nx_asset_visibility.nx

nx_asset_visibility.nx -- flag every asset PUBLIC vs PRIVATE *BY ITS SOURCE*, on the NATIVE store. Operator (2026-06-20): "flag what's public and what's private by source" + "stop using tsv, get everything to nishi ecosystem only." The visibility of an asset is DERIVED from where it came from (location path/URL, provenance class, or type), via an ORDERED policy that now lives in the NATIVE content-addressed seg_store (nx_native_config), NOT a flat .tsv. Rules try in order, FIRST match wins; an UNMATCHED source is OPERATOR-ONLY (fail-closed / deny-by-default, Rule 12). The policy is AUTHORED BY THIS ORGAN (vis_seed writes the rows) and READ from the store -- data-driven, sovereign. PURE COMPOSITION (Rule 15): record decode -> nx_asset_record; policy store -> nx_native_config (seg_store+canon); access-level bridge -> nx_asset_access. No TSV, no SQL. No hardware writes (#26). license_tier: ORIGINAL