nx_debt_audit.nx

nx_debt_audit.nx -- the ANTI-SILENT-DEBT auditor (operator: audit from the hardware layer up as part of security/racing/triage -- catch hacking, working-around, silent technical debt; S-class-exceed discipline everywhere). SOVEREIGN organ replacing the borrowed bench/nx_debt_audit.sh (the audit retires its OWN shell debt = dogfood). Two mechanical checks, hardware-up: 1. LEDGER DISCIPLINE: every QUAL/QUANT row in NISHI_DEBT_LEDGER.tsv must carry a tracked plan (a non-empty later column) -- a debt row with no plan = SILENT debt. 2. MARKER SCAN: scan a source for the silent-debt signal words (HACK, WORKAROUND, FIXME, XXX, "for now", TODO without a row ref) -- a marker is fine IF the file is named in the ledger (tracked) -- an UNTRACKED marker = a workaround nobody logged. A workaround is ALLOWED (landmines exist) -- a workaround that is NOT TRACKED is the violation. Durable: DEBTAUDIT rows + verdict -> knowledge/status/debt_audit.log. Exit 0 = no silent debt. argv[1]=ledger override argv[2]=source-to-scan (optional). license_tier: ORIGINAL