nx_asset_exceed_gate.nx

nx_asset_exceed_gate.nx -- UNIVERSAL ORGANIZATION TOOLING arc, R7: the MEASURED exceed referee. This is the capstone the operator's directive demands: "S-class measured-EXCEED, referee-measured, NEVER self-scored." It turns "we built a content-addressed asset/knowledge IMS (R0-R5)" into "we have a PROVEN S-class-exceed IMS" -- by GRADING the DAM+KM inventory head-to-head against incumbent DAM (Adobe AEM / Bynder), KM (Notion / Confluence) and consumer media (Google Photos) on the axes from the sovereign-fetched research (org_research.tsv), and PROVING every EXCEEDS claim by RUNNING the real R0/R1/R2 organs. No cell is true without a passing run. TWO HALVES, both honest (mirrors nx_library_exceed's discipline): A) DATA-DRIVEN CENSUS -- the head-to-head scorecard lives in the NATIVE seg_store (nx_native_config), authored by census_seed (no TSV); counts EXCEEDS / PARITY / BEHIND. Honest self-assessment, NOT the claim. B) PROOF-BY-RUN of the six EXCEEDS axes against the REAL organs: P1 AX06 sovereignty deterministic + order-independent CID (same bytes -> same id; no clock/ RNG/surrogate key) via nx_asset_record (ar_cid / ar_encode) P2 AX01 integrity flip one byte of the record -> the CID CHANGES (tamper-evident) P3 AX02 dedup CID-keyed catalog vs a filename baseline: identical bytes -> count 1 while the filename baseline counts 2 (nx_asset_catalog cat_ingest/count) P4 AX03 unified image + video + doc in ONE catalog -> count 3, each byte-faithful + typed P5 AX04 provenance ed25519 credential bound to the record CID verifies ALLOW (nx_asset_provenance) P6 AX05 no-link-rot store, then resolve PURELY by content id offline -> byte-faithful + decodes NO-FABRICATION negative controls (must hold, proving the metric is not rigged): N1 distinct records -> DISTINCT CIDs, counted as 2 (a collision/false-merge would FAIL) N2 a forged (wrong-key) provenance credential -> REJECT (what a plain hash can't catch) N3 a tampered assertion -> REJECT N4 an honest-BEHIND axis (AX09 scale) MUST read BEHIND in the census (liar-kill on overclaim) N5 CENSUS-TIE: #EXCEEDS rows == #proofs that PASSED -- you cannot claim more exceed than proven VERDICT GREEN iff census parsed AND all six proofs passed AND every neg-control held. No hardware writes, no network, no production side effects (Rule 26). Verdict appended to knowledge/status/asset_exceed_gate.log (additive law #13). expect_exit: 0 license_tier: ORIGINAL