惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
WordPress大学
WordPress大学
Google DeepMind News
Google DeepMind News
T
The Exploit Database - CXSecurity.com
阮一峰的网络日志
阮一峰的网络日志
F
Fox-IT International blog
The GitHub Blog
The GitHub Blog
Engineering at Meta
Engineering at Meta
I
Intezer
P
Privacy & Cybersecurity Law Blog
B
Blog RSS Feed
Latest news
Latest news
小众软件
小众软件
A
Arctic Wolf
Attack and Defense Labs
Attack and Defense Labs
L
LINUX DO - 热门话题
博客园 - 聂微东
B
Blog
T
Troy Hunt's Blog
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog
Malwarebytes
Malwarebytes
爱范儿
爱范儿
Recorded Future
Recorded Future
Apple Machine Learning Research
Apple Machine Learning Research
人人都是产品经理
人人都是产品经理
D
Docker
T
Threat Research - Cisco Blogs
MyScale Blog
MyScale Blog
Martin Fowler
Martin Fowler
E
Exploit-DB.com RSS Feed
F
Fortinet All Blogs
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
PCI Perspectives
PCI Perspectives
Scott Helme
Scott Helme
N
Netflix TechBlog - Medium
博客园 - 三生石上(FineUI控件)
T
True Tiger Recordings
C
Check Point Blog
Microsoft Azure Blog
Microsoft Azure Blog
D
Darknet – Hacking Tools, Hacker News & Cyber Security
K
Kaspersky official blog
Security Latest
Security Latest
The Hacker News
The Hacker News
Microsoft Security Blog
Microsoft Security Blog
Hacker News - Newest:
Hacker News - Newest: "LLM"
Stack Overflow Blog
Stack Overflow Blog
S
Security @ Cisco Blogs
C
CXSECURITY Database RSS Feed - CXSecurity.com
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
M
Microsoft Research Blog - Microsoft Research

DEV Community

Chat With Your Raspberry Pi — Control GPIO, Read Sensors, and Manage Services via Telegram Using Garudust Run OpenAI Codex CLI on Claude, Gemini, or Llama — in 50 lines of C# Token economics for AI agents: why workflow ownership matters more than task automation Why SMS Codes Are No Longer Enough for Business Security Communicate Ideas Visually: Let AI Run the Feedback Loop Building an Autonomous AI Hiring Agent with Multi-Agent Runtime Orchestration 🚀 Base64 encoding visualizer I Built a Browser Game Engine Inside WordPress Without Canvas or WebGL. Here's Why Designing Website Analytics for AI Crawlers Without Surveillance Forget Usernames and Passwords: A Web2 Developer’s Guide to Solana Identity Usage-Based Billing for AI Agents with FastAPI and Kong 30 Days of AI Agents Buying From a Real WooCommerce Store. Here's What the Data Says. AWS - Identity and Access Management Explained for Beginners Token Saving, and Caveman How Superpowers Forces Skill Execution How I Stressed My SQLite Job Queue to 5,000 Continuous Tasks on an Android Phone (And Why It Outperformed the Cloud) Is the job market dead, or has the skill bar increased? Introducing PlanCollab: AI-Powered Cross-Agent Code Planning & Review No More Waiting in Line: How I Built a Web-Based Canteen Queue Management System with Flask and MongoDB Deploying Unbound Validating DNS Resolver on Ubuntu 24.04 Deploying Prometheus Metrics Collection Server on Ubuntu 24.04 AWS IAM Roles Anywhere Hands-On Deploying Grafana Metrics Visualization Platform on Ubuntu 24.04 Deploying Gogs Simple Git Hosting on Ubuntu 24.04 Deploying MongoDB NoSQL Document Database on Ubuntu 24.04 Deploying Passbolt Team Password Manager on Ubuntu 24.04 Deploying OpenWebUI Local AI Interface on Ubuntu 24.04 Deploying Bitwarden Password Management Vault on Ubuntu 24.04 Deploying GitLab CE DevOps Management Suite on Ubuntu 24.04 Panduan Praktis Pasca-Install Ubuntu 24.04 Desktop Agar Sistem Nyaman Dipakai Harian Deploying n8n Workflow Automation Engine on Ubuntu 24.04 Memory Cache: o bug invisível que só aparece quando sua aplicação precisa escalar horizontalmente "this" in JS is SIMPLE as a rock LoRaWAN has ~51 bytes per frame. Your JSON alert doesn't fit. Stop Avoiding Bitwise Operators ERP Product Tree Denormalization: The Maintenance and Scale Conundrum We Leaked 1,368 Customers into Our LIVE Stripe Account via E2E Tests Overlay Widgets vs Real WCAG Scanners: A 2026 Buyer’s Guide How an Accessibility SaaS Broke Its Own Landing (and How We Fixed It) Building the harness around our coding agents: eight failure modes, eight pillars LynxDB - I wanted Splunk's query language without Splunk RAG Is Not Always the Answer Anymore: How AI Agents Search Code in 2026 I Leaked API Keys Through My .env File — Here's What I Learned About Secret Management Score Big with Power Apps: A Step-by-Step Guide to Custom Football APIs IaC Drift Is Inevitable — Design for Detection, Not Prevention I Built a CLI Tool That Writes Better Git Commits Than I Do Adding Text Selection to Bash I Built an Android App With Zero Backend — Here's What Happened I built toklock — the only Anthropic rate-limit proxy that queues requests instead of crashing your agents The Hardest Part of Building an Encrypted Journaling App Wasn’t Encryption Replicate MySQL to ClickHouse with Sling Why I Think the Next Big Blockchains Will Be Built Around AI, Not With AI on Top How to use the Specification Pattern to Clean Up Query Logic in C#, .NET AI may already be turning translators into proofreaders. Coders could be next? One API, every social image - dynamic OG, Twitter, LinkedIn, Pinterest, YouTube AI Agents Need Artifacts, Not Activity. What I Learned Shipping 7 Mac Apps in 12 Months — The Honest Retrospective Being pro-developer in the AI age Circuit Breaker Now Supports LangGraph and Vercel AI SDK Where Does the Data Go? A Comprehensive Guide to Databases Node.js wants to ban AI-generated code. They should. 07/20: Layer 2 – The Data Link Layer: Frames, MAC Addresses & Switches 5 Python Features That Made Me a Better Developer Why "flex" breaks your email in Outlook (and how to catch it in VS Code) Most Organizations Don't Have an AI Problem, They Have an Integration Problem I Built a Privacy-First PDF Toolbox — Your Files Never Leave the Browser The EU AI Act Was Written for Models. Your Agents Need Runtime Compliance. Your AI Agent on Kubernetes Is Probably Exposed to the Internet Right Now 723 Cycles of Zero-Sleep Autonomy: What Running 24/7 for Weeks Actually Looks Like AI Automation vs AI Augmentation: Know Which One You Are Actually Building A .NET Dinosaur in Web3. Day 13 — Access Control Transaction Hooks: A General Primitive for Post-Commit Side Effects (Case Study: Queuert) Lines vs Blocks(CSS): Divide & Grid Explained The Business Context Problem: Why Vulnerability Severity Scores Lie "How I Cut My Go Markdown Linter's Benchmark by 81%" Casting Resurrection on a Dead D&D Table The Story Behind Java: From C++ Limitations to Platform Independence Keep Appium out of your test code: BasePage + lazy locators How I use agents for my personal projects I Built a Compliance Health Scanner for Indian Startups in 24 Hours - Here’s What I Learned What AMQP compatibility means for a local Azure emulator Why I stopped rotating active log files in Python I built a tiny runtime for resumable agent workers The Cost of Showing Up: What the Productivity Advice Does Not Tell You About Being Visible Python Why I Rebuilt My Portfolio with Astro I finally gave my AI agents a shared memory and a team #Crew44 Kimsuky (APT43) — Analysis of the New PebbleDash · AppleSeed Toolset shadcn/ui is Not a Component Library Scaling Monorepos with Turborepo Five Ways to Fail a Transport Terminal themes optimize for syntax highlighting; that's the wrong target Your Clean Domain Could Be Masking an Attack: The Underminr Vulnerability Explained AI Coding Standards at Scale: Versioned AI Rules for Cursor, Claude Code, and Beyond 🚀 Introduction to Express.js – the framework that changed Node forever Mini Shai-Hulud: A persistent supply-chain worm From Braces to Pipes How to Debug LLM-Driven Android Automation Runs Sharing my Mock Interview Experience - Part 1 Laying it all Out
Validating lists in Okyline: uniqueness, order, and cross-element rules
Pierre-Miche · 2026-05-26 · via DEV Community

In the previous articles of this series, we introduced Okyline with an e-commerce order, added conditional logic, and covered computed business rules.

This time, we're looking at lists: no duplicate entries by business key, elements in chronological order, rules that depend on what comes before or after, checks that span the whole collection.

We'll use a delivery tracking system as our running example.


The starting point

A simple order with tracking steps:

{
  "$oky": {
    "orderId": "ORD-20250715-042",
    "customer": "Alice Martin",
    "trackingSteps": [
      {
        "step": "CREATED",
        "timestamp": "2025-07-15T08:00:00",
        "location": "Online order"
      }
    ],
    "actualStep": "CREATED",
    "isShipped": false
  }
}

Enter fullscreen mode Exit fullscreen mode

As with the previous articles, this bare JSON wrapped in $oky is already a valid contract. Types are inferred, structure is enforced. But nothing prevents someone from sending two SHIPPED steps, or timestamps in the wrong order, or claiming the order is delivered when no shipment ever happened.

Let's add those rules.


Step 1: No duplicate steps

Each tracking step should appear at most once. You can't have two SHIPPED entries or two DELIVERED entries in the same tracking history.

In JSON Schema, uniqueItems compares entire objects. Two steps with the same name but different timestamps would pass validation, because the objects aren't identical. That's not what we want.

In Okyline, # marks the business key and ! enforces uniqueness by that key:

    "trackingSteps|@ [1,10] -> !|Tracking steps": [
      {
        "step|@ # ($TRACKING_STEP)|Step": "CREATED",
        "timestamp|@ ~$DateTime~|Step timestamp": "2025-07-15T08:00:00",
        "location|@ {2,100}|Location": "Online order"
      }
    ]

Enter fullscreen mode Exit fullscreen mode

[1,10] means 1 to 10 elements. -> ! means each element must be unique. # on step says: uniqueness is determined by this field. Two entries with step: "SHIPPED" will fail validation, regardless of their other fields.


Step 2: Chronological order

Tracking steps must be in chronological order. Each step's timestamp must be later than the previous one.

Okyline provides iteration context variables inside compute expressions. Here, we need isFirst and prev:

    "timestamp|@ ~$DateTime~ (%StepsChronological)|Step timestamp": "2025-07-15T08:00:00",

    "$compute": {
      "StepsChronological": "isFirst || timestamp > prev.timestamp"
    }

Enter fullscreen mode Exit fullscreen mode

isFirst is true for the first element of the array. prev refers to the previous element. So the rule reads: either this is the first step, or its timestamp is after the previous step's timestamp.

If someone sends steps with timestamps out of order, validation fails. The error points to the exact element and the exact rule.


Step 3: Checking the first element of the list

Every delivery tracking starts with a CREATED step. This is a business invariant: you can't pick or ship something that was never created.

Okyline has first, which refers to the first element of the collection:

    "trackingSteps|@ [1,10] (%FirstIsCreated) -> !|Tracking steps": [
      ...
    ],

    "$compute": {
      "FirstIsCreated": "size > 0 && first.step == 'CREATED'"
    }

Enter fullscreen mode Exit fullscreen mode

first.step accesses the step field of the first element. size gives the total number of elements. The compute is attached to the array field itself with (%FirstIsCreated), because it's a rule about the collection, not about a single element. If we attached it to a field inside the element, the check would run once per element, which is unnecessary.


Step 4: Cross-collection checks

The order has an actualStep field that should match the last tracking step. And an isShipped boolean that should be true if and only if a SHIPPED step exists in the list.

These are rules that cross the boundary between a field and a collection. Okyline handles them with lastOf and exists:

    "actualStep|@ (%CheckActualStep)|Current step": "CREATED",
    "isShipped|(%CheckIsShipped)": false,

    "$compute": {
      "CheckActualStep": "actualStep == lastOf(trackingSteps).step",
      "CheckIsShipped": "isShipped == exists(trackingSteps, step == 'SHIPPED')"
    }

Enter fullscreen mode Exit fullscreen mode

lastOf(trackingSteps).step gets the step field of the last element. exists(trackingSteps, step == 'SHIPPED') returns true if any element has step equal to "SHIPPED". The validation ensures that these derived values are consistent with the list content.

If someone adds a SHIPPED step but forgets to update isShipped to true, validation catches it.


Two ways to work with lists

There are two distinct ways to validate a list in Okyline, depending on where you stand.

From the outside: querying the collection

When a compute is attached to a field at the same level as the list (a sibling), the list is a parameter you pass to a function. You're asking questions about the collection as a whole:

Function What it does Example from our contract
lastOf(list) Last element lastOf(trackingSteps).step
firstOf(list) First element firstOf(trackingSteps).timestamp
findFirst(list, pred) First match findFirst(trackingSteps, step == 'SHIPPED')
exists(list, pred) Any match? exists(trackingSteps, step == 'SHIPPED')
notExists(list, pred) No match? notExists(trackingSteps, step == 'CANCELLED')
count(list) How many elements count(trackingSteps)
countIf(list, pred) How many match countIf(trackingSteps, step == 'SHIPPED')
sum(list, field) Sum a field sum(items, lineTotal)

This is an extract. The full set includes average, min, max, sumIf, filter, map, and more. map is worth mentioning: it transforms each element and returns a new list, which you can then pass to sum, join, or any other function.

This is the level used by CheckActualStep and CheckIsShipped in our contract. The compute lives on a sibling field and interrogates the list from the outside.

From the inside: exploring from the element being validated

When a compute is attached to a field inside a list element, you're inside the iteration. The engine validates each element in turn, and you can look around:

Variable Resolves to
prev Element before the current one
next Element after the current one
first First element of the collection
last Last element of the collection
index 0-based position of the current element
size Total number of elements
origin The element whose validation triggered the aggregation
isFirst True if current element is first
isLast True if current element is last

This is the level used by StepsChronological: the compute is on timestamp inside the element, and it compares with prev.timestamp. It's also where FirstIsCreated lives, using first.step and size.

Combining both levels

You can also combine both levels. From inside an element, you can query the full collection using exists, countIf, or filter with origin to refer back to the current element.

For example, in a real production contract I use for sewer inspection data (EN 13508-2), each observation has a distance from the start of the pipe. When a continuous defect starts (code 'S'), there must be a matching end (code 'F') with the same observation type at a greater distance:

"CheckSF": "exists(parent.observations, code == 'F' && type == origin.type && distance > origin.distance)"

Enter fullscreen mode Exit fullscreen mode

Here, origin refers to the element currently being validated. So each element is asking its siblings: "does anyone else in this list complete what I started?" — same type, greater distance.


The complete contract

Here's the full delivery tracking contract:

{
  "$oky": {
    "orderId|@ ~$OrderId~|Order identifier": "ORD-20250715-042",
    "customer|@ {2,100}|Customer name": "Alice Martin",
    "trackingSteps|@ [1,10] (%FirstIsCreated) -> !|Tracking steps": [
      {
        "step|@ # ($TRACKING_STEP)|Step": "CREATED",
        "timestamp|@ ~$DateTime~ (%StepsChronological)|Step timestamp": "2025-07-15T08:00:00",
        "location|@ {2,100}|Location": "Online order"
      }
    ],
    "actualStep|@ (%CheckActualStep)|Current step": "CREATED",
    "isShipped|(%CheckIsShipped)": false
  },
  "$compute": {
    "StepsChronological": "isFirst || timestamp > prev.timestamp",
    "FirstIsCreated": "size > 0 && first.step == 'CREATED'",
    "CheckActualStep": "actualStep == lastOf(trackingSteps).step",
    "CheckIsShipped": "isShipped == exists(trackingSteps, step == 'SHIPPED')"
  },
  "$format": {
    "OrderId": "^ORD-[0-9]{8}-[0-9]{3}$"
  },
  "$nomenclature": {
    "TRACKING_STEP": "CREATED, PICKED, PACKED, SHIPPED, IN_TRANSIT, OUT_FOR_DELIVERY, DELIVERED"
  }
}

Enter fullscreen mode Exit fullscreen mode

28 lines. Uniqueness by business key, chronological order, first-element check, cross-collection consistency. All declarative, all in one document.

Try adding a second SHIPPED step, or swapping two timestamps, or setting isShipped to true without a SHIPPED step. Each case produces a clear, targeted error message.


What's next

In the next article, we'll explore virtual fields: computed values that don't exist in the validated payload but can drive conditional logic. Think of a loyalty tier calculated from the order amount, that then determines which fields are required.

👉 Try it now: community.studio.okyline.io

Paste the contract above, add tracking steps, break the rules. See what happens.

👉 Full documentation and open specification


This is Part 4 of the series Okyline — JSON validation by example. Built by Akwatype.