nx_autofix_auto_gate_t138.nx

nx_autofix_auto_gate.nx -- TEETH FOR THE FIX LOOP'S M0 RULERS (autodev AD3/AD4/AD5/AD6/AD7, 2026-08-27). SUBJECT: nx_autofix_lib (the rulers nx_autofix_auto composes as af_episode_ledger, af_sandbox_root, af_null_control, af_admit_untrusted, af_intake_board), driven in-process over fixtures built at runtime under /tmp/nx_autofix_auto_gate/<epoch>/ -- a gate must never share a fixture with a production beat, and nothing here opens a production plane for write. END TO END WHERE IT COUNTS: the sandbox teeth really fork the sovereign build runner on a fixture candidate, so a green here means a candidate was compiled and judged INSIDE an isolated root on this host, under a wall deadline and resource limits, with the tree copy provably untouched. TEETH T1 fixture-reached-condition: the seeded bug REPRODUCES in the sandbox (FNRES dbl 0 2) T2 AD7 the tree copy is byte-identical after the sandbox build (never opened for write) T3 AD7 a fix applied INSIDE the sandbox is what the judge sees (all pass after the edit) T4 AD7 neg-control-deadline-kills-the-group: a spinning candidate is killed at the wall T5 AD4 null controls hold on a real bug: empty patch and a replayed foreign fix both stay RED T6 AD4 BITE: on a candidate that cannot fail, the empty patch scores GREEN and the batch is refused T7 AD5 ledger rows append as decided and the newest batch parses to k/n with clusters that SUM T8 AD5 the write path resolves without a literal (estate journal or the stage ledger, named) T9 AD6 a local row is admitted for a sandbox run T10 AD6 a pinned, merged external row is admitted as DATA ONLY T11 AD6 BITE: an unmerged external row is refused BY NAME while the merged one is not T12 AD6 neg-control-unpinned-and-malformed-refused T13 AD3 the intake plane over fixture sources: partition sums, RED gate present, GREEN gate refused T14 AD3 neg-control-green-before-refused: the GREEN-before gate is absent from the plane rows T15 conf: the sandbox bounds come from knowledge/autofix.conf (or the announced defaults) and are > 0 license_tier: ORIGINAL Fixtures under /tmp only. No hw writes (Rule 26). expect_exit: 0