_wiki_edit_gate.nx

_wiki_edit_gate.nx -- unit gate PROVING the wiki R1 auth-gated page EDIT/SAVE backbone: an AUTHED save persists + renders + is an immutable revision, and an UNAUTH save is REFUSED with the store UNCHANGED (the liar-kill). NO mocks, NO live socket: drives the REAL save core (nx_wiki_page_save) + REAL doc store + the REAL reused auth (armed NxAuthContext: persistent key bundle + OPAQUE account store + argon2id KSF -- the exact production auth the wiki login uses) + the REAL append-only seg_store. Mirrors the proven shapes in nx_wiki_login_live_gate.nx (armed ctx + register + login -> real token) and _wiki_engine_gate.nx (doc-store serve as ground truth). Rows: save_ok : AUTHED nx_wiki_page_save(slug,"new content X",VALID token) -> ground truth = seg_store wikicur:<slug> reads back "new content X" AND the doc store serves "new content X". unauth_refused : nx_wiki_page_save(slug,"evil",EMPTY/INVALID token) -> returns REFUSED AND seg_store wikicur:<slug> is STILL "new content X" (the evil write never landed). rev_ok : a wikirev:<slug>:* revision row exists for the authed save. readback_ok : the wikicur:<slug> readback equaled the authed content. JUDGED by the printed WIKIEDIT marker (verdict=GREEN only if EVERY assertion holds), NOT by $?. Per the native-codegen desync landmine, every assertion is judged on a GROUND-TRUTH observable -- the BYTES read back out of the seg_store / served from the doc store -- never a bare returned status code. A UNIQUE slug per run (epoch-suffixed) keeps the shared append-only knowledge/store/wikipage- prefix from letting a PRIOR run's bytes answer for this one (the store is additive; latest-put wins per slug). Import set: nx_syscalls + wiki/nx_wiki_edit_handler (transitively pulls the save core -> the reused auth flow -> uas/opaque/bip39, base64, html_escape, index_builder, seg_store). Each base module splices exactly ONCE (path-dedup) to avoid the double-import nxasm rc6 trap. license_tier: ORIGINAL