nx_accept_ref_lib.nx

nx_accept_ref_lib.nx -- THE VERB-SIDE HALF OF THE THREE-PARTY ACCEPTANCE LEDGER (2026-08-31). nx_accept_lib.nx is the DECISION CORE: three planes in, ACCEPTED or INCOMPLETE out, reason codes in why[]. This lib is everything the verbs (nx_accept) and their referee (nx_accept_gate) need ON TOP of that core, kept out of the organ's main() so the gate drives the identical code over /tmp fixtures: * acr_party -- INCOMPLETE is never enough. The FIRST missing signature is NAMED, in the order the operator's standing order lists them (operator, referee, seat), so a NOT-AGREED can always say WHICH negative it is: OPERATOR-MISSING is not OPERATOR-REJECT, REFEREE-BELOW-BAND is not REFEREE-MISSING, and none of them is SEAT-MISSING. * acr_status_line -- one line per subject carrying every input the verdict was derived from (operator verdict and row count, referee code, percept, floor, tier, seat rows, board and organ file), so a reader can refute the verdict from the line instead of trusting it. * acr_unmapped -- an operator row whose targets carry no ga_accept_<subject> token governs NOTHING and the core only COUNTS it. This prints each one with id, verdict, actor, targets and the remedy, because a counted-but-unnamed row is not actionable. * acr_boards -- every ACCEPTANCE watch row on the /compare boards becomes a subject too, so a board subject nobody has judged reads NOT-AGREED missing=OPERATOR-MISSING instead of vanishing from the list, and a watch row naming the WRONG organ file is flagged -- it could never flip, however many signatures arrived. * acr_ref_admit -- may a referee row be written for this tier at all? The panel receipt decides (admitted, tiers_admitted, a floor for the tier); an abstaining panel is not a grade. * acr_kvint -- the mid-line key=<int> reader for the panel lens line (cjp_percept=<n>), because nx_lineconf_lib is deliberately LINE-anchored and that field is not at a line start. * acr_sha256_file -- the artifact identity a seat attests to and the frame identity a referee row carries: sha256 of the bytes, hex, never a hand-typed stamp. -1 when unreadable, never the digest of nothing. * acr_decl_shape -- the emitted declaration file's ONE permitted code form, as a ruler: every non-comment line must be exactly `func ga_accept_<ident>() -> i64 { return 1 }`, the form the compiler is proven to accept, so a buffer that passes this ruler is the form that builds. COMPOSES, NEVER RE-IMPLEMENTS: nx_accept_lib for every rule, nx_seg_store's cursor through al_next for the plane walk, nx_comparewatch_lib's cw_field for tab fields, nx_sha256 for the digest. license_tier: ORIGINAL No hw writes (Rule 26).