nx_clean_serve_gate.nx

nx_clean_serve_gate.nx -- ADVERSARY + CRITIC gate for the ethical clean-serve engine (the win-win-win proof). ADVERSARY: a synthetic hostile page carrying every attack class a malvertising/pirate/adult site throws at a user -- cryptominer, popunder window.open, reverse-tabnab link, meta-refresh malvertising, tracker beacon, inline on*= handler, javascript: URI -- PLUS a benign static banner ad and the real video content. CRITIC: after cs_clean_page, assert (a) EVERY attack is neutralized (nothing executable survives), (b) the benign ad's creative + click SURVIVE (the site still monetizes), (c) the content + native media survive, (d) the safety receipt counts are correct. NEGATIVE CONTROLS: a clean page must report ZERO attacks (no false positive), and a miner-only page must NOT count the miner as a preserved ad. No fabricated greens. ORIGINAL