nx_assure.nx

nx_assure.nx -- WORLD-CLASS ASSURANCE RULER (worldclass-assurance lane, 2026-07-24). Operator: "we need to get to the point our system is world class -- DARPA/NASA/Linux-level and above." That is not a vibe, it is a CHECKABLE STANDARD. This organ scores the real .nx corpus against a subset of the NASA/JPL "Power of Ten" rules for safety-critical code (Holzmann 2006) that are mechanically decidable on NishiLang, emits per-rule violation counts, every violation LOCATABLE (file:fn), and an honest corpus permille. CYNICAL BY CONSTRUCTION (the author-optimism law): a rule that cannot be mechanically decided is declared NOT-CHECKED and counts as NEITHER pass nor fail -- the headline can never inflate by claiming credit for what it did not measure. CHECKED (sound, non-gameable): R1 no self-recursion -- fn body calls its own name (P10 rule 1: no recursion) R2 bounded loops -- no `while true` / `while 1` (P10 rule 2) R3 no dynamic alloc inside a loop -- no sys_mmap lexically inside a `while` (P10 rule 3; THIS is the per-iteration-mmap OOM class banked across sessions -- the single highest-value mechanical check) R4 function length <= AS_MAXLEN lines -- (P10 rule 4: short functions) G gate coverage -- every organ-with-main has a _gate/_test sibling (Nishi assurance: fresh-compile-run is the only judge, so a shippable organ WITHOUT a gate is unproven) NOT-CHECKED (declared, never scored as pass): R5 assertion density, R6 minimal scope, R7 checked returns, R8 preprocessor (NishiLang has none -- N/A), R9 single-deref pointers, R10 zero warnings (nx_cc builds clean by construction -- reproducible-build ruler is a separate arc). verbs: audit [dir] (default runtime/_hdl_build) | selftest license_tier: ORIGINAL No hw writes (Rule 26).