code wiki / _hdl_build / nx_ad_banner_gate.nx

nx_ad_banner_gate.nx

buildroot/runtime/_hdl_build/nx_ad_banner_gate.nx

6780 B106 linesdepth 4pulls 4 transitivereach 0 importersview sourcekind gate/prooftopic ad
docsdependenciesstructsconstsfunctions

about

nx_ad_banner_gate.nx -- GATE for the banner generator. Proves the privacy/security invariants hold BY CONSTRUCTION, each with a negative control (no false green): clean static + clean dynamic, HTML-escaping neutralises an injected <script> sponsor, a javascript:/data: click URI is rejected to '#', the third-party-JS detector actually FIRES on a planted tag, and IAB size is data-driven. Also (re)emits the viewable preview samples to knowledge/staging/ad/ as evidence. Sovereign, no gcc/.sh. license_tier: ORIGINAL

dependencies 3 imports · 0 importers

nx_ad_banner.nx nx_ad_serve.nx nx_syscalls.nx nx_ad_banner_gate.nx

imports: nx_ad_banner.nxnx_ad_serve.nxnx_syscalls.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main g_p sys_write sys_mmap ab_emit_banner sys_mmap ↻ ab_suffix ab_safe_link ab_startswith as_append as_append_escaped as_append ↻ as_len ab_uitoa sys_mmap ↻ ab_initials ab_upper g_write_preview sys_mmap ↻ as_append ↻ sys_openat_wr sys_write ↻ sys_close as_has_thirdparty_js as_contains as_len ↻ as_contains ↻ as_len ↻ ab_uitoa ↻ sys_write ↻

structs

none

consts

none

functions

10func g_p(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 }
called by 1: main calls 1: sys_write
13func g_write_preview(fname: *u8, frag: *u8, flen: i64) -> i64
25func main(argc: i64, argv: *i64) -> i64