_lawsweep_gate.nx

_lawsweep_gate.nx -- ESTATE-WIDE ANTI-PATTERN CENSUS. The standing enforcement of laws that were previously only written down in comments. WHY THIS EXISTS. On 2026-08-07 a defect class was found, fixed in TWO organs, and reported as handled. The full population turned out to be 394 sites across 339 live sources -- 84% of every number printer in the estate. Fixing the instances you happen to trip over is not fixing the class, and a law recorded in a comment is enforced by nobody. A LAW THAT IS NOT A RUNNING CHECK IS A COMMENT, AND A COMMENT IS NOT A CONTROL. It reuses nx_forkcensus's proven primitives rather than authoring a fourth directory walker -- crucially fc_in_comment(), which separates a STRING LITERAL from a COMMENT ABOUT one. That distinction is exactly what a grep cannot make: the first estate measurement of hardcoded laptop paths returned 154 files, but the extraction had captured prose from a comment where someone had already written the warning down. A GREP FINDS THE CLAIM; ONLY A STAT SETTLES IT -- AND ONLY A PARSER SEPARATES A LITERAL FROM A COMMENT ABOUT THE LITERAL. T1 SIGN-DROP == 0 -- the number-printer class, estate-wide, in code (not comments). T2 NEG CTL -- a fixture that CONTAINS the defect must be DETECTED. Without this the gate scores its loudest PASS when the scanner is broken and sees nothing. T3 NON-VACUOUS -- files and bytes actually scanned > 0. A zero census is not a clean census. T4 DISCRIMINATOR -- a fixture carrying the SAME token once as a literal and once in a comment must be reported as exactly 1 and 1. This proves the literal/comment split that every count below depends on. It also MEASURES (does not gate) the foreign-host absolute-path class, literal-only, so the unrunnable-by-construction population finally has an honest number instead of a grep upper bound. Evidence -> knowledge/status/lawsweep.log (LAWSWEEP row). Sovereign. license_tier: ORIGINAL