nx_asn1_write.nx

nx_asn1_write.nx -- V-HOST-4a: sovereign ASN.1 DER encoder. Sibling to existing asn1.nx (READ surface; cursor-based parser). This module adds the WRITE surface needed for X.509 cert generation (bin/nx_cert_gen V-HOST-4 closes the openssl bridge from NISHI_ANDELINWEST_DEPLOY_PLAYBOOK §3). COMPOSES (per "avoid duplicate primitives"): nx_syscalls (no allocation; caller-owned out buffer) asn1.nx (READ surface; this module mirrors with WRITE) COMPOSED BY: hub/nx_x509_build.nx (V-HOST-4b; queued) bin/nx_cert_gen.nx (V-HOST-4c; queued) future: nx_acme cert request (CSR builder; reusable for ACME) future: nx_pkcs8_emit (sovereign priv-key DER export) V-HOST-4a SCOPE: - DER encoding of: INTEGER, BIT STRING, OCTET STRING, OBJECT IDENTIFIER, SEQUENCE, SET, NULL, UTF8 STRING, IA5 STRING, GeneralizedTime, UTCTime, BOOLEAN, [n] EXPLICIT/IMPLICIT - Length encoding: short form (< 128) + long form (>= 128 up to 4 bytes) - Tag construction: universal + context-specific + IMPLICIT/EXPLICIT - Wrapper helpers for nested SEQUENCE (DER 2-pass write OR fixup-length pattern) V-HOST-4a NON-SCOPE (not needed for X.509 V1): - BER (non-canonical) encoding - REAL / EMBEDDED PDV / EXTERNAL types - Streaming encode (this writes flat to caller buffer) Status: V-HOST-4a. 2026-05-27.