nx_adnet_advreport.nx

nx_adnet_advreport.nx -- RUNNER: the per-advertiser delivery report, made REACHABLE. THE GAP: `ainv_report_for_advertiser` is gated (tenant isolation proven: own campaigns included, a rival's EXCLUDED, unknown advertiser gets an EMPTY report rather than everyone's) but nothing could CALL it. The public /advertise page promises "you see the delivery ratio -- served and viewable side by side", and a claim on a public page with no surface behind it is a promise you will be asked to honour. A gated function with no caller is, by this ecosystem's own law, still the baseline. Shipped as a REGISTERED ORGAN, not a mgmt route, for two reasons: 1. every new route widens the control plane, and this needs no authority beyond reading four files; 2. the mgmt API currently cannot be modified at all -- /api/srcwrite truncates source at the ampersand character and nx_mgmt_api.nx has 25 of them, so the route path is physically blocked until that is fixed. Choosing the reachable door is not a workaround; it is the door that exists. ★ AUTH IS THE CALLER'S JOB, STILL. This takes an advertiser_bk on argv and does NOT authenticate it. organ_run is operator-gated, so today that IS the boundary. Do NOT expose this to an advertiser without establishing identity first -- baking a token check in here is how the check gets skipped by the second caller. nx_adnet_advreport <advertiser_bk> (live confs) nx_adnet_advreport <advertiser_bk> <camps> <rates> <served> <view> <clicks> (fixtures; read-only) expect_exit: 0 license_tier: ORIGINAL