nx_capres_gate.nx

nx_capres_gate.nx -- THE GATE FOR THE CAPTURE-RESOLUTION RULER (subject: nx_capres / nx_capres_lib). WHAT IT PROVES, AND WHY EACH TOOTH EXISTS: * the ruler READS a resolution out of a real capture header rather than assuming one (PNG + NXFH1) * a capture below its subject's declared full resolution is REFUSED, not rounded up * a judge whose ceiling sits below the capture is reported BLIND -- that is NO score, not a low one * every "I could not look" path abstains (UNPROVEN) instead of acquitting * the shipped conf actually declares the subject the world lane depends on, and declares it ONCE * the CLI's EXIT CODE carries the verdict, checked by forking the real binary THE REQUIRED NEGATIVE CONTROL is neg-control-downsampled-capture-must-not-verdict-FULL: the whole policy is worthless if a reduced capture can pass, so a tooth asserts that it CANNOT. It is paired with a bite cell (fires on the reduced input, silent on the full one), because a detector that has only ever seen good input has not been shown to fire. FIXTURES ARE ASSEMBLED AT RUNTIME in /tmp/, never checked in and never under knowledge/store: a gate that shares a fixture with a production beat measures the fixture, and a detector that scans source will find its own fixture written as a literal. license_tier: ORIGINAL No hw writes (Rule 26).