiter">;</span>
-<span class="Delimiter">}</span>
-
-<span class="Delimiter">:(scenario contained_in_check)</span>
-<span class="muData">container</span> test-list [
-  <span class="Normal">value</span>:num
-  <span class="Normal">next</span>:&amp;:test-list
-]
-<span class="muRecipe">def</span> test-remove x:&amp;:test-list/contained-in:result<span class="Delimiter">,</span> from:&amp;:test-list<span class="muRecipe"> -&gt; </span>result:&amp;:test-list [
-  local-scope
-  load-ingredients
-  result<span class="Special"> &lt;- </span>copy <span class="Constant">0</span>
-]
-$error: <span class="Constant">0</span>
+<a name="L1"></a><span id="L1" class="LineNr">  1 </span><span class="Comment">//: Ingredients of a recipe are meant to be immutable unless they're also</span>
+<a name="L2"></a><span id="L2" class="LineNr">  2 </span><span class="Comment">//: products. This layer will start enforcing this check.</span>
+<a name="L3"></a><span id="L3" class="LineNr">  3 </span><span class="Comment">//:</span>
+<a name="L4"></a><span id="L4" class="LineNr">  4 </span><span class="Comment">//: One hole for now: variables in surrounding spaces are implicitly mutable.</span>
+<a name="L5"></a><span id="L5" class="LineNr">  5 </span><span class="Comment">//: [tag: todo]</span>
+<a name="L6"></a><span id="L6" class="LineNr">  6 </span>
+<a name="L7"></a><span id="L7" class="LineNr">  7 </span><span class="Delimiter">:(scenario can_modify_ingredients_that_are_also_products)</span>
+<a name="L8"></a><span id="L8" class="LineNr">  8 </span><span class="Comment"># mutable container</span>
+<a name="L9"></a><span id="L9" class="LineNr">  9 </span><span class="muRecipe">def</span> main [
+<a name="L10"></a><span id="L10" class="LineNr"> 10 </span>  local-scope
+<a name="L11"></a><span id="L11" class="LineNr"> 11 </span>  <span class="Normal">p</span>:point<span class="Special"> &lt;- </span>merge <span class="Constant">34</span><span class="Delimiter">,</span> <span class="Constant">35</span>
+<a name="L12"></a><span id="L12" class="LineNr"> 12 </span>  p<span class="Special"> &lt;- </span>foo p
+<a name="L13"></a><span id="L13" class="LineNr"> 13 </span>]
+<a name="L14"></a><span id="L14" class="LineNr"> 14 </span><span class="muRecipe">def</span> foo p:point<span class="muRecipe"> -&gt; </span>p:point [
+<a name="L15"></a><span id="L15" class="LineNr"> 15 </span>  local-scope
+<a name="L16"></a><span id="L16" class="LineNr"> 16 </span>  load-ingredients
+<a name="L17"></a><span id="L17" class="LineNr"> 17 </span>  p<span class="Special"> &lt;- </span>put p<span class="Delimiter">,</span> <span class="Constant">x:offset</span><span class="Delimiter">,</span> <span class="Constant">34</span>
+<a name="L18"></a><span id="L18" class="LineNr"> 18 </span>]
+<a name="L19"></a><span id="L19" class="LineNr"> 19 </span>$error: <span class="Constant">0</span>
+<a name="L20"></a><span id="L20" class="LineNr"> 20 </span>
+<a name="L21"></a><span id="L21" class="LineNr"> 21 </span><span class="Delimiter">:(scenario can_modify_ingredients_that_are_also_products_2)</span>
+<a name="L22"></a><span id="L22" class="LineNr"> 22 </span><span class="muRecipe">def</span> main [
+<a name="L23"></a><span id="L23" class="LineNr"> 23 </span>  local-scope
+<a name="L24"></a><span id="L24" class="LineNr"> 24 </span>  <span class="Normal">p</span>:&amp;:point<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">point:type</span>
+<a name="L25"></a><span id="L25" class="LineNr"> 25 </span>  p<span class="Special"> &lt;- </span>foo p
+<a name="L26"></a><span id="L26" class="LineNr"> 26 </span>]
+<a name="L27"></a><span id="L27" class="LineNr"> 27 </span><span class="Comment"># mutable address to container</span>
+<a name="L28"></a><span id="L28" class="LineNr"> 28 </span><span class="muRecipe">def</span> foo p:&amp;:point<span class="muRecipe"> -&gt; </span>p:&amp;:point [
+<a name="L29"></a><span id="L29" class="LineNr"> 29 </span>  local-scope
+<a name="L30"></a><span id="L30" class="LineNr"> 30 </span>  load-ingredients
+<a name="L31"></a><span id="L31" class="LineNr"> 31 </span>  *p<span class="Special"> &lt;- </span>put *p<span class="Delimiter">,</span> <span class="Constant">x:offset</span><span class="Delimiter">,</span> <span class="Constant">34</span>
+<a name="L32"></a><span id="L32" class="LineNr"> 32 </span>]
+<a name="L33"></a><span id="L33" class="LineNr"> 33 </span>$error: <span class="Constant">0</span>
+<a name="L34"></a><span id="L34" class="LineNr"> 34 </span>
+<a name="L35"></a><span id="L35" class="LineNr"> 35 </span><span class="Delimiter">:(scenario can_modify_ingredients_that_are_also_products_3)</span>
+<a name="L36"></a><span id="L36" class="LineNr"> 36 </span><span class="muRecipe">def</span> main [
+<a name="L37"></a><span id="L37" class="LineNr"> 37 </span>  local-scope
+<a name="L38"></a><span id="L38" class="LineNr"> 38 </span>  <span class="Normal">p</span>:&amp;:@:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span><span class="Delimiter">,</span> <span class="Constant">3</span>
+<a name="L39"></a><span id="L39" class="LineNr"> 39 </span>  p<span class="Special"> &lt;- </span>foo p
+<a name="L40"></a><span id="L40" class="LineNr"> 40 </span>]
+<a name="L41"></a><span id="L41" class="LineNr"> 41 </span><span class="Comment"># mutable address</span>
+<a name="L42"></a><span id="L42" class="LineNr"> 42 </span><span class="muRecipe">def</span> foo p:&amp;:@:num<span class="muRecipe"> -&gt; </span>p:&amp;:@:num [
+<a name="L43"></a><span id="L43" class="LineNr"> 43 </span>  local-scope
+<a name="L44"></a><span id="L44" class="LineNr"> 44 </span>  load-ingredients
+<a name="L45"></a><span id="L45" class="LineNr"> 45 </span>  *p<span class="Special"> &lt;- </span>put-index *p<span class="Delimiter">,</span> <span class="Constant">0</span><span class="Delimiter">,</span> <span class="Constant">34</span>
+<a name="L46"></a><span id="L46" class="LineNr"> 46 </span>]
+<a name="L47"></a><span id="L47" class="LineNr"> 47 </span>$error: <span class="Constant">0</span>
+<a name="L48"></a><span id="L48" class="LineNr"> 48 </span>
+<a name="L49"></a><span id="L49" class="LineNr"> 49 </span><span class="Delimiter">:(scenario ignore_literal_ingredients_for_immutability_checks)</span>
+<a name="L50"></a><span id="L50" class="LineNr"> 50 </span><span class="muRecipe">def</span> main [
+<a name="L51"></a><span id="L51" class="LineNr"> 51 </span>  local-scope
+<a name="L52"></a><span id="L52" class="LineNr"> 52 </span>  <span class="Normal">p</span>:&amp;:d1<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">d1:type</span>
+<a name="L53"></a><span id="L53" class="LineNr"> 53 </span>  <span class="Normal">q</span>:num<span class="Special"> &lt;- </span>foo p
+<a name="L54"></a><span id="L54" class="LineNr"> 54 </span>]
+<a name="L55"></a><span id="L55" class="LineNr"> 55 </span><span class="muRecipe">def</span> foo p:&amp;:d1<span class="muRecipe"> -&gt; </span>q:num [
+<a name="L56"></a><span id="L56" class="LineNr"> 56 </span>  local-scope
+<a name="L57"></a><span id="L57" class="LineNr"> 57 </span>  load-ingredients
+<a name="L58"></a><span id="L58" class="LineNr"> 58 </span>  <span class="Normal">x</span>:&amp;:d1<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">d1:type</span>
+<a name="L59"></a><span id="L59" class="LineNr"> 59 </span>  *x<span class="Special"> &lt;- </span>put *x<span class="Delimiter">,</span> <span class="Constant">p:offset</span><span class="Delimiter">,</span> <span class="Constant">34</span>  <span class="Comment"># ignore this 'p'</span>
+<a name="L60"></a><span id="L60" class="LineNr"> 60 </span>  <span class="Identifier">return</span> <span class="Constant">36</span>
+<a name="L61"></a><span id="L61" class="LineNr"> 61 </span>]
+<a name="L62"></a><span id="L62" class="LineNr"> 62 </span><span class="muData">container</span> d1 [
+<a name="L63"></a><span id="L63" class="LineNr"> 63 </span>  <span class="Normal">p</span>:num
+<a name="L64"></a><span id="L64" class="LineNr"> 64 </span>  <span class="Normal">q</span>:num
+<a name="L65"></a><span id="L65" class="LineNr"> 65 </span>]
+<a name="L66"></a><span id="L66" class="LineNr"> 66 </span>$error: <span class="Constant">0</span>
+<a name="L67"></a><span id="L67" class="LineNr"> 67 </span>
+<a name="L68"></a><span id="L68" class="LineNr"> 68 </span><span class="Delimiter">:(scenario cannot_modify_immutable_ingredients)</span>
+<a name="L69"></a><span id="L69" class="LineNr"> 69 </span><span class="Special">% Hide_errors = true;</span>
+<a name="L70"></a><span id="L70" class="LineNr"> 70 </span><span class="muRecipe">def</span> main [
+<a name="L71"></a><span id="L71" class="LineNr"> 71 </span>  local-scope
+<a name="L72"></a><span id="L72" class="LineNr"> 72 </span>  <span class="Normal">x</span>:&amp;:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span>
+<a name="L73"></a><span id="L73" class="LineNr"> 73 </span>  foo x
+<a name="L74"></a><span id="L74" class="LineNr"> 74 </span>]
+<a name="L75"></a><span id="L75" class="LineNr"> 75 </span><span class="Comment"># immutable address to primitive</span>
+<a name="L76"></a><span id="L76" class="LineNr"> 76 </span><span class="muRecipe">def</span> foo x:&amp;:num [
+<a name="L77"></a><span id="L77" class="LineNr"> 77 </span>  local-scope
+<a name="L78"></a><span id="L78" class="LineNr"> 78 </span>  load-ingredients
+<a name="L79"></a><span id="L79" class="LineNr"> 79 </span>  *x<span class="Special"> &lt;- </span>copy <span class="Constant">34</span>
+<a name="L80"></a><span id="L80" class="LineNr"> 80 </span>]
+<a name="L81"></a><span id="L81" class="LineNr"> 81 </span><span class="traceContains">+error: foo: cannot modify 'x' in instruction '*x &lt;- copy 34' because it's an ingredient of recipe foo but not also a product</span>
+<a name="L82"></a><span id="L82" class="LineNr"> 82 </span>
+<a name="L83"></a><span id="L83" class="LineNr"> 83 </span><span class="Delimiter">:(scenario cannot_modify_immutable_containers)</span>
+<a name="L84"></a><span id="L84" class="LineNr"> 84 </span><span class="Special">% Hide_errors = true;</span>
+<a name="L85"></a><span id="L85" class="LineNr"> 85 </span><span class="muRecipe">def</span> main [
+<a name="L86"></a><span id="L86" class="LineNr"> 86 </span>  local-scope
+<a name="L87"></a><span id="L87" class="LineNr"> 87 </span>  <span class="Normal">x</span>:point-number<span class="Special"> &lt;- </span>merge <span class="Constant">34</span><span class="Delimiter">,</span> <span class="Constant">35</span><span class="Delimiter">,</span> <span class="Constant">36</span>
+<a name="L88"></a><span id="L88" class="LineNr"> 88 </span>  foo x
+<a name="L89"></a><span id="L89" class="LineNr"> 89 </span>]
+<a name="L90"></a><span id="L90" class="LineNr"> 90 </span><span class="Comment"># immutable container</span>
+<a name="L91"></a><span id="L91" class="LineNr"> 91 </span><span class="muRecipe">def</span> foo x:point-number [
+<a name="L92"></a><span id="L92" class="LineNr"> 92 </span>  local-scope
+<a name="L93"></a><span id="L93" class="LineNr"> 93 </span>  load-ingredients
+<a name="L94"></a><span id="L94" class="LineNr"> 94 </span>  <span class="Comment"># copy an element: ok</span>
+<a name="L95"></a><span id="L95" class="LineNr"> 95 </span>  <span class="Normal">y</span>:point<span class="Special"> &lt;- </span>get x<span class="Delimiter">,</span> <span class="Constant">xy:offset</span>
+<a name="L96"></a><span id="L96" class="LineNr"> 96 </span>  <span class="Comment"># modify the element: boom</span>
+<a name="L97"></a><span id="L97" class="LineNr"> 97 </span>  <span class="Comment"># This could be ok if y contains no addresses, but we're not going to try to be that smart.</span>
+<a name="L98"></a><span id="L98" class="LineNr"> 98 </span>  <span class="Comment"># It also makes the rules easier to reason about. If it's just an ingredient, just don't try to change it.</span>
+<a name="L99"></a><span id="L99" class="LineNr"> 99 </span>  y<span class="Special"> &lt;- </span>put y<span class="Delimiter">,</span> <span class="Constant">x:offset</span><span class="Delimiter">,</span> <span class="Constant">37</span>
+<a name="L100"></a><span id="L100" class="LineNr">100 </span>]
+<a name="L101"></a><span id="L101" class="LineNr">101 </span><span class="traceContains">+error: foo: cannot modify 'y' in instruction 'y &lt;- put y, x:offset, 37' because that would modify 'x' which is an ingredient of recipe foo but not also a product</span>
+<a name="L102"></a><span id="L102" class="LineNr">102 </span>
+<a name="L103"></a><span id="L103" class="LineNr">103 </span><span class="Delimiter">:(scenario can_modify_immutable_pointers)</span>
+<a name="L104"></a><span id="L104" class="LineNr">104 </span><span class="muRecipe">def</span> main [
+<a name="L105"></a><span id="L105" class="LineNr">105 </span>  local-scope
+<a name="L106"></a><span id="L106" class="LineNr">106 </span>  <span class="Normal">x</span>:&amp;:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span>
+<a name="L107"></a><span id="L107" class="LineNr">107 </span>  foo x
+<a name="L108"></a><span id="L108" class="LineNr">108 </span>]
+<a name="L109"></a><span id="L109" class="LineNr">109 </span><span class="muRecipe">def</span> foo x:&amp;:num [
+<a name="L110"></a><span id="L110" class="LineNr">110 </span>  local-scope
+<a name="L111"></a><span id="L111" class="LineNr">111 </span>  load-ingredients
+<a name="L112"></a><span id="L112" class="LineNr">112 </span>  <span class="Comment"># modify the address, not the payload</span>
+<a name="L113"></a><span id="L113" class="LineNr">113 </span>  x<span class="Special"> &lt;- </span>copy <span class="Constant">0</span>
+<a name="L114"></a><span id="L114" class="LineNr">114 </span>]
+<a name="L115"></a><span id="L115" class="LineNr">115 </span>$error: <span class="Constant">0</span>
+<a name="L116"></a><span id="L116" class="LineNr">116 </span>
+<a name="L117"></a><span id="L117" class="LineNr">117 </span><span class="Delimiter">:(scenario can_modify_immutable_pointers_but_not_their_payloads)</span>
+<a name="L118"></a><span id="L118" class="LineNr">118 </span><span class="Special">% Hide_errors = true;</span>
+<a name="L119"></a><span id="L119" class="LineNr">119 </span><span class="muRecipe">def</span> main [
+<a name="L120"></a><span id="L120" class="LineNr">120 </span>  local-scope
+<a name="L121"></a><span id="L121" class="LineNr">121 </span>  <span class="Normal">x</span>:&amp;:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span>
+<a name="L122"></a><span id="L122" class="LineNr">122 </span>  foo x
+<a name="L123"></a><span id="L123" class="LineNr">123 </span>]
+<a name="L124"></a><span id="L124" class="LineNr">124 </span><span class="muRecipe">def</span> foo x:&amp;:num [
+<a name="L125"></a><span id="L125" class="LineNr">125 </span>  local-scope
+<a name="L126"></a><span id="L126" class="LineNr">126 </span>  load-ingredients
+<a name="L127"></a><span id="L127" class="LineNr">127 </span>  <span class="Comment"># modify address; ok</span>
+<a name="L128"></a><span id="L128" class="LineNr">128 </span>  x<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span>
+<a name="L129"></a><span id="L129" class="LineNr">129 </span>  <span class="Comment"># modify payload: boom</span>
+<a name="L130"></a><span id="L130" class="LineNr">130 </span>  <span class="Comment"># this could be ok, but we're not going to try to be that smart</span>
+<a name="L131"></a><span id="L131" class="LineNr">131 </span>  *x<span class="Special"> &lt;- </span>copy <span class="Constant">34</span>
+<a name="L132"></a><span id="L132" class="LineNr">132 </span>]
+<a name="L133"></a><span id="L133" class="LineNr">133 </span><span class="traceContains">+error: foo: cannot modify 'x' in instruction '*x &lt;- copy 34' because it's an ingredient of recipe foo but not also a product</span>
+<a name="L134"></a><span id="L134" class="LineNr">134 </span>
+<a name="L135"></a><span id="L135" class="LineNr">135 </span><span class="Delimiter">:(scenario cannot_call_mutating_recipes_on_immutable_ingredients)</span>
+<a name="L136"></a><span id="L136" class="LineNr">136 </span><span class="Special">% Hide_errors = true;</span>
+<a name="L137"></a><span id="L137" class="LineNr">137 </span><span class="muRecipe">def</span> main [
+<a name="L138"></a><span id="L138" class="LineNr">138 </span>  local-scope
+<a name="L139"></a><span id="L139" class="LineNr">139 </span>  <span class="Normal">p</span>:&amp;:point<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">point:type</span>
+<a name="L140"></a><span id="L140" class="LineNr">140 </span>  foo p
+<a name="L141"></a><span id="L141" class="LineNr">141 </span>]
+<a name="L142"></a><span id="L142" class="LineNr">142 </span><span class="muRecipe">def</span> foo p:&amp;:point [
+<a name="L143"></a><span id="L143" class="LineNr">143 </span>  local-scope
+<a name="L144"></a><span id="L144" class="LineNr">144 </span>  load-ingredients
+<a name="L145"></a><span id="L145" class="LineNr">145 </span>  bar p
+<a name="L146"></a><span id="L146" class="LineNr">146 </span>]
+<a name="L147"></a><span id="L147" class="LineNr">147 </span><span class="muRecipe">def</span> bar p:&amp;:point<span class="muRecipe"> -&gt; </span>p:&amp;:point [
+<a name="L148"></a><span id="L148" class="LineNr">148 </span>  local-scope
+<a name="L149"></a><span id="L149" class="LineNr">149 </span>  load-ingredients
+<a name="L150"></a><span id="L150" class="LineNr">150 </span>  <span class="Comment"># p could be modified here, but it doesn't have to be, it's already marked</span>
+<a name="L151"></a><span id="L151" class="LineNr">151 </span>  <span class="Comment"># mutable in the header</span>
+<a name="L152"></a><span id="L152" class="LineNr">152 </span>]
+<a name="L153"></a><span id="L153" class="LineNr">153 </span><span class="traceContains">+error: foo: cannot modify 'p' in instruction 'bar p' because it's an ingredient of recipe foo but not also a product</span>
+<a name="L154"></a><span id="L154" class="LineNr">154 </span>
+<a name="L155"></a><span id="L155" class="LineNr">155 </span><span class="Delimiter">:(scenario cannot_modify_copies_of_immutable_ingredients)</span>
+<a name="L156"></a><span id="L156" class="LineNr">156 </span><span class="Special">% Hide_errors = true;</span>
+<a name="L157"></a><span id="L157" class="LineNr">157 </span><span class="muRecipe">def</span> main [
+<a name="L158"></a><span id="L158" class="LineNr">158 </span>  local-scope
+<a name="L159"></a><span id="L159" class="LineNr">159 </span>  <span class="Normal">p</span>:&amp;:point<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">point:type</span>
+<a name="L160"></a><span id="L160" class="LineNr">160 </span>  foo p
+<a name="L161"></a><span id="L161" class="LineNr">161 </span>]
+<a name="L162"></a><span id="L162" class="LineNr">162 </span><span class="muRecipe">def</span> foo p:&amp;:point [
+<a name="L163"></a><span id="L163" class="LineNr">163 </span>  local-scope
+<a name="L164"></a><span id="L164" class="LineNr">164 </span>  load-ingredients
+<a name="L165"></a><span id="L165" class="LineNr">165 </span>  <span class="Normal">q</span>:&amp;:point<span class="Special"> &lt;- </span>copy p
+<a name="L166"></a><span id="L166" class="LineNr">166 </span>  *q<span class="Special"> &lt;- </span>put *q<span class="Delimiter">,</span> <span class="Constant">x:offset</span><span class="Delimiter">,</span> <span class="Constant">34</span>
+<a name="L167"></a><span id="L167" class="LineNr">167 </span>]
+<a name="L168"></a><span id="L168" class="LineNr">168 </span><span class="traceContains">+error: foo: cannot modify 'q' in instruction '*q &lt;- put *q, x:offset, 34' because that would modify p which is an ingredient of recipe foo but not also a product</span>
+<a name="L169"></a><span id="L169" class="LineNr">169 </span>
+<a name="L170"></a><span id="L170" class="LineNr">170 </span><span class="Delimiter">:(scenario can_modify_copies_of_mutable_ingredients)</span>
+<a name="L171"></a><span id="L171" class="LineNr">171 </span><span class="muRecipe">def</span> main [
+<a name="L172"></a><span id="L172" class="LineNr">172 </span>  local-scope
+<a name="L173"></a><span id="L173" class="LineNr">173 </span>  <span class="Normal">p</span>:&amp;:point<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">point:type</span>
+<a name="L174"></a><span id="L174" class="LineNr">174 </span>  foo p
+<a name="L175"></a><span id="L175" class="LineNr">175 </span>]
+<a name="L176"></a><span id="L176" class="LineNr">176 </span><span class="muRecipe">def</span> foo p:&amp;:point<span class="muRecipe"> -&gt; </span>p:&amp;:point [
+<a name="L177"></a><span id="L177" class="LineNr">177 </span>  local-scope
+<a name="L178"></a><span id="L178" class="LineNr">178 </span>  load-ingredients
+<a name="L179"></a><span id="L179" class="LineNr">179 </span>  <span class="Normal">q</span>:&amp;:point<span class="Special"> &lt;- </span>copy p
+<a name="L180"></a><span id="L180" class="LineNr">180 </span>  *q<span class="Special"> &lt;- </span>put *q<span class="Delimiter">,</span> <span class="Constant">x:offset</span><span class="Delimiter">,</span> <span class="Constant">34</span>
+<a name="L181"></a><span id="L181" class="LineNr">181 </span>]
+<a name="L182"></a><span id="L182" class="LineNr">182 </span>$error: <span class="Constant">0</span>
+<a name="L183"></a><span id="L183" class="LineNr">183 </span>
+<a name="L184"></a><span id="L184" class="LineNr">184 </span><span class="Delimiter">:(scenario cannot_modify_address_inside_immutable_ingredients)</span>
+<a name="L185"></a><span id="L185" class="LineNr">185 </span><span class="Special">% Hide_errors = true;</span>
+<a name="L186"></a><span id="L186" class="LineNr">186 </span><span class="muData">container</span> foo [
+<a name="L187"></a><span id="L187" class="LineNr">187 </span>  <span class="Normal">x</span>:&amp;:@:num  <span class="Comment"># contains an address</span>
+<a name="L188"></a><span id="L188" class="LineNr">188 </span>]
+<a name="L189"></a><span id="L189" class="LineNr">189 </span><span class="muRecipe">def</span> main [
+<a name="L190"></a><span id="L190" class="LineNr">190 </span>  <span class="Comment"># don't run anything</span>
+<a name="L191"></a><span id="L191" class="LineNr">191 </span>]
+<a name="L192"></a><span id="L192" class="LineNr">192 </span><span class="muRecipe">def</span> foo a:&amp;:foo [
+<a name="L193"></a><span id="L193" class="LineNr">193 </span>  local-scope
+<a name="L194"></a><span id="L194" class="LineNr">194 </span>  load-ingredients
+<a name="L195"></a><span id="L195" class="LineNr">195 </span>  <span class="Normal">x</span>:&amp;:@:num<span class="Special"> &lt;- </span>get *a<span class="Delimiter">,</span> <span class="Constant">x:offset</span>  <span class="Comment"># just a regular get of the container</span>
+<a name="L196"></a><span id="L196" class="LineNr">196 </span>  *x<span class="Special"> &lt;- </span>put-index *x<span class="Delimiter">,</span> <span class="Constant">0</span><span class="Delimiter">,</span> <span class="Constant">34</span>  <span class="Comment"># but then a put-index on the result</span>
+<a name="L197"></a><span id="L197" class="LineNr">197 </span>]
+<a name="L198"></a><span id="L198" class="LineNr">198 </span><span class="traceContains">+error: foo: cannot modify 'x' in instruction '*x &lt;- put-index *x, 0, 34' because that would modify a which is an ingredient of recipe foo but not also a product</span>
+<a name="L199"></a><span id="L199" class="LineNr">199 </span>
+<a name="L200"></a><span id="L200" class="LineNr">200 </span><span class="Delimiter">:(scenario cannot_modify_address_inside_immutable_ingredients_2)</span>
+<a name="L201"></a><span id="L201" class="LineNr">201 </span><span class="muData">container</span> foo [
+<a name="L202"></a><span id="L202" class="LineNr">202 </span>  <span class="Normal">x</span>:&amp;:@:num  <span class="Comment"># contains an address</span>
+<a name="L203"></a><span id="L203" class="LineNr">203 </span>]
+<a name="L204"></a><span id="L204" class="LineNr">204 </span><span class="muRecipe">def</span> main [
+<a name="L205"></a><span id="L205" class="LineNr">205 </span>  <span class="Comment"># don't run anything</span>
+<a name="L206"></a><span id="L206" class="LineNr">206 </span>]
+<a name="L207"></a><span id="L207" class="LineNr">207 </span><span class="muRecipe">def</span> foo a:&amp;:foo [
+<a name="L208"></a><span id="L208" class="LineNr">208 </span>  local-scope
+<a name="L209"></a><span id="L209" class="LineNr">209 </span>  load-ingredients
+<a name="L210"></a><span id="L210" class="LineNr">210 </span>  <span class="Normal">b</span>:foo<span class="Special"> &lt;- </span>merge <span class="Constant">0</span>
+<a name="L211"></a><span id="L211" class="LineNr">211 </span>  <span class="Comment"># modify b, completely unrelated to immutable ingredient a</span>
+<a name="L212"></a><span id="L212" class="LineNr">212 </span>  <span class="Normal">x</span>:&amp;:@:num<span class="Special"> &lt;- </span>get b<span class="Delimiter">,</span> <span class="Constant">x:offset</span>
+<a name="L213"></a><span id="L213" class="LineNr">213 </span>  *x<span class="Special"> &lt;- </span>put-index *x<span class="Delimiter">,</span> <span class="Constant">0</span><span class="Delimiter">,</span> <span class="Constant">34</span>
+<a name="L214"></a><span id="L214" class="LineNr">214 </span>]
+<a name="L215"></a><span id="L215" class="LineNr">215 </span>$error: <span class="Constant">0</span>
+<a name="L216"></a><span id="L216" class="LineNr">216 </span>
+<a name="L217"></a><span id="L217" class="LineNr">217 </span><span class="Delimiter">:(scenario cannot_modify_address_inside_immutable_ingredients_3)</span>
+<a name="L218"></a><span id="L218" class="LineNr">218 </span><span class="Special">% Hide_errors = true;</span>
+<a name="L219"></a><span id="L219" class="LineNr">219 </span><span class="muRecipe">def</span> main [
+<a name="L220"></a><span id="L220" class="LineNr">220 </span>  <span class="Comment"># don't run anything</span>
+<a name="L221"></a><span id="L221" class="LineNr">221 </span>]
+<a name="L222"></a><span id="L222" class="LineNr">222 </span><span class="muRecipe">def</span> foo a:&amp;:@:&amp;:num [
+<a name="L223"></a><span id="L223" class="LineNr">223 </span>  local-scope
+<a name="L224"></a><span id="L224" class="LineNr">224 </span>  load-ingredients
+<a name="L225"></a><span id="L225" class="LineNr">225 </span>  <span class="Normal">x</span>:&amp;:num<span class="Special"> &lt;- </span>index *a<span class="Delimiter">,</span> <span class="Constant">0</span>  <span class="Comment"># just a regular index of the array</span>
+<a name="L226"></a><span id="L226" class="LineNr">226 </span>  *x<span class="Special"> &lt;- </span>copy <span class="Constant">34</span>  <span class="Comment"># but then modify the result</span>
+<a name="L227"></a><span id="L227" class="LineNr">227 </span>]
+<a name="L228"></a><span id="L228" class="LineNr">228 </span><span class="traceContains">+error: foo: cannot modify 'x' in instruction '*x &lt;- copy 34' because that would modify a which is an ingredient of recipe foo but not also a product</span>
+<a name="L229"></a><span id="L229" class="LineNr">229 </span>
+<a name="L230"></a><span id="L230" class="LineNr">230 </span><span class="Delimiter">:(scenario cannot_modify_address_inside_immutable_ingredients_4)</span>
+<a name="L231"></a><span id="L231" class="LineNr">231 </span><span class="muRecipe">def</span> main [
+<a name="L232"></a><span id="L232" class="LineNr">232 </span>  <span class="Comment"># don't run anything</span>
+<a name="L233"></a><span id="L233" class="LineNr">233 </span>]
+<a name="L234"></a><span id="L234" class="LineNr">234 </span><span class="muRecipe">def</span> foo a:&amp;:@:&amp;:num [
+<a name="L235"></a><span id="L235" class="LineNr">235 </span>  local-scope
+<a name="L236"></a><span id="L236" class="LineNr">236 </span>  load-ingredients
+<a name="L237"></a><span id="L237" class="LineNr">237 </span>  <span class="Normal">b</span>:&amp;:@:&amp;:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Delimiter">{(</span>address number<span class="Delimiter">)</span>: type<span class="Delimiter">},</span> <span class="Constant">3</span>
+<a name="L238"></a><span id="L238" class="LineNr">238 </span>  <span class="Comment"># modify b, completely unrelated to immutable ingredient a</span>
+<a name="L239"></a><span id="L239" class="LineNr">239 </span>  <span class="Normal">x</span>:&amp;:num<span class="Special"> &lt;- </span>index *b<span class="Delimiter">,</span> <span class="Constant">0</span>
+<a name="L240"></a><span id="L240" class="LineNr">240 </span>  *x<span class="Special"> &lt;- </span>copy <span class="Constant">34</span>
+<a name="L241"></a><span id="L241" class="LineNr">241 </span>]
+<a name="L242"></a><span id="L242" class="LineNr">242 </span>$error: <span class="Constant">0</span>
+<a name="L243"></a><span id="L243" class="LineNr">243 </span>
+<a name="L244"></a><span id="L244" class="LineNr">244 </span><span class="Delimiter">:(scenario latter_ingredient_of_index_is_immutable)</span>
+<a name="L245"></a><span id="L245" class="LineNr">245 </span><span class="muRecipe">def</span> main [
+<a name="L246"></a><span id="L246" class="LineNr">246 </span>  <span class="Comment"># don't run anything</span>
+<a name="L247"></a><span id="L247" class="LineNr">247 </span>]
+<a name="L248"></a><span id="L248" class="LineNr">248 </span><span class="muRecipe">def</span> foo a:&amp;:@:&amp;:@:num<span class="Delimiter">,</span> b:num<span class="muRecipe"> -&gt; </span>a:&amp;:@:&amp;:@:num [
+<a name="L249"></a><span id="L249" class="LineNr">249 </span>  local-scope
+<a name="L250"></a><span id="L250" class="LineNr">250 </span>  load-ingredients
+<a name="L251"></a><span id="L251" class="LineNr">251 </span>  <span class="Normal">x</span>:&amp;:@:num<span class="Special"> &lt;- </span>index *a<span class="Delimiter">,</span> b
+<a name="L252"></a><span id="L252" class="LineNr">252 </span>  *x<span class="Special"> &lt;- </span>put-index *x<span class="Delimiter">,</span> <span class="Constant">0</span><span class="Delimiter">,</span> <span class="Constant">34</span>
+<a name="L253"></a><span id="L253" class="LineNr">253 </span>]
+<a name="L254"></a><span id="L254" class="LineNr">254 </span>$error: <span class="Constant">0</span>
+<a name="L255"></a><span id="L255" class="LineNr">255 </span>
+<a name="L256"></a><span id="L256" class="LineNr">256 </span><span class="Delimiter">:(scenario can_traverse_immutable_ingredients)</span>
+<a name="L257"></a><span id="L257" class="LineNr">257 </span><span class="muData">container</span> test-list [
+<a name="L258"></a><span id="L258" class="LineNr">258 </span>  <span class="Normal">next</span>:&amp;:test-list
+<a name="L259"></a><span id="L259" class="LineNr">259 </span>]
+<a name="L260"></a><span id="L260" class="LineNr">260 </span><span class="muRecipe">def</span> main [
+<a name="L261"></a><span id="L261" class="LineNr">261 </span>  local-scope
+<a name="L262"></a><span id="L262" class="LineNr">262 </span>  <span class="Normal">p</span>:&amp;:test-list<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">test-list:type</span>
+<a name="L263"></a><span id="L263" class="LineNr">263 </span>  foo p
+<a name="L264"></a><span id="L264" class="LineNr">264 </span>]
+<a name="L265"></a><span id="L265" class="LineNr">265 </span><span class="muRecipe">def</span> foo p:&amp;:test-list [
+<a name="L266"></a><span id="L266" class="LineNr">266 </span>  local-scope
+<a name="L267"></a><span id="L267" class="LineNr">267 </span>  load-ingredients
+<a name="L268"></a><span id="L268" class="LineNr">268 </span>  <span class="Normal">p2</span>:&amp;:test-list<span class="Special"> &lt;- </span>bar p
+<a name="L269"></a><span id="L269" class="LineNr">269 </span>]
+<a name="L270"></a><span id="L270" class="LineNr">270 </span><span class="muRecipe">def</span> bar x:&amp;:test-list<span class="muRecipe"> -&gt; </span>y:&amp;:test-list [
+<a name="L271"></a><span id="L271" class="LineNr">271 </span>  local-scope
+<a name="L272"></a><span id="L272" class="LineNr">272 </span>  load-ingredients
+<a name="L273"></a><span id="L273" class="LineNr">273 </span>  y<span class="Special"> &lt;- </span>get *x<span class="Delimiter">,</span> <span class="Constant">next:offset</span>
+<a name="L274"></a><span id="L274" class="LineNr">274 </span>]
+<a name="L275"></a><span id="L275" class="LineNr">275 </span>$error: <span class="Constant">0</span>
+<a name="L276"></a><span id="L276" class="LineNr">276 </span>
+<a name="L277"></a><span id="L277" class="LineNr">277 </span><span class="Delimiter">:(scenario treat_optional_ingredients_as_mutable)</span>
+<a name="L278"></a><span id="L278" class="LineNr">278 </span><span class="muRecipe">def</span> main [
+<a name="L279"></a><span id="L279" class="LineNr">279 </span>  <span class="Normal">k</span>:&amp;:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span>
+<a name="L280"></a><span id="L280" class="LineNr">280 </span>  test k
+<a name="L281"></a><span id="L281" class="LineNr">281 </span>]
+<a name="L282"></a><span id="L282" class="LineNr">282 </span><span class="Comment"># recipe taking an immutable address ingredient</span>
+<a name="L283"></a><span id="L283" class="LineNr">283 </span><span class="muRecipe">def</span> test k:&amp;:num [
+<a name="L284"></a><span id="L284" class="LineNr">284 </span>  local-scope
+<a name="L285"></a><span id="L285" class="LineNr">285 </span>  load-ingredients
+<a name="L286"></a><span id="L286" class="LineNr">286 </span>  foo k
+<a name="L287"></a><span id="L287" class="LineNr">287 </span>]
+<a name="L288"></a><span id="L288" class="LineNr">288 </span><span class="Comment"># ..calling a recipe with an optional address ingredient</span>
+<a name="L289"></a><span id="L289" class="LineNr">289 </span><span class="muRecipe">def</span> foo<span class="muRecipe"> -&gt; </span>[
+<a name="L290"></a><span id="L290" class="LineNr">290 </span>  local-scope
+<a name="L291"></a><span id="L291" class="LineNr">291 </span>  load-ingredients
+<a name="L292"></a><span id="L292" class="LineNr">292 </span>  <span class="Normal">k</span>:&amp;:num<span class="Delimiter">,</span> found?:<span class="Normal">bool</span><span class="Special"> &lt;- </span>next-ingredient
+<a name="L293"></a><span id="L293" class="LineNr">293 </span>  <span class="Comment"># we don't further check k for immutability, but assume it's mutable</span>
+<a name="L294"></a><span id="L294" class="LineNr">294 </span>]
+<a name="L295"></a><span id="L295" class="LineNr">295 </span>$error: <span class="Constant">0</span>
+<a name="L296"></a><span id="L296" class="LineNr">296 </span>
+<a name="L297"></a><span id="L297" class="LineNr">297 </span><span class="Delimiter">:(scenario treat_optional_ingredients_as_mutable_2)</span>
+<a name="L298"></a><span id="L298" class="LineNr">298 </span><span class="Special">% Hide_errors = true;</span>
+<a name="L299"></a><span id="L299" class="LineNr">299 </span><span class="muRecipe">def</span> main [
+<a name="L300"></a><span id="L300" class="LineNr">300 </span>  local-scope
+<a name="L301"></a><span id="L301" class="LineNr">301 </span>  <span class="Normal">p</span>:&amp;:point<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">point:type</span>
+<a name="L302"></a><span id="L302" class="LineNr">302 </span>  foo p
+<a name="L303"></a><span id="L303" class="LineNr">303 </span>]
+<a name="L304"></a><span id="L304" class="LineNr">304 </span><span class="muRecipe">def</span> foo p:&amp;:point [
+<a name="L305"></a><span id="L305" class="LineNr">305 </span>  local-scope
+<a name="L306"></a><span id="L306" class="LineNr">306 </span>  load-ingredients
+<a name="L307"></a><span id="L307" class="LineNr">307 </span>  bar p
+<a name="L308"></a><span id="L308" class="LineNr">308 </span>]
+<a name="L309"></a><span id="L309" class="LineNr">309 </span><span class="muRecipe">def</span> bar [
+<a name="L310"></a><span id="L310" class="LineNr">310 </span>  local-scope
+<a name="L311"></a><span id="L311" class="LineNr">311 </span>  load-ingredients
+<a name="L312"></a><span id="L312" class="LineNr">312 </span>  <span class="Normal">p</span>:&amp;:point<span class="Special"> &lt;- </span>next-ingredient  <span class="Comment"># optional ingredient; assumed to be mutable</span>
+<a name="L313"></a><span id="L313" class="LineNr">313 </span>]
+<a name="L314"></a><span id="L314" class="LineNr">314 </span><span class="traceContains">+error: foo: cannot modify 'p' in instruction 'bar p' because it's an ingredient of recipe foo but not also a product</span>
+<a name="L315"></a><span id="L315" class="LineNr">315 </span>
+<a name="L316"></a><span id="L316" class="LineNr">316 </span><span class="Comment">//: when checking for immutable ingredients, remember to take space into account</span>
+<a name="L317"></a><span id="L317" class="LineNr">317 </span><span class="Delimiter">:(scenario check_space_of_reagents_in_immutability_checks)</span>
+<a name="L318"></a><span id="L318" class="LineNr">318 </span><span class="muRecipe">def</span> main [
+<a name="L319"></a><span id="L319" class="LineNr">319 </span>  <span class="Normal">a</span>:space<span class="Special"> &lt;- </span><span class="Normal">new</span>-closure
+<a name="L320"></a><span id="L320" class="LineNr">320 </span>  <span class="Normal">b</span>:&amp;:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span>
+<a name="L321"></a><span id="L321" class="LineNr">321 </span>  run-closure b:&amp;:num<span class="Delimiter">,</span> a:space
+<a name="L322"></a><span id="L322" class="LineNr">322 </span>]
+<a name="L323"></a><span id="L323" class="LineNr">323 </span><span class="muRecipe">def</span> <span class="Normal">new</span>-closure [
+<a name="L324"></a><span id="L324" class="LineNr">324 </span>  <span class="Normal">new</span>-<span class="Normal">default</span>-space
+<a name="L325"></a><span id="L325" class="LineNr">325 </span>  <span class="Normal">x</span>:&amp;:num<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">number:type</span>
+<a name="L326"></a><span id="L326" class="LineNr">326 </span>  <span class="Identifier">return</span> <span class="Normal">default</span>-space
+<a name="L327"></a><span id="L327" class="LineNr">327 </span>]
+<a name="L328"></a><span id="L328" class="LineNr">328 </span><span class="muRecipe">def</span> run-closure x:&amp;:num<span class="Delimiter">,</span> s:space [
+<a name="L329"></a><span id="L329" class="LineNr">329 </span>  local-scope
+<a name="L330"></a><span id="L330" class="LineNr">330 </span>  load-ingredients
+<a name="L331"></a><span id="L331" class="LineNr">331 </span>  <span class="Constant">0</span>:space/names:<span class="Normal">new</span>-closure<span class="Special"> &lt;- </span>copy s
+<a name="L332"></a><span id="L332" class="LineNr">332 </span>  <span class="Comment"># different space; always mutable</span>
+<a name="L333"></a><span id="L333" class="LineNr">333 </span>  *x:&amp;:num/space:<span class="Constant">1</span><span class="Special"> &lt;- </span>copy <span class="Constant">34</span>
+<a name="L334"></a><span id="L334" class="LineNr">334 </span>]
+<a name="L335"></a><span id="L335" class="LineNr">335 </span>$error: <span class="Constant">0</span>
+<a name="L336"></a><span id="L336" class="LineNr">336 </span>
+<a name="L337"></a><span id="L337" class="LineNr">337 </span><span class="Delimiter">:(before &quot;End Transforms&quot;)</span>
+<a name="L338"></a><span id="L338" class="LineNr">338 </span>Transform<span class="Delimiter">.</span>push_back<span class="Delimiter">(</span>check_immutable_ingredients<span class="Delimiter">);</span>  <span class="Comment">// idempotent</span>
+<a name="L339"></a><span id="L339" class="LineNr">339 </span>
+<a name="L340"></a><span id="L340" class="LineNr">340 </span><span class="Delimiter">:(code)</span>
+<a name="L341"></a><span id="L341" class="LineNr">341 </span><span class="Normal">void</span> check_immutable_ingredients<span class="Delimiter">(</span><span class="Normal">const</span> recipe_ordinal r<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L342"></a><span id="L342" class="LineNr">342 </span>  <span class="Comment">// to ensure an address reagent isn't modified, it suffices to show that</span>
+<a name="L343"></a><span id="L343" class="LineNr">343 </span>  <span class="Comment">//   a) we never write to its contents directly,</span>
+<a name="L344"></a><span id="L344" class="LineNr">344 </span>  <span class="Comment">//   b) we never call 'put' or 'put-index' on it, and</span>
+<a name="L345"></a><span id="L345" class="LineNr">345 </span>  <span class="Comment">//   c) any non-primitive recipe calls in the body aren't returning it as a product</span>
+<a name="L346"></a><span id="L346" class="LineNr">346 </span>  <span class="Normal">const</span> recipe&amp; caller = get<span class="Delimiter">(</span>Recipe<span class="Delimiter">,</span> r<span class="Delimiter">);</span>
+<a name="L347"></a><span id="L347" class="LineNr">347 </span>  trace<span class="Delimiter">(</span><span class="Constant">9991</span><span class="Delimiter">,</span> <span class="Constant">&quot;transform&quot;</span><span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;--- check mutability of ingredients in recipe &quot;</span> &lt;&lt; caller<span class="Delimiter">.</span>name &lt;&lt; end<span class="Delimiter">();</span>
+<a name="L348"></a><span id="L348" class="LineNr">348 </span>  <span class="Normal">if</span> <span class="Delimiter">(</span>!caller<span class="Delimiter">.</span>has_header<span class="Delimiter">)</span> <span class="Identifier">return</span><span class="Delimiter">;</span>  <span class="Comment">// skip check for old-style recipes calling next-ingredient directly</span>
+<a name="L349"></a><span id="L349" class="LineNr">349 </span>  <span class="Normal">for</span> <span class="Delimiter">(</span><span class="Normal">int</span> i = <span class="Constant">0</span><span class="Delimiter">;</span>  i &lt; SIZE<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>ingredients<span class="Delimiter">);</span>  ++i<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L350"></a><span id="L350" class="LineNr">350 </span>    <span class="Normal">const</span> reagent&amp; current_ingredient = caller<span class="Delimiter">.</span>ingredients<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">);</span>
+<a name="L351"></a><span id="L351" class="LineNr">351 </span>    <span class="Normal">if</span> <span class="Delimiter">(</span>is_present_in_products<span class="Delimiter">(</span>caller<span class="Delimiter">,</span> current_ingredient<span class="Delimiter">.</span>name<span class="Delimiter">))</span> <span class="Identifier">continue</span><span class="Delimiter">;</span>  <span class="Comment">// not expected to be immutable</span>
+<a name="L352"></a><span id="L352" class="LineNr">352 </span>    <span class="Comment">// End Immutable Ingredients Special-cases</span>
+<a name="L353"></a><span id="L353" class="LineNr">353 </span>    set&lt;reagent&gt; immutable_vars<span class="Delimiter">;</span>
+<a name="L354"></a><span id="L354" class="LineNr">354 </span>    immutable_vars<span class="Delimiter">.</span>insert<span class="Delimiter">(</span>current_ingredient<span class="Delimiter">);</span>
+<a name="L355"></a><span id="L355" class="LineNr">355 </span>    <span class="Normal">for</span> <span class="Delimiter">(</span><span class="Normal">int</span> i = <span class="Constant">0</span><span class="Delimiter">;</span>  i &lt; SIZE<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>steps<span class="Delimiter">);</span>  ++i<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L356"></a><span id="L356" class="LineNr">356 </span>      <span class="Normal">const</span> instruction&amp; inst = caller<span class="Delimiter">.</span>steps<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">);</span>
+<a name="L357"></a><span id="L357" class="LineNr">357 </span>      check_immutable_ingredient_in_instruction<span class="Delimiter">(</span>inst<span class="Delimiter">,</span> immutable_vars<span class="Delimiter">,</span> current_ingredient<span class="Delimiter">.</span>name<span class="Delimiter">,</span> caller<span class="Delimiter">);</span>
+<a name="L358"></a><span id="L358" class="LineNr">358 </span>      <span class="Normal">if</span> <span class="Delimiter">(</span>inst<span class="Delimiter">.</span>operation == INDEX &amp;&amp; SIZE<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>ingredients<span class="Delimiter">)</span> &gt; <span class="Constant">1</span> &amp;&amp; inst<span class="Delimiter">.</span>ingredients<span class="Delimiter">.</span>at<span class="Delimiter">(</span><span class="Constant">1</span><span class="Delimiter">).</span>name == current_ingredient<span class="Delimiter">.</span>name<span class="Delimiter">)</span> <span class="Identifier">continue</span><span class="Delimiter">;</span>
+<a name="L359"></a><span id="L359" class="LineNr">359 </span>      update_aliases<span class="Delimiter">(</span>inst<span class="Delimiter">,</span> immutable_vars<span class="Delimiter">);</span>
+<a name="L360"></a><span id="L360" class="LineNr">360 </span>    <span class="Delimiter">}</span>
+<a name="L361"></a><span id="L361" class="LineNr">361 </span>  <span class="Delimiter">}</span>
+<a name="L362"></a><span id="L362" class="LineNr">362 </span><span class="Delimiter">}</span>
+<a name="L363"></a><span id="L363" class="LineNr">363 </span>
+<a name="L364"></a><span id="L364" class="LineNr">364 </span><span class="Normal">void</span> update_aliases<span class="Delimiter">(</span><span class="Normal">const</span> instruction&amp; inst<span class="Delimiter">,</span> set&lt;reagent&gt;&amp; current_ingredient_and_aliases<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L365"></a><span id="L365" class="LineNr">365 </span>  set&lt;<span class="Normal">int</span>&gt; current_ingredient_indices = ingredient_indices<span class="Delimiter">(</span>inst<span class="Delimiter">,</span> current_ingredient_and_aliases<span class="Delimiter">);</span>
+<a name="L366"></a><span id="L366" class="LineNr">366 </span>  <span class="Normal">if</span> <span class="Delimiter">(</span>!contains_key<span class="Delimiter">(</span>Recipe<span class="Delimiter">,</span> inst<span class="Delimiter">.</span>operation<span class="Delimiter">))</span> <span class="Delimiter">{</span>
+<a name="L367"></a><span id="L367" class="LineNr">367 </span>    <span class="Comment">// primitive recipe</span>
+<a name="L368"></a><span id="L368" class="LineNr">368 </span>    <span class="Normal">switch</span> <span class="Delimiter">(</span>inst<span class="Delimiter">.</span>operation<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L369"></a><span id="L369" class="LineNr">369 </span>      <span class="Normal">case</span> COPY:
+<a name="L370"></a><span id="L370" class="LineNr">370 </span>        <span class="Normal">for</span> <span class="Delimiter">(</span>set&lt;<span class="Normal">int</span>&gt;::iterator p = current_ingredient_indices<span class="Delimiter">.</span>begin<span class="Delimiter">();</span>  p != current_ingredient_indices<span class="Delimiter">.</span>end<span class="Delimiter">();</span>  ++p<span class="Delimiter">)</span>
+<a name="L371"></a><span id="L371" class="LineNr">371 </span>          current_ingredient_and_aliases<span class="Delimiter">.</span>insert<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span>*p<span class="Delimiter">).</span>name<span class="Delimiter">);</span>
+<a name="L372"></a><span id="L372" class="LineNr">372 </span>        <span class="Identifier">break</span><span class="Delimiter">;</span>
+<a name="L373"></a><span id="L373" class="LineNr">373 </span>      <span class="Normal">case</span> GET:
+<a name="L374"></a><span id="L374" class="LineNr">374 </span>      <span class="Normal">case</span> INDEX:
+<a name="L375"></a><span id="L375" class="LineNr">375 </span>      <span class="Normal">case</span> MAYBE_CONVERT:
+<a name="L376"></a><span id="L376" class="LineNr">376 </span>        <span class="Comment">// current_ingredient_indices can only have 0 or one value</span>
+<a name="L377"></a><span id="L377" class="LineNr">377 </span>        <span class="Normal">if</span> <span class="Delimiter">(</span>!current_ingredient_indices<span class="Delimiter">.</span>empty<span class="Delimiter">()</span> &amp;&amp; !inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>empty<span class="Delimiter">())</span> <span class="Delimiter">{</span>
+<a name="L378"></a><span id="L378" class="LineNr">378 </span>          <span class="Normal">if</span> <span class="Delimiter">(</span>is_mu_address<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span><span class="Constant">0</span><span class="Delimiter">))</span> || is_mu_container<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span><span class="Constant">0</span><span class="Delimiter">))</span> || is_mu_exclusive_container<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span><span class="Constant">0</span><span class="Delimiter">)))</span>
+<a name="L379"></a><span id="L379" class="LineNr">379 </span>            current_ingredient_and_aliases<span class="Delimiter">.</span>insert<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span><span class="Constant">0</span><span class="Delimiter">));</span>
+<a name="L380"></a><span id="L380" class="LineNr">380 </span>        <span class="Delimiter">}</span>
+<a name="L381"></a><span id="L381" class="LineNr">381 </span>        <span class="Identifier">break</span><span class="Delimiter">;</span>
+<a name="L382"></a><span id="L382" class="LineNr">382 </span>      <span class="Normal">default</span>: <span class="Identifier">break</span><span class="Delimiter">;</span>
+<a name="L383"></a><span id="L383" class="LineNr">383 </span>    <span class="Delimiter">}</span>
+<a name="L384"></a><span id="L384" class="LineNr">384 </span>  <span class="Delimiter">}</span>
+<a name="L385"></a><span id="L385" class="LineNr">385 </span>  <span class="Normal">else</span> <span class="Delimiter">{</span>
+<a name="L386"></a><span id="L386" class="LineNr">386 </span>    <span class="Comment">// defined recipe</span>
+<a name="L387"></a><span id="L387" class="LineNr">387 </span>    set&lt;<span class="Normal">int</span>&gt; contained_in_product_indices = scan_contained_in_product_indices<span class="Delimiter">(</span>inst<span class="Delimiter">,</span> current_ingredient_indices<span class="Delimiter">);</span>
+<a name="L388"></a><span id="L388" class="LineNr">388 </span>    <span class="Normal">for</span> <span class="Delimiter">(</span>set&lt;<span class="Normal">int</span>&gt;::iterator p = contained_in_product_indices<span class="Delimiter">.</span>begin<span class="Delimiter">();</span>  p != contained_in_product_indices<span class="Delimiter">.</span>end<span class="Delimiter">();</span>  ++p<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L389"></a><span id="L389" class="LineNr">389 </span>      <span class="Normal">if</span> <span class="Delimiter">(</span>*p &lt; SIZE<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">))</span>
+<a name="L390"></a><span id="L390" class="LineNr">390 </span>        current_ingredient_and_aliases<span class="Delimiter">.</span>insert<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span>*p<span class="Delimiter">));</span>
+<a name="L391"></a><span id="L391" class="LineNr">391 </span>    <span class="Delimiter">}</span>
+<a name="L392"></a><span id="L392" class="LineNr">392 </span>  <span class="Delimiter">}</span>
+<a name="L393"></a><span id="L393" class="LineNr">393 </span><span class="Delimiter">}</span>
+<a name="L394"></a><span id="L394" class="LineNr">394 </span>
+<a name="L395"></a><span id="L395" class="LineNr">395 </span>set&lt;<span class="Normal">int</span>&gt; scan_contained_in_product_indices<span class="Delimiter">(</span><span class="Normal">const</span> instruction&amp; inst<span class="Delimiter">,</span> set&lt;<span class="Normal">int</span>&gt;&amp; ingredient_indices<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L396"></a><span id="L396" class="LineNr">396 </span>  set&lt;reagent&gt; selected_ingredients<span class="Delimiter">;</span>
+<a name="L397"></a><span id="L397" class="LineNr">397 </span>  <span class="Normal">const</span> recipe&amp; callee = get<span class="Delimiter">(</span>Recipe<span class="Delimiter">,</span> inst<span class="Delimiter">.</span>operation<span class="Delimiter">);</span>
+<a name="L398"></a><span id="L398" class="LineNr">398 </span>  <span class="Normal">for</span> <span class="Delimiter">(</span>set&lt;<span class="Normal">int</span>&gt;::iterator p = ingredient_indices<span class="Delimiter">.</span>begin<span class="Delimiter">();</span>  p != ingredient_indices<span class="Delimiter">.</span>end<span class="Delimiter">();</span>  ++p<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L399"></a><span id="L399" class="LineNr">399 </span>    <span class="Normal">if</span> <span class="Delimiter">(</span>*p &gt;= SIZE<span class="Delimiter">(</span>callee<span class="Delimiter">.</span>ingredients<span class="Delimiter">))</span> <span class="Identifier">continue</span><span class="Delimiter">;</span>  <span class="Comment">// optional immutable ingredient</span>
+<a name="L400"></a><span id="L400" class="LineNr">400 </span>    selected_ingredients<span class="Delimiter">.</span>insert<span class="Delimiter">(</span>callee<span class="Delimiter">.</span>ingredients<span class="Delimiter">.</span>at<span class="Delimiter">(</span>*p<span class="Delimiter">));</span>
+<a name="L401"></a><span id="L401" class="LineNr">401 </span>  <span class="Delimiter">}</span>
+<a name="L402"></a><span id="L402" class="LineNr">402 </span>  set&lt;<span class="Normal">int</span>&gt; result<span class="Delimiter">;</span>
+<a name="L403"></a><span id="L403" class="LineNr">403 </span>  <span class="Normal">for</span> <span class="Delimiter">(</span><span class="Normal">int</span> i = <span class="Constant">0</span><span class="Delimiter">;</span>  i &lt; SIZE<span class="Delimiter">(</span>callee<span class="Delimiter">.</span>products<span class="Delimiter">);</span>  ++i<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L404"></a><span id="L404" class="LineNr">404 </span>    <span class="Normal">const</span> reagent&amp; current_product = callee<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">);</span>
+<a name="L405"></a><span id="L405" class="LineNr">405 </span>    <span class="Normal">const</span> string_tree* contained_in_name = property<span class="Delimiter">(</span>current_product<span class="Delimiter">,</span> <span class="Constant">&quot;contained-in&quot;</span><span class="Delimiter">);</span>
+<a name="L406"></a><span id="L406" class="LineNr">406 </span>    <span class="Normal">if</span> <span class="Delimiter">(</span>contained_in_name &amp;&amp; selected_ingredients<span class="Delimiter">.</span>find<span class="Delimiter">(</span>contained_in_name<span class="Delimiter">-&gt;</span>value<span class="Delimiter">)</span> != selected_ingredients<span class="Delimiter">.</span>end<span class="Delimiter">())</span>
+<a name="L407"></a><span id="L407" class="LineNr">407 </span>      result<span class="Delimiter">.</span>insert<span class="Delimiter">(</span>i<span class="Delimiter">);</span>
+<a name="L408"></a><span id="L408" class="LineNr">408 </span>  <span class="Delimiter">}</span>
+<a name="L409"></a><span id="L409" class="LineNr">409 </span>  <span class="Identifier">return</span> result<span class="Delimiter">;</span>
+<a name="L410"></a><span id="L410" class="LineNr">410 </span><span class="Delimiter">}</span>
+<a name="L411"></a><span id="L411" class="LineNr">411 </span>
+<a name="L412"></a><span id="L412" class="LineNr">412 </span><span class="Delimiter">:(scenarios transform)</span>
+<a name="L413"></a><span id="L413" class="LineNr">413 </span><span class="Delimiter">:(scenario immutability_infects_contained_in_variables)</span>
+<a name="L414"></a><span id="L414" class="LineNr">414 </span><span class="Special">% Hide_errors = true;</span>
+<a name="L415"></a><span id="L415" class="LineNr">415 </span><span class="muData">container</span> test-list [
+<a name="L416"></a><span id="L416" class="LineNr">416 </span>  <span class="Normal">value</span>:num
+<a name="L417"></a><span id="L417" class="LineNr">417 </span>  <span class="Normal">next</span>:&amp;:test-list
+<a name="L418"></a><span id="L418" class="LineNr">418 </span>]
+<a name="L419"></a><span id="L419" class="LineNr">419 </span><span class="muRecipe">def</span> main [
+<a name="L420"></a><span id="L420" class="LineNr">420 </span>  local-scope
+<a name="L421"></a><span id="L421" class="LineNr">421 </span>  <span class="Normal">p</span>:&amp;:test-list<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">test-list:type</span>
+<a name="L422"></a><span id="L422" class="LineNr">422 </span>  foo p
+<a name="L423"></a><span id="L423" class="LineNr">423 </span>]
+<a name="L424"></a><span id="L424" class="LineNr">424 </span><span class="muRecipe">def</span> foo p:&amp;:test-list [  <span class="Comment"># p is immutable</span>
+<a name="L425"></a><span id="L425" class="LineNr">425 </span>  local-scope
+<a name="L426"></a><span id="L426" class="LineNr">426 </span>  load-ingredients
+<a name="L427"></a><span id="L427" class="LineNr">427 </span>  <span class="Normal">p2</span>:&amp;:test-list<span class="Special"> &lt;- </span>test-next p  <span class="Comment"># p2 is immutable</span>
+<a name="L428"></a><span id="L428" class="LineNr">428 </span>  *p2<span class="Special"> &lt;- </span>put *p2<span class="Delimiter">,</span> <span class="Constant">value:offset</span><span class="Delimiter">,</span> <span class="Constant">34</span>
+<a name="L429"></a><span id="L429" class="LineNr">429 </span>]
+<a name="L430"></a><span id="L430" class="LineNr">430 </span><span class="muRecipe">def</span> test-next x:&amp;:test-list<span class="muRecipe"> -&gt; </span>y:&amp;:test-list/contained-in:x [
+<a name="L431"></a><span id="L431" class="LineNr">431 </span>  local-scope
+<a name="L432"></a><span id="L432" class="LineNr">432 </span>  load-ingredients
+<a name="L433"></a><span id="L433" class="LineNr">433 </span>  y<span class="Special"> &lt;- </span>get *x<span class="Delimiter">,</span> <span class="Constant">next:offset</span>
+<a name="L434"></a><span id="L434" class="LineNr">434 </span>]
+<a name="L435"></a><span id="L435" class="LineNr">435 </span><span class="traceContains">+error: foo: cannot modify 'p2' in instruction '*p2 &lt;- put *p2, value:offset, 34' because that would modify p which is an ingredient of recipe foo but not also a product</span>
+<a name="L436"></a><span id="L436" class="LineNr">436 </span>
+<a name="L437"></a><span id="L437" class="LineNr">437 </span><span class="Delimiter">:(code)</span>
+<a name="L438"></a><span id="L438" class="LineNr">438 </span><span class="Normal">void</span> check_immutable_ingredient_in_instruction<span class="Delimiter">(</span><span class="Normal">const</span> instruction&amp; inst<span class="Delimiter">,</span> <span class="Normal">const</span> set&lt;reagent&gt;&amp; current_ingredient_and_aliases<span class="Delimiter">,</span> <span class="Normal">const</span> string&amp; original_ingredient_name<span class="Delimiter">,</span> <span class="Normal">const</span> recipe&amp; caller<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L439"></a><span id="L439" class="LineNr">439 </span>  <span class="Comment">// first check if the instruction is directly modifying something it shouldn't</span>
+<a name="L440"></a><span id="L440" class="LineNr">440 </span>  <span class="Normal">for</span> <span class="Delimiter">(</span><span class="Normal">int</span> i = <span class="Constant">0</span><span class="Delimiter">;</span>  i &lt; SIZE<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">);</span>  ++i<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L441"></a><span id="L441" class="LineNr">441 </span>    <span class="Normal">if</span> <span class="Delimiter">(</span>has_property<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">),</span> <span class="Constant">&quot;lookup&quot;</span><span class="Delimiter">)</span>
+<a name="L442"></a><span id="L442" class="LineNr">442 </span>        &amp;&amp; current_ingredient_and_aliases<span class="Delimiter">.</span>find<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">))</span> != current_ingredient_and_aliases<span class="Delimiter">.</span>end<span class="Delimiter">())</span> <span class="Delimiter">{</span>
+<a name="L443"></a><span id="L443" class="LineNr">443 </span>      string current_product_name = inst<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">).</span>name<span class="Delimiter">;</span>
+<a name="L444"></a><span id="L444" class="LineNr">444 </span>      <span class="Normal">if</span> <span class="Delimiter">(</span>current_product_name == original_ingredient_name<span class="Delimiter">)</span>
+<a name="L445"></a><span id="L445" class="LineNr">445 </span>        raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;cannot modify '&quot;</span> &lt;&lt; current_product_name &lt;&lt; <span class="Constant">&quot;' in instruction '&quot;</span> &lt;&lt; inst<span class="Delimiter">.</span>original_string &lt;&lt; <span class="Constant">&quot;' because it's an ingredient of recipe &quot;</span> &lt;&lt; caller<span class="Delimiter">.</span>name &lt;&lt; <span class="Constant">&quot; but not also a product</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
+<a name="L446"></a><span id="L446" class="LineNr">446 </span>      <span class="Normal">else</span>
+<a name="L447"></a><span id="L447" class="LineNr">447 </span>        raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;cannot modify '&quot;</span> &lt;&lt; current_product_name &lt;&lt; <span class="Constant">&quot;' in instruction '&quot;</span> &lt;&lt; inst<span class="Delimiter">.</span>original_string &lt;&lt; <span class="Constant">&quot;' because that would modify &quot;</span> &lt;&lt; original_ingredient_name &lt;&lt; <span class="Constant">&quot; which is an ingredient of recipe &quot;</span> &lt;&lt; caller<span class="Delimiter">.</span>name &lt;&lt; <span class="Constant">&quot; but not also a product</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
+<a name="L448"></a><span id="L448" class="LineNr">448 </span>      <span class="Identifier">return</span><span class="Delimiter">;</span>
+<a name="L449"></a><span id="L449" class="LineNr">449 </span>    <span class="Delimiter">}</span>
+<a name="L450"></a><span id="L450" class="LineNr">450 </span>  <span class="Delimiter">}</span>
+<a name="L451"></a><span id="L451" class="LineNr">451 </span>  <span class="Comment">// check if there's any indirect modification going on</span>
+<a name="L452"></a><span id="L452" class="LineNr">452 </span>  set&lt;<span class="Normal">int</span>&gt; current_ingredient_indices = ingredient_indices<span class="Delimiter">(</span>inst<span class="Delimiter">,</span> current_ingredient_and_aliases<span class="Delimiter">);</span>
+<a name="L453"></a><span id="L453" class="LineNr">453 </span>  <span class="Normal">if</span> <span class="Delimiter">(</span>current_ingredient_indices<span class="Delimiter">.</span>empty<span class="Delimiter">())</span> <span class="Identifier">return</span><span class="Delimiter">;</span>  <span class="Comment">// ingredient not found in call</span>
+<a name="L454"></a><span id="L454" class="LineNr">454 </span>  <span class="Normal">for</span> <span class="Delimiter">(</span>set&lt;<span class="Normal">int</span>&gt;::iterator p = current_ingredient_indices<span class="Delimiter">.</span>begin<span class="Delimiter">();</span>  p != current_ingredient_indices<span class="Delimiter">.</span>end<span class="Delimiter">();</span>  ++p<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L455"></a><span id="L455" class="LineNr">455 </span>    <span class="Normal">const</span> <span class="Normal">int</span> current_ingredient_index = *p<span class="Delimiter">;</span>
+<a name="L456"></a><span id="L456" class="LineNr">456 </span>    reagent current_ingredient = inst<span class="Delimiter">.</span>ingredients<span class="Delimiter">.</span>at<span class="Delimiter">(</span>current_ingredient_index<span class="Delimiter">);</span>
+<a name="L457"></a><span id="L457" class="LineNr">457 </span>    canonize_type<span class="Delimiter">(</span>current_ingredient<span class="Delimiter">);</span>
+<a name="L458"></a><span id="L458" class="LineNr">458 </span>    <span class="Normal">const</span> string&amp; current_ingredient_name = current_ingredient<span class="Delimiter">.</span>name<span class="Delimiter">;</span>
+<a name="L459"></a><span id="L459" class="LineNr">459 </span>    <span class="Normal">if</span> <span class="Delimiter">(</span>!contains_key<span class="Delimiter">(</span>Recipe<span class="Delimiter">,</span> inst<span class="Delimiter">.</span>operation<span class="Delimiter">))</span> <span class="Delimiter">{</span>
+<a name="L460"></a><span id="L460" class="LineNr">460 </span>      <span class="Comment">// primitive recipe</span>
+<a name="L461"></a><span id="L461" class="LineNr">461 </span>      <span class="Comment">// we got here only because we got an instruction with an implicit product, and the instruction didn't explicitly spell it out</span>
+<a name="L462"></a><span id="L462" class="LineNr">462 </span>      <span class="Comment">//    put x, y:offset, z</span>
+<a name="L463"></a><span id="L463" class="LineNr">463 </span>      <span class="Comment">// instead of</span>
+<a name="L464"></a><span id="L464" class="LineNr">464 </span>      <span class="Comment">//    x &lt;- put x, y:offset, z</span>
+<a name="L465"></a><span id="L465" class="LineNr">465 </span>      <span class="Normal">if</span> <span class="Delimiter">(</span>inst<span class="Delimiter">.</span>operation == PUT || inst<span class="Delimiter">.</span>operation == PUT_INDEX<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L466"></a><span id="L466" class="LineNr">466 </span>        <span class="Normal">if</span> <span class="Delimiter">(</span>current_ingredient_index == <span class="Constant">0</span><span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L467"></a><span id="L467" class="LineNr">467 </span>          <span class="Normal">if</span> <span class="Delimiter">(</span>current_ingredient_name == original_ingredient_name<span class="Delimiter">)</span>
+<a name="L468"></a><span id="L468" class="LineNr">468 </span>            raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;cannot modify '&quot;</span> &lt;&lt; current_ingredient_name &lt;&lt; <span class="Constant">&quot;' in instruction '&quot;</span> &lt;&lt; inst<span class="Delimiter">.</span>original_string &lt;&lt; <span class="Constant">&quot;' because it's an ingredient of recipe &quot;</span> &lt;&lt; caller<span class="Delimiter">.</span>name &lt;&lt; <span class="Constant">&quot; but not also a product</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
+<a name="L469"></a><span id="L469" class="LineNr">469 </span>          <span class="Normal">else</span>
+<a name="L470"></a><span id="L470" class="LineNr">470 </span>            raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;cannot modify '&quot;</span> &lt;&lt; current_ingredient_name &lt;&lt; <span class="Constant">&quot;' in instruction '&quot;</span> &lt;&lt; inst<span class="Delimiter">.</span>original_string &lt;&lt; <span class="Constant">&quot;' because that would modify '&quot;</span> &lt;&lt; original_ingredient_name &lt;&lt; <span class="Constant">&quot;' which is an ingredient of recipe &quot;</span> &lt;&lt; caller<span class="Delimiter">.</span>name &lt;&lt; <span class="Constant">&quot; but not also a product</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
+<a name="L471"></a><span id="L471" class="LineNr">471 </span>        <span class="Delimiter">}</span>
+<a name="L472"></a><span id="L472" class="LineNr">472 </span>      <span class="Delimiter">}</span>
+<a name="L473"></a><span id="L473" class="LineNr">473 </span>    <span class="Delimiter">}</span>
+<a name="L474"></a><span id="L474" class="LineNr">474 </span>    <span class="Normal">else</span> <span class="Delimiter">{</span>
+<a name="L475"></a><span id="L475" class="LineNr">475 </span>      <span class="Comment">// defined recipe</span>
+<a name="L476"></a><span id="L476" class="LineNr">476 </span>      <span class="Normal">if</span> <span class="Delimiter">(</span>is_modified_in_recipe<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>operation<span class="Delimiter">,</span> current_ingredient_index<span class="Delimiter">,</span> caller<span class="Delimiter">))</span> <span class="Delimiter">{</span>
+<a name="L477"></a><span id="L477" class="LineNr">477 </span>        <span class="Normal">if</span> <span class="Delimiter">(</span>current_ingredient_name == original_ingredient_name<span class="Delimiter">)</span>
+<a name="L478"></a><span id="L478" class="LineNr">478 </span>          raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;cannot modify '&quot;</span> &lt;&lt; current_ingredient_name &lt;&lt; <span class="Constant">&quot;' in instruction '&quot;</span> &lt;&lt; inst<span class="Delimiter">.</span>original_string &lt;&lt; <span class="Constant">&quot;' because it's an ingredient of recipe &quot;</span> &lt;&lt; caller<span class="Delimiter">.</span>name &lt;&lt; <span class="Constant">&quot; but not also a product</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
+<a name="L479"></a><span id="L479" class="LineNr">479 </span>        <span class="Normal">else</span>
+<a name="L480"></a><span id="L480" class="LineNr">480 </span>          raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;cannot modify '&quot;</span> &lt;&lt; current_ingredient_name &lt;&lt; <span class="Constant">&quot;' in instruction '&quot;</span> &lt;&lt; inst<span class="Delimiter">.</span>original_string &lt;&lt; <span class="Constant">&quot;' because that would modify '&quot;</span> &lt;&lt; original_ingredient_name &lt;&lt; <span class="Constant">&quot;' which is an ingredient of recipe &quot;</span> &lt;&lt; caller<span class="Delimiter">.</span>name &lt;&lt; <span class="Constant">&quot; but not also a product</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
+<a name="L481"></a><span id="L481" class="LineNr">481 </span>      <span class="Delimiter">}</span>
+<a name="L482"></a><span id="L482" class="LineNr">482 </span>    <span class="Delimiter">}</span>
+<a name="L483"></a><span id="L483" class="LineNr">483 </span>  <span class="Delimiter">}</span>
+<a name="L484"></a><span id="L484" class="LineNr">484 </span><span class="Delimiter">}</span>
+<a name="L485"></a><span id="L485" class="LineNr">485 </span>
+<a name="L486"></a><span id="L486" class="LineNr">486 </span><span class="Normal">bool</span> is_modified_in_recipe<span class="Delimiter">(</span><span class="Normal">const</span> recipe_ordinal r<span class="Delimiter">,</span> <span class="Normal">const</span> <span class="Normal">int</span> ingredient_index<span class="Delimiter">,</span> <span class="Normal">const</span> recipe&amp; caller<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L487"></a><span id="L487" class="LineNr">487 </span>  <span class="Normal">const</span> recipe&amp; callee = get<span class="Delimiter">(</span>Recipe<span class="Delimiter">,</span> r<span class="Delimiter">);</span>
+<a name="L488"></a><span id="L488" class="LineNr">488 </span>  <span class="Normal">if</span> <span class="Delimiter">(</span>!callee<span class="Delimiter">.</span>has_header<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L489"></a><span id="L489" class="LineNr">489 </span>    raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;can't check mutability of ingredients in recipe &quot;</span> &lt;&lt; callee<span class="Delimiter">.</span>name &lt;&lt; <span class="Constant">&quot; because it uses 'next-ingredient' directly, rather than a recipe header.</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
+<a name="L490"></a><span id="L490" class="LineNr">490 </span>    <span class="Identifier">return</span> <span class="Constant">true</span><span class="Delimiter">;</span>
+<a name="L491"></a><span id="L491" class="LineNr">491 </span>  <span class="Delimiter">}</span>
+<a name="L492"></a><span id="L492" class="LineNr">492 </span>  <span class="Normal">if</span> <span class="Delimiter">(</span>ingredient_index &gt;= SIZE<span class="Delimiter">(</span>callee<span class="Delimiter">.</span>ingredients<span class="Delimiter">))</span> <span class="Identifier">return</span> <span class="Constant">false</span><span class="Delimiter">;</span>  <span class="Comment">// optional immutable ingredient</span>
+<a name="L493"></a><span id="L493" class="LineNr">493 </span>  <span class="Identifier">return</span> is_present_in_products<span class="Delimiter">(</span>callee<span class="Delimiter">,</span> callee<span class="Delimiter">.</span>ingredients<span class="Delimiter">.</span>at<span class="Delimiter">(</span>ingredient_index<span class="Delimiter">).</span>name<span class="Delimiter">);</span>
+<a name="L494"></a><span id="L494" class="LineNr">494 </span><span class="Delimiter">}</span>
+<a name="L495"></a><span id="L495" class="LineNr">495 </span>
+<a name="L496"></a><span id="L496" class="LineNr">496 </span><span class="Normal">bool</span> is_present_in_products<span class="Delimiter">(</span><span class="Normal">const</span> recipe&amp; callee<span class="Delimiter">,</span> <span class="Normal">const</span> string&amp; ingredient_name<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L497"></a><span id="L497" class="LineNr">497 </span>  <span class="Normal">for</span> <span class="Delimiter">(</span><span class="Normal">int</span> i = <span class="Constant">0</span><span class="Delimiter">;</span>  i &lt; SIZE<span class="Delimiter">(</span>callee<span class="Delimiter">.</span>products<span class="Delimiter">);</span>  ++i<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L498"></a><span id="L498" class="LineNr">498 </span>    <span class="Normal">if</span> <span class="Delimiter">(</span>callee<span class="Delimiter">.</span>products<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">).</span>name == ingredient_name<span class="Delimiter">)</span>
+<a name="L499"></a><span id="L499" class="LineNr">499 </span>      <span class="Identifier">return</span> <span class="Constant">true</span><span class="Delimiter">;</span>
+<a name="L500"></a><span id="L500" class="LineNr">500 </span>  <span class="Delimiter">}</span>
+<a name="L501"></a><span id="L501" class="LineNr">501 </span>  <span class="Identifier">return</span> <span class="Constant">false</span><span class="Delimiter">;</span>
+<a name="L502"></a><span id="L502" class="LineNr">502 </span><span class="Delimiter">}</span>
+<a name="L503"></a><span id="L503" class="LineNr">503 </span>
+<a name="L504"></a><span id="L504" class="LineNr">504 </span>set&lt;<span class="Normal">int</span>&gt; ingredient_indices<span class="Delimiter">(</span><span class="Normal">const</span> instruction&amp; inst<span class="Delimiter">,</span> <span class="Normal">const</span> set&lt;reagent&gt;&amp; ingredient_names<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L505"></a><span id="L505" class="LineNr">505 </span>  set&lt;<span class="Normal">int</span>&gt; result<span class="Delimiter">;</span>
+<a name="L506"></a><span id="L506" class="LineNr">506 </span>  <span class="Normal">for</span> <span class="Delimiter">(</span><span class="Normal">int</span> i = <span class="Constant">0</span><span class="Delimiter">;</span>  i &lt; SIZE<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>ingredients<span class="Delimiter">);</span>  ++i<span class="Delimiter">)</span> <span class="Delimiter">{</span>
+<a name="L507"></a><span id="L507" class="LineNr">507 </span>    <span class="Normal">if</span> <span class="Delimiter">(</span>is_literal<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>ingredients<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">)))</span> <span class="Identifier">continue</span><span class="Delimiter">;</span>
+<a name="L508"></a><span id="L508" class="LineNr">508 </span>    <span class="Normal">if</span> <span class="Delimiter">(</span>ingredient_names<span class="Delimiter">.</span>find<span class="Delimiter">(</span>inst<span class="Delimiter">.</span>ingredients<span class="Delimiter">.</span>at<span class="Delimiter">(</span>i<span class="Delimiter">))</span> != ingredient_names<span class="Delimiter">.</span>end<span class="Delimiter">())</span>
+<a name="L509"></a><span id="L509" class="LineNr">509 </span>      result<span class="Delimiter">.</span>insert<span class="Delimiter">(</span>i<span class="Delimiter">);</span>
+<a name="L510"></a><span id="L510" class="LineNr">510 </span>  <span class="Delimiter">}</span>
+<a name="L511"></a><span id="L511" class="LineNr">511 </span>  <span class="Identifier">return</span> result<span class="Delimiter">;</span>
+<a name="L512"></a><span id="L512" class="LineNr">512 </span><span class="Delimiter">}</span>
+<a name="L513"></a><span id="L513" class="LineNr">513 </span>
+<a name="L514"></a><span id="L514" class="LineNr">514 </span><span class="Comment">//: Sometimes you want to pass in two addresses, one pointing inside the</span>
+<a name="L515"></a><span id="L515" class="LineNr">515 </span><span class="Comment">//: other. For example, you want to delete a node from a linked list. You</span>
+<a name="L516"></a><span id="L516" class="LineNr">516 </span><span class="Comment">//: can't pass both pointers back out, because if a caller tries to make both</span>
+<a name="L517"></a><span id="L517" class="LineNr">517 </span><span class="Comment">//: identical then you can't tell which value will be written on the way out.</span>
+<a name="L518"></a><span id="L518" class="LineNr">518 </span><span class="Comment">//:</span>
+<a name="L519"></a><span id="L519" class="LineNr">519 </span><span class="Comment">//: Experimental solution: just tell Mu that one points inside the other.</span>
+<a name="L520"></a><span id="L520" class="LineNr">520 </span><span class="Comment">//: This way we can return just one pointer as high up as necessary to capture</span>
+<a name="L521"></a><span id="L521" class="LineNr">521 </span><span class="Comment">//: all modifications performed by a recipe.</span>
+<a name="L522"></a><span id="L522" class="LineNr">522 </span><span class="Comment">//:</span>
+<a name="L523"></a><span id="L523" class="LineNr">523 </span><span class="Comment">//: We'll see if we end up wanting to abuse /contained-in for other reasons.</span>
+<a name="L524"></a><span id="L524" class="LineNr">524 </span>
+<a name="L525"></a><span id="L525" class="LineNr">525 </span><span class="Delimiter">:(scenarios transform)</span>
+<a name="L526"></a><span id="L526" class="LineNr">526 </span><span class="Delimiter">:(scenario can_modify_contained_in_addresses)</span>
+<a name="L527"></a><span id="L527" class="LineNr">527 </span><span class="muData">container</span> test-list [
+<a name="L528"></a><span id="L528" class="LineNr">528 </span>  <span class="Normal">value</span>:num
+<a name="L529"></a><span id="L529" class="LineNr">529 </span>  <span class="Normal">next</span>:&amp;:test-list
+<a name="L530"></a><span id="L530" class="LineNr">530 </span>]
+<a name="L531"></a><span id="L531" class="LineNr">531 </span><span class="muRecipe">def</span> main [
+<a name="L532"></a><span id="L532" class="LineNr">532 </span>  local-scope
+<a name="L533"></a><span id="L533" class="LineNr">533 </span>  <span class="Normal">p</span>:&amp;:test-list<span class="Special"> &lt;- </span><span class="Normal">new</span> <span class="Constant">test-list:type</span>
+<a name="L534"></a><span id="L534" class="LineNr">534 </span>  foo p
+<a name="L535"></a><span id="L535" class="LineNr">535 </span>]
+<a name="L536"></a><span id="L536" class="LineNr">536 </span><span class="muRecipe">def</span> foo p:&amp;:test-list<span class="muRecipe"> -&gt; </span>p:&amp;:test-list [
+<a name="L537"></a><span id="L537" class="LineNr">537 </span>  local-scope
+<a name="L538"></a><span id="L538" class="LineNr">538 </span>  load-ingredients
+<a name="L539"></a><span id="L539" class="LineNr">539 </span>  <span class="Normal">p2</span>:&amp;:test-list<span class="Special"> &lt;- </span>test-next p
+<a name="L540"></a><span id="L540" class="LineNr">540 </span>  p<span class="Special"> &lt;- </span>test-remove p2<span class="Delimiter">,</span> p
+<a name="L541"></a><span id="L541" class="LineNr">541 </span>]
+<a name="L542"></a><span id="L542" class="LineNr">542 </span><span class="muRecipe">def</span> test-next x:&amp;:test-list<span class="muRecipe"> -&gt; </span>y:&amp;:test-list [
+<a name="L543"></a><span id="L543" class="LineNr">543 </span>  local-scope
+<a name="L544"></a><span id="L544" class="LineNr">544 </span>  load-ingredients
+<a name="L545"></a><span id="L545" class="LineNr">545 </span>  y<span class="Special"> &lt;- </span>get *x<span class="Delimiter">,</span> <span class="Constant">next:offset</span>
+<a name="L546"></a><span id="L546" class="LineNr">546 </span>]
+<a name="L547"></a><span id="L547" class="LineNr">547 </span><span class="muRecipe">def</span> test-remove x:&amp;:test-list/contained-in:from<span class="Delimiter">,</span> from:&amp;:test-list<span class="muRecipe"> -&gt; </span>from:&amp;:test-list [
+<a name="L548"></a><span id="L548" class="LineNr">548 </span>  local-scope
+<a name="L549"></a><span id="L549" class="LineNr">549 </span>  load-ingredients
+<a name="L550"></a><span id="L550" class="LineNr">550 </span>  *x<span class="Special"> &lt;- </span>put *x<span class="Delimiter">,</span> <span class="Constant">value:offset</span><span class="Delimiter">,</span> <span class="Constant">34</span>  <span class="Comment"># can modify x</span>
+<a name="L551"></a><span id="L551" class="LineNr">551 </span>]
+<a name="L552"></a><span id="L552" class="LineNr">552 </span>$error: <span class="Constant">0</span>
+<a name="L553"></a><span id="L553" class="LineNr">553 </span>
+<a name="L554"></a><span id="L554" class="LineNr">554 </span><span class="Delimiter">:(before &quot;End Immutable Ingredients Special-cases&quot;)</span>
+<a name="L555"></a><span id="L555" class="LineNr">555 </span><span class="Normal">if</span> <span class="Delimiter">(</span>has_property<span class="Delimiter">(</span>current_ingredient<span class="Delimiter">,</span> <span class="Constant">&quot;contained-in&quot;</span><span class="Delimiter">))</span> <span class="Delimiter">{</span>
+<a name="L556"></a><span id="L556" class="LineNr">556 </span>  <span class="Normal">const</span> string_tree* tmp = property<span class="Delimiter">(</span>current_ingredient<span class="Delimiter">,</span> <span class="Constant">&quot;contained-in&quot;</span><span class="Delimiter">);</span>
+<a name="L557"></a><span id="L557" class="LineNr">557 </span>  <span class="Normal">if</span> <span class="Delimiter">(</span>!tmp<span class="Delimiter">-&gt;</span>atom
+<a name="L558"></a><span id="L558" class="LineNr">558 </span>      || <span class="Delimiter">(</span>!is_present_in_ingredients<span class="Delimiter">(</span>caller<span class="Delimiter">,</span> tmp<span class="Delimiter">-&gt;</span>value<span class="Delimiter">)</span>
+<a name="L559"></a><span id="L559" class="LineNr">559 </span>          &amp;&amp; !is_present_in_products<span class="Delimiter">(</span>caller<span class="Delimiter">,</span> tmp<span class="Delimiter">-&gt;</span>value<span class="Delimiter">)))</span> <span class="Delimiter">{</span>
+<a name="L560"></a><span id="L560" class="LineNr">560 </span>    raise &lt;&lt; maybe<span class="Delimiter">(</span>caller<span class="Delimiter">.</span>name<span class="Delimiter">)</span> &lt;&lt; <span class="Constant">&quot;/contained-in can only point to another ingredient or product, but got '&quot;</span> &lt;&lt; to_string<span class="Delimiter">(</span>property<span class="Delimiter">(</span>current_ingredient<span class="Delimiter">,</span> <span class="Constant">&quot;contained-in&quot;</span><span class="Delimiter">))</span> &lt;&lt; <span class="Constant">&quot;'</span><span class="cSpecial">\n</span><span class="Constant">&quot;</span> &lt;&lt; end<span class="Delimiter">();</span>
+<a name="L561"></a><span id="L561" class="LineNr">561 </span>  <span class="Delimiter">}</span>
+<a name="L562"></a><span id="L562" class="LineNr">562 </span>  <span class="Identifier">continue</span><span class="Delimiter">;</span>
+<a name="L563"></a><span id="L563" class="LineNr">563 </span><span class="Delimiter">}</span>
+<a name="L564"></a><span id="L564" class="LineNr">564 </span>
+<a name="L565"></a><span id="L565" class="LineNr">565 </span><span class="Delimiter">:(scenario contained_in_check)</span>
+<a name="L566"></a><span id="L566" class="LineNr">566 </span><span class="muData">container</span> test-list [
+<a name="L567"></a><span id="L567" class="LineNr">567 </span>  <span class="Normal">value</span>:num
+<a name="L568"></a><span id="L568" class="LineNr">568 </span>  <span class="Normal">next</span>:&amp;:test-list
+<a name="L569"></a><span id="L569" class="LineNr">569 </span>]
+<a name="L570"></a><span id="L570" class="LineNr">570 </span><span class="muRecipe">def</span> test-remove x:&amp;:test-list/contained-in:result<span class="Delimiter">,</span> from:&amp;:test-list<span class="muRecipe"> -&gt; </span>result:&amp;:test-list [
+<a name="L571"></a><span id="L571" class="LineNr">571 </span>  local-scope
+<a name="L572"></a><span id="L572" class="LineNr">572 </span>  load-ingredients
+<a name="L573"></a><span id="L573" class="LineNr">573 </span>  result<span class="Special"> &lt;- </span>copy <span class="Constant">0</span>
+<a name="L574"></a><span id="L574" class="LineNr">574 </span>]
+<a name="L575"></a><span id="L575" class="LineNr">575 </span>$error: <span class="Constant">0</span>
 </pre>
 </body>
 </html>