code wiki / _hdl_build / nx_capability_route_gate.nx

nx_capability_route_gate.nx

buildroot/runtime/_hdl_build/nx_capability_route_gate.nx

4767 B72 linesdepth 3pulls 4 transitivereach 0 importersview sourcekind gate/prooftopic capability

docs dependencies structs consts functions

about

nx_capability_route_gate.nx -- MEASURED unit gate for the global functionality split (nx_capability_route). Pure/offline (crafted host strings, no socket): proves capabilities route to subdomains and visitor content to the bare/www host, GLOBALLY (same rule every domain), with the leading-label dot required (no false matches). T1 admin.<d> -> CR_ADMIN T2 mail.<d> -> CR_MAIL T3 <d> -> CR_CONTENT T4 www.<d> -> CR_CONTENT T5 GLOBAL: admin.<otherdomain> -> CR_ADMIN AND mail.<thirddomain> -> CR_MAIL (not per-domain) T6 backend ports: ADMIN=8456 MAIL=8457 CONTENT=0 T7 neg-control: "administrative.com" -> CR_CONTENT (dot required) AND case-insensitive ADMIN.X -> CR_ADMIN GREEN iff 7/7. Appends knowledge/status/capability_route_gate.log. license_tier: ORIGINAL

dependencies 3 imports · 0 importers

imports: nx_capability_route.nxnx_g_puts_lib.nxnx_syscalls.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

structs

none

consts

none

functions

14	func g_num(v: i64) -> i64 called by 1: main calls 2: sys_mmap sys_write
20	func g_w(fd: i64, s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(fd, s, n); return 0 } called by 1: main calls 1: sys_write
21	func g_wn(fd: i64, v: i64) -> i64 called by 1: main calls 2: sys_mmap sys_write
27	func g_slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n } called by 1: cap_of
28	func cap_of(h: *u8) -> i64 { return cr_capability(h, g_slen(h)) } called by 1: main calls 2: cr_capability g_slen
30	func main() -> i64 calls 9: g_puts cap_of cr_backend_port g_num sys_openat_append g_w+3