_trap_syscall_gate.nx

_trap_syscall_gate.nx -- the K-R1 gate (kernel-up ladder rung 1). Drives the full author->trap->syscall chain with NO mocks: runs the REAL nx_trap_syscall_emit (the team AUTHORS the rv64 trap+syscall image + the TABLE-COMPUTED golden transcript from the spec), then RUNS the image on the SOVEREIGN rv64 emulator (rv64im_min_sim -- the PRIMARY, gating lane: Nishi owns the runtime) and asserts the captured serial transcript CONTAINS the emitter's golden (banner + each syscall's emit byte, in order) AND the sovereign emu reports a clean SiFive-finisher halt (BOOTSOV verdict=GREEN). Then it runs the SAME image on qemu-system-riscv64 -machine virt (the declared hardware-alignment lane, NOT the runtime -- the diff-lane signal) and asserts the lanes AGREE on the transcript. Finally a TAMPER test: corrupt one syscall's a7 in the image -> that handler never fires -> the transcript loses a byte -> the gate must go RED (proves the gate bites, not a rubber stamp). Evidence -> knowledge/status/ trap_syscall.log (TRAPGATE row; the queue row's ||MARK= reads it). Sovereign orchestration (fork/dup3/execve/wait4). license_tier: ORIGINAL