nx_codewiki_ask.nx

nx_codewiki_ask.nx -- ASK THE CODE WIKI, and nothing else. ===== WHY THIS IS A SEPARATE BINARY ===== The allowlist grants a tool either FIXED args (caller argv ignored) or full caller control -- there is no middle. A question must come from the caller, so this tool's row must be unpinned; and an unpinned row on the GENERATOR would hand its holder an arbitrary-path read/write primitive (walk any root, write pages anywhere). So the ask surface is its own entry point that composes the same library and can do exactly one thing: read its own index and print cited hits. **Least authority by construction, not by promise.** nx_codewiki_ask <question words...> Retrieval is LEXICAL and says so: a question sharing no token with the corpus returns NO-MATCH rather than the least-bad guess. license_tier: ORIGINAL No hw writes (Rule 26).