code wiki / (root) / nx_cap_issue_gate.nx

nx_cap_issue_gate.nx

buildroot/runtime/nx_cap_issue_gate.nx

5825 B101 linesdepth 9pulls 25 transitivereach 0 importersview sourcekind gate/prooftopic cap
docsdependenciesstructsconstsfunctions

about

nx_cap_issue_gate.nx -- proves the self-service DELEGATION endpoint (POST /api/cap/issue) over R0's ta_handle: delegating narrows (the delegated cap grants the subset, not the dropped tool), widening is REFUSED, and a forged presenter cap is REFUSED. Drives ta_handle_pfx in-process. license_tier: ORIGINAL

dependencies 2 imports · 0 importers

nx_tools_api.nx nx_gate.nx nx_cap_issue_gate.nx

imports: nx_tools_api.nxnx_gate.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main gw sys_write ta_slen capt_issue capt_payload capt_catb capt_catn signed_cookie_sign sc_sign_bytes sys_mmap hmac_sha256 sys_mmap ↻ sha256_digest sys_mmap ↻ sha256_init sha256_update sha256_final sha256_init ↻ sha256_update ↻ sha256_final ↻ b64_encode b64_enc_char ig_issue_req ta_cat ta_catb ta_handle_pfx ta_reqline ta_emit_lit ta_emit ta_cat ↻ ta_catn ta_catb ↻ ta_slen ↻ ta_streq_n ta_tools ta_cat ↻ ta_emit_tools tool_list_pfx reg_index

structs

none

consts

none

functions

7func ig_has(o: *u8, n: i64, ndl: *u8) -> i64 { if ta_indexof(o, n, ndl) >= 0 { return 1 } return 0 }
called by 1: main calls 1: ta_indexof
8func ig_mark(cond: i64, p: *i64, t: *i64, lbl: *u8) -> i64
called by 1: main calls 1: gw
14func ig_issue_req(cap: *u8, caplen: i64, allow: *u8, out: *u8) -> i64
called by 1: main calls 2: ta_catta_catb
22func ig_call_req(cap: *u8, caplen: i64, name: *u8, out: *u8) -> i64
called by 1: main calls 2: ta_catta_catb
31func ig_extract(resp: *u8, n: i64, ol: *i64) -> i64
called by 1: main calls 2: ta_body_offta_json_str
40func main() -> i64
calls 11: gwta_slencapt_issueig_issue_reqta_handle_pfxig_extract+5