nx_boot_run_sov.nx

nx_boot_run_sov.nx -- the SOVEREIGN boot runtime. Loads an emitter-authored rv64 flat binary into the Nishi-owned rv64 emulator (rv64im_min_sim + its 16550 UART / SiFive finisher / M-mode CSR / CLINT / virtio / NVMe / Sv39-MMU device models) and RUNS it -- the kernel boots on OUR silicon model, not qemu. qemu stays a pure ALIGNMENT cross-check, never the runtime. ★FIXED 2026-07-31 (debt 1785517037): this runner used to decide its verdict from `halted && halt_code==0` ALONE and NEVER READ THE SERIAL IT HAD JUST CAPTURED. Proven by tamper: an image whose Sv39 walk was broken emitted "...TICK TX" -- the paging phase DEAD -- and BOOTSOV still returned verdict=GREEN exit=0; clearing medeleg dropped the USER marker and it still returned GREEN. A runner that returns GREEN on a boot it can see is broken is not a check. It now compares the captured transcript against the artifact's golden and goes RED on mismatch. Backwards-compatible BY CONSTRUCTION: an image with NO golden behaves exactly as before (halt-only verdict) and says so, so nothing that boots a golden-less payload changes. nx_boot_run_sov [binpath] [goldpath] exit 0 = booted + clean halt + (golden matched or absent); 1 = otherwise Boot-and-capture comes from the shared nx_bootcap primitive so this runner, the gate, the census and the adoption ruler cannot disagree about what "booting the image" means. Sovereign: the emulator IS the runtime. license_tier: ORIGINAL