nx_contentdiff_typed_candidate_t309.nx

nx_contentdiff.nx -- THE PROMOTE RULER. Answers one question: does the candidate binary still contain everything the LIVE binary contains? WHY (debts 1785452162, 1785526315, 1785526809): the ecosystem has ~703 deployed organs awaiting a rebuild, and the gate guarding that queue was BYTE SIZE. Size is uninformative IN BOTH DIRECTIONS, proven twice by measurement: SHRINK is not regression -- 16 live organs had LARGER .prev files, yet the smaller live binaries were string SUPERSETS (lost_from_live=0). Restoring the bigger ones would have BEEN the regression. GROWTH is not improvement -- nx_law_warden rebuilt GREW 161951 -> 186696 bytes while losing three whole detectors (laws_measured 11 -> 8, enforced_permil 1000 -> 727). A gate keyed on bytes is therefore wrong about half the time and cannot tell you which half. THE RULER: printable content. Every printable run of >= CD_MINLEN bytes in the LIVE binary must still be findable somewhere in the candidate. Anything missing is capability the rebuild would DESTROY. Searching the candidate's RAW BYTES (not a re-extracted string set) is deliberate and stricter: a string that survived but got tokenized differently still counts as present, so a MISS is a real miss. ★2026-08-06 -- THE RULER MOVED OUT, THE ORACLE STAYED. This organ had NO DEPLOYED BINARY and no registry row, so the check it specifies had never actually run anywhere: debt 1785531571 asked for it to be wired into /api/promote and nothing could be, because the measure lived inside this main() with nothing importable to wire. It now lives in nx_contentdiff_lib (cdl_lost) and is called BOTH here and by the staging guard inside md_promote_staged. This file keeps its exact output contract; it simply no longer owns a private copy of the arithmetic. FAIL-CLOSED: unreadable input is RED, never "clean". Verdict GREEN iff lost_from_live == 0. NOT DEDUPED, and it says so in the output: runs are counted as encountered, so the counts are occurrence counts and lost>0 is the signal -- declaring that beats a silent, prettier number. THE ORACLE SPENDS THE FULL BUDGET (every run, whole run) -- it runs to completion and can afford it. nx_contentdiff <live-elf> <candidate-elf> [all|positive-display-limit] Optional display depth changes evidence visibility only; counts and verdict remain shared. license_tier: ORIGINAL No hw writes (Rule 26). expect_exit: 0