_priv_gate.nx

buildroot/runtime/_hdl_build/_priv_gate.nx

5143 B90 linesdepth 2pulls 2 transitivereach 0 importersview sourcekind gate/proof

docs dependencies structs consts functions

about

_priv_gate.nx -- gate for M/S/U PRIVILEGE + privilege-gated paging (privilege-levels capability). NO mocks. (1) PRIVILEGE-GATED -- emits + runs nx_priv_emit: the SAME VA 0xC0009000 reads as identity in M-mode ("MID") and translates to the sentinel in S-mode after mret ("SOK") -> serial "MIDSOK" + clean halt. Proves translation applies only in S/U and that mret M->S works. (2) CONTROL -- re-emit with MPP=M (0x1800) so mret stays in M-mode: the second VA load is then ALSO Bare (identity) -> "SX" instead of "SOK". Proves "SOK" REQUIRES S-mode (the gating is real -- M-mode never translates). Evidence -> knowledge/status/priv.log (PRIVGATE row). Sovereign. license_tier: ORIGINAL

dependencies 1 imports · 0 importers

imports: nx_syscalls.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

structs

none

consts

13	const V_EMIT: *u8 = "_offc/nx_priv_emit.elf"
14	const V_SOV: *u8 = "_offc/nx_boot_run_sov.elf"
15	const V_BIN: *u8 = "runtime/_hdl_build/_priv_virt.bin"

functions

17	func g_p(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } called by 1: main calls 1: sys_write
18	func g_fp(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 } called by 1: main calls 1: sys_write
19	func g_fn(fd: i64, v: i64) -> i64 { let bb: u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48;k=1}; while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 } called by 1: main calls 2: sys_mmap sys_write
21	func g_run(prog: u8, a1: u8, a2: u8, outpath: u8) -> i64 called by 1: main calls 7: sys_fork sys_openat_wr sys_dup3 sys_mmap sys_execve sys_exit+1
42	func g_read(path: u8, buf: u8, cap: i64) -> i64 called by 1: main calls 3: sys_openat_rd sys_read sys_close
51	func g_has(buf: u8, n: i64, pat: u8, pl: i64) -> i64 called by 1: main
58	func main() -> i64 calls 11: g_p sys_openat_append g_run sys_mmap g_read g_has+5