code wiki / _hdl_build / nx_access_wall_gate.nx

nx_access_wall_gate.nx

buildroot/runtime/_hdl_build/nx_access_wall_gate.nx

6809 B97 linesdepth 6pulls 7 transitivereach 0 importersview sourcekind gate/prooftopic access

docs dependencies structs consts functions

about

nx_access_wall_gate.nx -- gate for the unified PDP (nx_access_wall). Proves ZERO-TRUST / DENY-BY-DEFAULT / FAIL-CLOSED over composed signals: ALLOW only when network-tier AND identity-policy AND device AND rate all permit; each layer denies INDEPENDENTLY (with its own code); deny-by-default on an ungranted resource; and the reused nx_vault_acl explicit-deny-wins. Positive AND negative controls. Appends "ACCESSGATE row= nx_access_wall pdp ... verdict=PASS" to knowledge/status/access_gate.log on all-pass. Exit 0 iff all pass. license_tier: ORIGINAL

dependencies 2 imports · 0 importers

imports: nx_access_wall.nxnx_syscalls.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

structs

none

consts

none

functions

10	func aw_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } called by 2: aw_row main calls 1: sys_write
11	func aw_num(v: i64) -> i64 { let bb: u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48 as u8;k=1}; while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } called by 2: aw_row main calls 2: sys_mmap sys_write
12	func aw_cat(dst: u8, off: i64, s: u8) -> i64 { var o: i64=off; var k: i64=0; while s[k]!=(0 as u8){dst[o]=s[k];o=o+1;k=k+1} return o } called by 1: main
13	func aw_catnum(dst: u8, off: i64, v: i64) -> i64 { var o: i64=off; let t: u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; var k: i64=0; if m==0{t[0]=48 as u8;k=1}; while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1}; var i: i64=0; while i<k{dst[o]=t[k-1-i];o=o+1;i=i+1} return o } called by 1: main calls 1: sys_mmap
14	func aw_row(id: i64, ok: i64, what: u8) -> i64 { aw_w("AWROW " as u8); aw_num(id); aw_w(" " as u8); if ok==1 { aw_w("PASS " as u8) } else { aw_w("FAIL " as u8) } aw_w(what); aw_w("\n" as u8); return ok } called by 1: main calls 2: aw_w aw_num
15	func aw_slen(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} return n } called by 1: main
17	func main() -> i64 calls 13: sys_mmap aw_decide aw_slen aw_row aw_allowed aw_w+7