nx_compare_rank_caps_gate.nx

nx_compare_rank_caps_gate.nx -- GATE for the ranker's POPULATION HONESTY (lane F, 2026-08-23). THE DEFECT THIS GUARDS: nx_compare_rank carried RANK_MAX_ROWS=64 / RANK_MAX_RUNGS=64 / RANK_FIELD_MAX=24 / 8 versions / 16 milestones as silent caps. browser.matrix has 76 rows, so every row past 64 was invisible and its rung read UNMAPPED (value 0) while its watch row existed. A ranker that drops the tail of its own population publishes a prefix as the whole order. Every bound is now DERIVED from the loaded bytes; this gate proves the derivation by driving the subject binary over synthetic domains that EXCEED every former cap, over the real browser and toolchain domains, and against INDEPENDENT counts the gate takes itself from the same files (rung| lines, matrix data rows, symbol->row mapping). FIXTURE ROOT: /tmp/nxrkcap_<pid>/ (reaped by the tmpstorereap beat; nothing in it is EXECUTED from /tmp -- the subject and the forks it makes are reached through symlinks/absolute paths into the exec-capable serving root, and noexec binds to the executed file's mount, not the CWD). It carries its OWN buildroot/knowledge/compare/ (synthetic + copied real domains), its own buildroot/fx/ organ, a symlink buildroot/runtime -> the real runtime (rk_measure reads organ sources there), and symlinks to the real nx_dr_ocm_cli / nx_store_put / nx_pm_intake elfs. The subject is run with CWD = the fixture root, so every plane it publishes and every pm-intake ask it files lands INSIDE the fixture, never in the estate's planes. Falls back to _build/nxrkcap_<pid>/ only if /tmp cannot be created. Usage: nx_compare_rank_caps_gate [subject_elf] (default ./nx_compare_rank.elf; CWD = serving root) license_tier: ORIGINAL No hw writes (Rule 26).