nx_cr_gate.nx

nx_cr_gate.nx -- the SINGLE-ARG, /mcp-shaped code review gate. `nx_cr_gate <file>` reviews ONE file and exits nonzero if it has blocking findings (incomplete / non-sovereign / leak). This exact shape (one positional arg) is what the execution allowlist's tea_run (name -> ELF, ONE arg) needs to make the `code_review_gate` tool RUNNABLE over /mcp tools/call -- so an engaging LLM/agent can self-check a file BEFORE submitting it ("so LLMs don't write garbage", via the API). Without this wrapper the gate's two-arg form (`nx_code_review gate <file>`) does not fit the single-arg exec model. COMPOSES _offc/nx_code_review.elf gate (Cardinal 15: no detection logic duplicated -- it fork+execs the real reviewer and passes the verdict + exit code straight through). Sovereign (syscalls only). Run from nxc2 root. The operator still curates the allowlist row + issues the cap token -- this only makes that step POSSIBLE. license_tier: ORIGINAL expect_exit: 0 (on a clean file; 1 on blocking findings; 2 on usage)