nx_aliascensus.nx

nx_aliascensus.nx -- THE GUARD FOR THE CATALOGUE IDENTITY FIX, AND THE 99-ROW RE-DERIVATION IT OWED. Built 2026-09-04 to close both halves of sev-8 row 1788487164. That row's done-rule had two parts and the fix only met the first: nx_catalog now reports the REQUESTED name's own source instead of the alias target's. The second part -- "a tooth asserts that for an aliased name the reported SOURCE size equals a direct stat of that name's own source" -- had no organ, and a fix without a guard is a fix that cannot be shown to still hold tomorrow. THE DEFECT THIS EXISTS TO PREVENT, MEASURED. nx_catalog_lib cl_regresolve resolves a tool name through tool_allowlist.conf field 2, takes the BASENAME, strips the .prev/.new/.elf/.sov suffix chain and calls the result the effective organ identity. cl_ladder then keyed SOURCE, BUILT and STAGED on THAT, so the catalogue published another organ's bytes under the name you asked for: four of four figures wrong for nx_https_get, and nx_https_get3 -- which has NO FILES on any candidate path -- published with a complete four-rung lifecycle. 99 of 1586 rows alias; 20 of those own real artifacts that were silently replaced, including nx_fs and nx_fs_write, so the estate's own read and write tools had never been catalogued correctly. FIVE separate lanes built BUILT-vs-PROMOTED drift tables on this instrument in one day. WHAT THIS ORGAN CLASSIFIES, and the partition SUMS to the rows it read: SELF field 2's stripped basename equals the tool name -- no aliasing, nothing to check ALIAS-MASKED the name aliases elsewhere AND has a source of its own -- the sharp class, because the catalogue used to report the target's bytes over a real artifact that exists ALIAS-PURE the name aliases elsewhere and has NO source of its own -- an honest entry point; the correct report is SOURCE absent with a real PROMOTED, never an invented lifecycle UNREADABLE a row this organ could not parse -- its own bucket, never folded into a known one nx_aliascensus census [allowlist] -> per-class counts, a NAMED worklist for ALIAS-MASKED, envelope nx_aliascensus selftest -> teeth, exit 0 GREEN / 1 RED Exit: 0 ok/GREEN | 1 RED | 2 usage | 3 UNREADABLE allowlist. verdict= is the LAST token on the last line. license_tier: ORIGINAL. Reads the allowlist and stats sources. Writes only stdout. No hw writes (Rule 26). ⚠DUPLICATION NAMED, NOT HIDDEN: the line/column/number helpers below are the SECOND copy in this estate (nx_debt_triple has the first). The DRY law fires at three, so extraction is owed at the next use and is recorded here rather than discovered later.