Search papers, labs, and topics across Lattice.
This paper introduces SchedCheck, a tool for analyzing schedule-robustness in event-driven block programs like Scratch, which often exhibit schedule-sensitive behaviors due to their concurrent execution model. By formalizing the schedule space as permutations of the initial execution order and employing a partial-order exploration method, SchedCheck detects and localizes schedule faults in student projects and public remixes. The findings reveal that at least 21% of analyzed projects are sensitive to execution order, highlighting the importance of schedule robustness in educational programming environments.
Over 21% of student projects in Scratch exhibit schedule-sensitive behaviors that can drastically alter program outcomes based on execution order.
Block-based languages such as Scratch let beginners assemble interactive programs from sprites and scripts. These programs are concurrent in practice: green-flag scripts, broadcasts, and clones run as cooperatively scheduled threads over shared sprite and stage state, and their authors never write a thread. We show that such programs contain schedule-sensitive behaviors whose observable result depends on an execution order the language leaves open. Editing, saving, or remixing a project can produce a copy with the same blocks but a different layer order, changing the order the virtual machine starts scripts. We formalize the schedule space a Scratch virtual machine can realize as the permutations of the initial executable-target order, and define schedule-robustness against a lattice of observation lenses over a fixed horizon. A partial-order exploration runs one schedule per dependence-equivalence class, and on projects small enough to enumerate, an independent oracle confirms it recovers every realizable outcome. On larger projects, representatives stand in for the factorial under the validated dependence model. SchedCheck implements this on the production Scratch VM. Across 224 real student projects, at least 21% of the concurrent ones are schedule-sensitive at the grading lens, and a uniform random sample of public projects replicates the rate at 17.6%, with two real remixes of a deployed animation arranging its letters differently. On hand-built fault pairs and a generated benchmark of 32 spec-defined faults across four classes, the tool detects and localizes every schedule fault, with a logic-fault control reporting clean. The oracle exposed four unsoundness gaps in the dependence model, all repaired. The method is parametric in the execution model, instantiating unchanged on a second cooperative event loop.
