code wiki / _hdl_build / nx_consul_connect_test.nx
nx_consul_connect_test.nx
buildroot/runtime/_hdl_build/nx_consul_connect_test.nx
about
nx_consul_connect_test.nx -- CCONNECTGATE: proves the sovereign Connect mTLS mesh. Services web=100 api=200
db=300 cache=400. Intentions: web->api ALLOW, web->db DENY. GREEN iff: web->api authorized (valid cert +
allow); web->db denied (explicit deny); api->db denied (DEFAULT-DENY, no intention); an unsigned/non-CA cert
is denied (mTLS imposter); an identity spoof (presenting api's cert while claiming web) is denied; the
cert-validity predicate is correct; and EXPLICIT-DENY-WINS over a co-present allow. exit 0 on 7/7.
dependencies 2 imports · 0 importers
imports: nx_consul_connect.nxnx_syscalls.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 9 | func eg_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 } |
| 10 | func eg_num(v: i64) -> i64 { let b: *u8 = sys_mmap(28); var m: i64=v; if m<0 {m=0-m}; let t: *u8 = sys_mmap(28); var k: i64=0; if m==0 {t[0]=48;k=1}; while m>0 {t[k]=48+(m%10); m=m/10; k=k+1}; var i: i64=0; while i<k {b[i]=t[k-1-i]; i=i+1}; sys_write(1,b,k); return 0 } |
| 12 | func main() -> i64 |