code wiki / _hdl_build / nx_access_wall_exceed_gate.nx

nx_access_wall_exceed_gate.nx

buildroot/runtime/_hdl_build/nx_access_wall_exceed_gate.nx

9104 B123 linesdepth 6pulls 8 transitivereach 0 importersview sourcekind gate/prooftopic access

docs dependencies structs consts functions

about

nx_access_wall_exceed_gate.nx -- MEASURED head-to-head EXCEED for the access wall, through the no-overclaim referee (nx_cms_exceed). NO WAVE: our side is RUN for real (aw_decide over a labeled scenario corpus); the verdict is COMPUTED by xcd_verdict; the referee rejects overclaim; self-tests prove no-false-green; and an HONEST BEHIND axis (volumetric DDoS) is computed and NOT claimed. Incumbent oracles are DOCUMENTED behavior (can't run real Cloudflare/Tailscale here), labeled, anchored to architecture facts: AXIS A sovereignty: Cloudflare Access / Tailscale terminate+proxy traffic and hold identity in THEIR cloud control plane; ours decides on-prem (aw_decide) -- the third party never sees identity/plaintext. AXIS B zero-trust correctness: RUN ours vs a legacy PERIMETER/VPN-trust model over the same corpus. AXIS C self-verifiable audit: ours is a client-verifiable hash chain (nx_access_audit); cloud logs are not. AXIS D volumetric absorption (HONEST BEHIND): cloud anycast/Shield absorbs Tbps; a home NAS cannot. license_tier: ORIGINAL

dependencies 3 imports · 0 importers

imports: nx_access_wall.nxnx_cms_exceed.nxnx_syscalls.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

structs

none

consts

none

functions

16	func xw_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } called by 2: xw_row main calls 1: sys_write
17	func xw_num(v: i64) -> i64 { let bb: u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48 as u8;k=1}; while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } called by 2: xw_row main calls 2: sys_mmap sys_write
18	func xw_cat(dst: u8, off: i64, s: u8) -> i64 { var o: i64=off; var k: i64=0; while s[k]!=(0 as u8){dst[o]=s[k];o=o+1;k=k+1} return o } called by 1: main
19	func xw_catnum(dst: u8, off: i64, v: i64) -> i64 { var o: i64=off; let t: u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; var k: i64=0; if m==0{t[0]=48 as u8;k=1}; while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1}; var i: i64=0; while i<k{dst[o]=t[k-1-i];o=o+1;i=i+1} return o } called by 1: main calls 1: sys_mmap
20	func xw_row(id: i64, ok: i64, what: u8) -> i64 { xw_w("XWROW " as u8); xw_num(id); xw_w(" " as u8); if ok==1 { xw_w("PASS " as u8) } else { xw_w("FAIL " as u8) } xw_w(what); xw_w("\n" as u8); return ok } called by 1: main calls 2: xw_w xw_num
21	func xw_slen(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} return n } called by 1: main
25	func perim_decide(tier: i64) -> i64 { if tier >= NT_LAN { return 1 } return 0 } called by 1: main
27	func main() -> i64 calls 17: sys_mmap aw_decide xw_slen aw_allowed perim_decide xcd_verdict+11