code wiki / (root) / nx_cap_issue_gate.nx

nx_cap_issue_gate.nx

buildroot/runtime/nx_cap_issue_gate.nx

5841 B101 linesdepth 9pulls 34 transitivereach 0 importersview sourcekind gate/prooftopic cap
docsdependenciesstructsconstsfunctions

about

nx_cap_issue_gate.nx -- proves the self-service DELEGATION endpoint (POST /api/cap/issue) over R0's ta_handle: delegating narrows (the delegated cap grants the subset, not the dropped tool), widening is REFUSED, and a forged presenter cap is REFUSED. Drives ta_handle_pfx in-process. license_tier: ORIGINAL

dependencies 2 imports · 0 importers

nx_tools_api.nx nx_gate.nx nx_cap_issue_gate.nx

imports: nx_tools_api.nxnx_gate.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main gw sys_write ta_slen ig_issue_req ta_cat ta_catb ta_handle_pfx ta_reqline ta_emit_lit ta_emit ta_cat ↻ ta_catn ta_catb ↻ ta_slen ↻ ta_streq_n ta_tools ta_cat ↻ ta_emit_tools tool_list_pfx reg_index_read reg_index_open ta_rank_path ta_cat ↻ ta_cap_grants ta_rank_calls tool_get_pfx reg_get reg_key ss_get ta_cat ↻ ta_emit_field ta_json_esc ta_put2 ta_put1 ta_hexd ta_desc_is_stub ta_slen ↻ ta_schema_title_buf ta_tsv_field

structs

none

consts

none

functions

7func ig_has(o: *u8, n: i64, ndl: *u8) -> i64 { if ta_indexof(o, n, ndl) >= 0 { return 1 } return 0 }
called by 1: main calls 1: ta_indexof
8func ig_mark(cond: i64, p: *i64, t: *i64, lbl: *u8) -> i64
called by 1: main calls 1: gw
14func ig_issue_req(cap: *u8, caplen: i64, allow: *u8, out: *u8) -> i64
called by 1: main calls 2: ta_catta_catb
22func ig_call_req(cap: *u8, caplen: i64, name: *u8, out: *u8) -> i64
called by 1: main calls 2: ta_catta_catb
31func ig_extract(resp: *u8, n: i64, ol: *i64) -> i64
called by 4: mainmainmainmain calls 2: ta_body_offta_json_str
40func main() -> i64
calls 9: gwta_slenig_issue_reqta_handle_pfxig_extractig_call_req+3