code wiki / _hdl_build / _k_r2_001b2c_gate.nx
_k_r2_001b2c_gate.nx
buildroot/runtime/_hdl_build/_k_r2_001b2c_gate.nx
about
_k_r2_001b2c_gate.nx -- the K-R2-001b2c gate (virtio-MMIO STATUS-BYTE WRITEBACK layer; the
fourth slice of the K-R2-001b virtqueue epic, on top of b2b's avail-consume + used-ring
writeback). Drives the full author->handshake->queue-config->descriptor-DMA->avail/used->
status-byte chain with NO mocks: runs the REAL nx_virtio_hs_emit (the team AUTHORS the rv64
image + the TABLE-COMPUTED golden transcript from the status spec), then RUNS the image on
the SOVEREIGN rv64 emulator (rv64im_min_sim + the rv64im_min_virtio device now, on the b2b
QueueNotify kick, after the used-ring writeback, DMA-WRITING the virtio-blk request status
byte VIRTIO_BLK_S_OK=0 into the status descriptor's guest buffer + latching it into the
QueueStatPeek RO register -- the PRIMARY, gating lane: Nishi owns the runtime) and asserts
the captured serial transcript CONTAINS the emitter's golden ("VIO ACK DRV FEAT OK VQ DESC
USED STAT\n" -- after the used-ring writeback the device wrote the OK status byte, the
driver READ QueueStatPeek BACK and verified it == stat_expected: the status-byte writeback
binding proof) AND the sovereign emu reports a clean SiFive-finisher halt.
Then the ALIGNMENT lane: qemu-system-riscv64 -machine virt -global
virtio-mmio.force-legacy=true with a REAL virtio-blk-device backing. The gate authors a
SECOND image from a base-rewritten spec (the blk device lands at slot 0x10008000) and runs
the SAME driver against the REAL legacy virtio-blk transport: it completes the handshake +
queue config, lays the SAME descriptor + the SAME avail ring into qemu guest RAM, and kicks
the real QueueNotify -- the real legacy transport genuinely walks the ring. The sovereign-
only QueueDescPeek / QueueUsedIdxPeek / QueueStatPeek result registers are model instruments
the real device does not expose (they read 0), so on qemu the descriptor-DMA + used-ring +
status-byte verifies gracefully drop " DESC" / " USED" / " STAT"; the gate asserts the qemu
transcript contains the b1 prefix golden ("VIO ACK DRV FEAT OK VQ") -- proving the SAME
driver lays the avail ring + kicks the real device -> lanes AGREE on every register the real
transport can observe.
Finally a TAMPER test: corrupt the QueueStatPeek-EXPECTED constant in the sovereign image
(the driver loads its own QueueStatPeek read-back into t3 via lwu and compares against this
li-loaded expected in t4; bumping the expected's immediate makes t3 != t4) -> the read-back
verify branches PAST stage 8 straight to the finisher -> the transcript loses ONLY its
" STAT" canary (the "VIO ACK DRV FEAT OK VQ DESC USED" tail survives) -> the gate MUST go
RED. Evidence -> knowledge/status/virtio_blk.log (STATGATE row; the queue row's ||MARK=
reads it). Sovereign orchestration (fork/dup3/execve/wait4). license_tier: ORIGINAL
dependencies 1 imports · 0 importers
imports: nx_syscalls.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| 41 | const G_QSTATPEEK_LOAD_WORD: i64 = 0x0683ee03 // lwu t3, 0x068(t2) (QueueStatPeek read-back) |
functions
| 43 | func g_p(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } |
| 44 | func g_fp(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 } |
| 45 | func g_fn(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48;k=1}; while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 } |
| 48 | func g_run_emit(spec: *u8) -> i64 |
| 69 | func g_run_sov(binpath: *u8, outpath: *u8) -> i64 |
| 90 | func g_run_qemu(binpath: *u8, outpath: *u8, backing: *u8) -> i64 |
| 121 | func g_make_backing(path: *u8) -> i64 |
| 133 | func g_read(path: *u8, buf: *u8, cap: i64) -> i64 |
| 144 | func g_buf_has(buf: *u8, n: i64, pat: *u8, pl: i64) -> i64 called by 1: main |
| 158 | func g_w32(buf: *u8, o: i64) -> i64 called by 1: g_find_statpeek_load |
| 169 | func g_find_statpeek_load(buf: *u8, n: i64) -> i64 |
| 178 | func g_strlen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n } called by 1: main |
| 181 | func g_line_is(buf: *u8, ls: i64, le: i64, key: *u8) -> i64 called by 1: g_write_qemu_spec |
| 195 | func g_write_qemu_spec(mainspec: *u8, derived: *u8, qemu_out: *u8) -> i64 |
| 222 | func main() -> i64 |