_gallery_serve_ref.nx

_gallery_serve_ref.nx -- HAND REFERENCE (written ONCE, scratch) for the spec2 gallery daemon target. This is the byte-identical TARGET nx_eg (which==2) must reproduce from a STRUCTURAL spec table. Its control flow extends the PROVEN spec1 frame (socket->setsockopt->bind->listen->`while accept`-> `if cfd<0 continue`->fork->dispatch->send) with a 3-ROUTE flat-if chain: GET / -> gs_grid (browse: lists the REAL ingested img: CIDs from the seg-store) GET /img/<CID> -> gs_serve_png (serves the REAL on-disk PNG bytes via a CID->path sidecar) POST /rate -> gs_rate (same-origin enforced; appends EXACTLY one EVAL O-line) Dialect rails honored: flat-ifs only (LM-002), no &&/|| (LM-001 -> compound guards are SEQUENCES of flat ifs), funcs <=6 params (LM-BIGARGS), mask-after-shift port bytes (LM-005). The route literals "GET / " / "GET /img/" / "POST /rate" are the tamperable spec fields. license_tier: ORIGINAL