_umode_gate.nx

buildroot/runtime/_hdl_build/_umode_gate.nx

6336 B105 linesdepth 3pulls 3 transitivereach 0 importersview sourcekind gate/proof

docs dependencies structs consts functions

about

_umode_gate.nx -- gate for U-MODE PROGRAM + SYSCALL boundary (user/kernel separation). NO mocks. (1) U-MODE SYSCALL -- emits + runs nx_umode_emit: M-mode drops to U via mret, the U-mode user program executes `ecall`, the CPU traps to the M-mode kernel with mcause=8 (ecall-from-U), and the handler confirms it -> serial "U8" + clean halt. (2) CONTROL -- re-emit with MPP=M (0x1800): mret stays in M, so the `ecall` is from M-mode -> mcause=11 (not 8) -> handler emits "X8" not "U8". Proves "U8" REQUIRES the syscall to come from U-mode (the privilege/cause distinction is real). Evidence -> knowledge/status/priv.log (UMODEGATE row). Sovereign. license_tier: ORIGINAL

dependencies 2 imports · 0 importers

imports: nx_syscalls.nxnx_gate_verdict.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

structs

none

consts

14	const U_EMIT: *u8 = "_offc/nx_umode_emit.elf"
15	const U_SOV: *u8 = "_offc/nx_boot_run_sov.elf"
16	const U_BIN: *u8 = "runtime/_hdl_build/_umode_virt.bin"

functions

18	func g_p(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } called by 1: main calls 1: sys_write
19	func g_fp(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 } called by 1: main calls 1: sys_write
20	func g_fn(fd: i64, v: i64) -> i64 { let bb: u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(fd,"-" as u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48;k=1}; while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 } called by 1: main calls 2: sys_mmap sys_write
22	func g_run(prog: u8, a1: u8, a2: u8, outpath: u8) -> i64 called by 1: main calls 7: sys_fork sys_openat_wr sys_dup3 sys_mmap sys_execve sys_exit+1
43	func g_read(path: u8, buf: u8, cap: i64) -> i64 called by 1: main calls 3: sys_openat_rd sys_read sys_close
52	func g_has(buf: u8, n: i64, pat: u8, pl: i64) -> i64 called by 1: main
59	func main() -> i64 calls 14: g_p sys_openat_append g_run sys_mmap g_read g_has+8