_wiki_version_gate.nx

_wiki_version_gate.nx -- unit gate PROVING wiki R2 page VERSIONING: HISTORY (the immutable wikirev:* rows enumerate in order), DIFF (line-level, non-empty for a real change + empty for identical revisions), and ROLLBACK (auth-gated, ADDITIVE -- restores old content as a NEW revision while every prior revision survives), plus the liar-kill: an UNAUTH rollback is REFUSED with the store UNCHANGED. NO mocks, NO live socket: drives the REAL R2 core (nx_wiki_version) on top of the REAL R1 save (nx_wiki_page_save) + REAL doc store + the REAL reused auth (armed NxAuthContext: persistent key bundle + OPAQUE account store + argon2id KSF -- the exact production auth) + the REAL append-only seg_store. The auth recipe mirrors _wiki_edit_gate.nx (armed ctx + register + login -> real token). Per the native-codegen desync landmine, EVERY assertion is judged on a GROUND-TRUTH observable -- the BYTES read back out of the seg_store and the COUNT of enumerated revisions -- never a bare returned status code. Distinct epochs: v1/v2/v3 are saved with distinct now_unix_s stamps (base+10/+20/+30) so their wikirev:<slug>:<epoch> keys are distinct (a single shared epoch would collide one rev key and under-count history). All offsets sit well inside the session TTL so the freshly minted token still validates. Rows / markers: history_ok : >= 3 revisions enumerate for the slug, in ascending epoch order (the v1/v2/v3 epochs come back sorted). diff_ok : nx_wiki_diff(v1,v3) is non-empty AND mentions a changed line; nx_wiki_diff(v2,v2) is empty (0 bytes). rollback_ok : authed nx_wiki_rollback(v1_epoch) -> wikicur readback now equals v1's content (ground-truth bytes). additive_ok : after rollback the revision count GREW by 1 AND v2's and v3's revisions are STILL retrievable (history not truncated). unauth_refused : nx_wiki_rollback with an empty token AND a garbage token -> REFUSED, and wikicur is UNCHANGED (the rollback never touched the store). JUDGED by the printed WIKIVERSION marker (verdict=GREEN only if EVERY assertion holds), NOT by $?. Import set: nx_syscalls + wiki/nx_wiki_version (pulls the R2 core -> R1 save -> reused auth flow -> seg_store) + wiki/nx_wiki_edit_handler (the doc-store +