nx_collision_watchdog.nx

nx_collision_watchdog.nx -- WMS-M3: the COLLISION / REGRESSION / FLOATER WATCHDOG. module: nishi-core.control_plane.collision_watchdog capability: CORE_COMPUTE (a reusable self-monitoring scan capability) THE POINT: git is passive history; this is the LIVE OS for the work itself. The data-plane substrate (WMS-R0 atomic framed-append, R1 registry SSOT, R2 reflog, RES-R6 journal) made the channels never-tear. This organ is the WATCHDOG that READS those channels and the genealogy and the known-issue catalogue, then RAISES + ROUTES three failure classes that the OLD torn-write substrate could not reliably surface: (1) TORN WRITES -- framing violations in any status log (MUST be 0 post-R0; a non-zero count means a write somewhere bypassed the locked fa_appendz discipline). (2) RED GATES / REGRESSIONS -- a "verdict=RED" line in an evidence log (a gate flipped red). (3) FLOATING CAPABILITIES -- an organ that cannot trace UP to the spore (genealogy twin of a floating queue row): an untraced node whose parents are "-" but it is NOT the spore. Reuses rt_load+rt_trace (does NOT re-implement genealogy). Each raised issue is ROUTED via ki_recall (recall-or-red / no-unseen-repeat): a SEEN signature is recognized + named (id != UNKNOWN); a genuinely novel one stays honest UNKNOWN. Every alert/evidence write goes through the MANDATORY locked atomic fa_appendz (one assembled buffer -> one locked write, the cn_emit_red discipline) -- NEVER a sequence of sys_write (that is the torn-line bug we killed). REUSE (registries-before-building): fa_cat/fa_catn/fa_appendz (nx_framed_append, WMS-R0b), ki_recall + KI_HIT/KI_UNKNOWN (nx_known_issue_store, recall), rt_load/rt_trace/rt_find + RT_* (nx_root_trace, genealogy). The torn-detect per-line head/tail invariant is the migration-gate idiom, lifted to scan ARBITRARY channels (head/tail are DATA params, not hardcoded to NOTES). ADDITIVE-ONLY: this organ READS existing logs/stores; it modifies no working organ. Sovereign: only the named nx organs + raw syscalls -- no gcc/openssl/node/python. license_tier: ORIGINAL