nx_conductor_heal.nx

nx_conductor_heal.nx -- the Nishi CONDUCTOR, v3: the come-alive tick that does NOT just verify -- it AUTO-FIXES, bounded by the Warden. Each beat runs the full SAFE-ACT loop (the proven nx_crew_selfheal pattern, now IN the autonomic tick): Engineer DETECTs compiler-health (run the sandbox compiler on a canary, hang-safe) -> if unhealthy, Warden AUTHORIZEs the heal (W_HEAL_SWAP: allowed only because a known-good backup exists AND the target is a regenerable /_offc/ build artifact) -> Doctor HEALs (sovereign-copy the pinned known-good over the poisoned binary) -> Engineer VERIFIes (re-measure). Reuses nx_crew_selfheal's sh_measure/sh_copy/sh_puts (its main is stripped on import) -- ONE heal mechanism, no duplication. The Warden gates step 3 with step 2, so the autonomy is safe by construction (#13 additive-only: it swaps a known-good over a build artifact, never deletes, never overwrites source). Proven by gate_nx_conductor_heal.sh, which SEEDS a poisoned sandbox so the heal demonstrably fires: detect UNHEALTHY -> Warden ALLOW -> heal -> verify OK. license_tier: ORIGINAL