nx_cap_mint_gate.nx
buildroot/runtime/nx_cap_mint_gate.nx
about
nx_cap_mint_gate.nx -- proves the root minter cm_mint (a) issues a capability that grants exactly the listed
tools and DENIES others (least authority carried through the mint), (b) supports "*" (grant-all), and -- the
hardening added 2026-07-07 -- (c) FAILS CLOSED when handed the forgeable baked placeholder secret, so a
production token can never be signed with a secret that is public in the source. Mirrors nx_cap_token_gate;
drives the pure core in-process with a real (non-placeholder) test key. license_tier: ORIGINAL expect_exit: 0
dependencies 2 imports · 0 importers
imports: nx_cap_mint.nxnx_gate.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 9 | func mg_expect(actual: i64, expected: i64, pass: *i64, tot: *i64, label: *u8) -> i64 |
| 16 | func main() -> i64 |