nx_ad_intake.nx

nx_ad_intake.nx -- LIB: advertiser SELF-SERVE SIGNUP / campaign creation for the "Brought to you by" ad engine (the "businesses sign up to advertise" face). A business picks a goal, sets a flat fee, and submits creative copy; we VALIDATE at the boundary (rule 12), then persist a campaign record ADDITIVELY to the sovereign store (rule 13, append-only versioned). Idempotent (rule 10): re-creating an unchanged campaign is a no-op. PRIVACY LAW (feedback-no-server-side-visitor-identity): this is an ADVERTISER B2B ACCOUNT -- a business deliberately identifying itself as a paying customer. The campaign record holds ONLY advertiser-supplied business data (name, goal, fee, banner, status). It has NO parameter and NO field for any SITE-VISITOR identity -- signup can never become visitor tracking by construction. Record (store key adcamp:<id>): business<tab>goal<tab>fee<tab>banner<tab>status. Creative text is stored RAW and HTML-ESCAPED at emission by nx_ad_serve (the proven boundary), so a "<script>" name is safe on the page. Goals are DATA-DRIVEN (rule 11): a goal is valid iff adgoal:<goal> exists in the store, so adding a goal needs no code change. license_tier: ORIGINAL