nx_cr_exec_proof.nx
buildroot/runtime/nx_cr_exec_proof.nx
about
nx_cr_exec_proof.nx -- PROVE (not assert) that code_review_gate is runnable end-to-end over the execution
allowlist path (the /mcp tools/call machinery), using a TEST allowlist conf so the operator-curated
production tool_allowlist.conf is never touched. Composes tea_run_from (nx_tool_exec_allow) against a written
test conf + nx_cr_gate.elf (the single-arg entry point). Demonstrates: a GREEN-allowlisted code_review_gate
resolves + runs + returns the gate verdict (dirty->1, clean->0); a RED row is refused; a ghost name is
refused (fail-closed). So the operator's remaining step is exactly ONE proven line in tool_allowlist.conf.
license_tier: ORIGINAL expect_exit: 0
dependencies 2 imports · 0 importers
imports: nx_tool_exec_allow.nxnx_itoa_lib.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| 10 | const K_MAGIC_262144: i64 = 262144 |
functions
| 12 | func p_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 } called by 1: main |
| 17 | func p_putn(v: i64) -> i64 { nxi_out(v); return 0 } |
| 19 | func write_conf(path: *u8, content: *u8) -> i64 called by 1: main |
| 29 | func main() -> i64 |