nx_accept_release_binding.nx
buildroot/runtime/nx_accept_release_binding.nx
about
Candidate additive acceptance binding for nx_accept owner; legacy subject records unchanged.
This predicate verifies evidence identity, not evaluator authority. The workflow must authorize
the evidence producer and retain stage-specific policy/test receipts. No implicit promotion.
Wire schema (exactly seven TSV fields, one terminal LF):
acceptance-release/v1 SUBJECT CANDIDATE_SHA256 STAGE VERDICT POLICY_SHA256 EVIDENCE_REF
EVIDENCE_REF identifies the detailed test bundle; its contents are validated by the workflow.
Expected receipt SHA256 binds every byte, including the evidence reference.
dependencies 1 imports · 1 importers
imports: nx_sha256.nx
imported by: nx_accept.nx
structs
| none |
consts
| 10 | const ARB_ACCEPTED: i64 = 0 |
| 11 | const ARB_INCOMPLETE: i64 = 1 |
| 12 | const ARB_REJECTED: i64 = 2 |
| 13 | const ARB_INVALID: i64 = 3 |
| 14 | const ARB_IDENTITY: i64 = 4 |
| 15 | const ARB_IO: i64 = 5 |
| 16 | const ARB_FIELDS: i64 = 7 |
| 17 | const ARB_SPAN_WORDS: i64 = 2 |
| 18 | const ARB_WORD_BYTES: i64 = 8 |
| 19 | const ARB_HASH_HEX: i64 = SHA256_DIGEST_BYTES*2 |
functions
| 21 | func arb_len(s: *u8) -> i64 |
| 24 | func arb_eq(a:*u8,an:i64,b:*u8,bn:i64)->i64 |
| 27 | func arb_hex_ok(s:*u8,n:i64)->i64 called by 1: arb_receipt |
| 31 | func arb_stage(s:*u8,n:i64)->i64 |
| 36 | func arb_field_eq(b:*u8,fields:*i64,field:i64,s:*u8)->i64 |
| 39 | func arb_parse(b:*u8,n:i64,fields:*i64)->i64 called by 1: arb_check_fields |
| 53 | func arb_check_fields(subject:*u8,candidate:*u8,stage:*u8,policy:*u8,b:*u8,n:i64,fields:*i64)->i64 |
| 65 | func arb_receipt(subject:*u8,candidate:*u8,stage:*u8,policy:*u8,receipt_sha:*u8,b:*u8,n:i64)->i64 called by 1: acm_check_release calls 5: arb_lenarb_stagearb_hex_oksha256_digest_checked_nativearb_check_fields |