nx_debtconfirm.nx

nx_debtconfirm.nx -- THE MECHANICAL DEBT-CLOSURE CONFIRMER (2026-07-31, ws=d001-b). WHY: the debt ledger fills ~5x faster than a seat drains it (open 1523->1586 in one session, +31 filed vs +6 eaten per 25min). Hand-draining cannot converge. nx_debtlive scan already names 356 rows CITED by a fix site, but its check verb correctly says "confirm by ARTIFACT before eating". THIS is that confirmer. I FIRST CLAIMED THIS COULD NOT BE MECHANIZED ("it needs judgement about which string proves a fix"). THAT WAS WRONG: debt rows carry STRUCTURED evidence -- sha256, byte counts, gate names -- so a ladder verifies them with no judgement at all. This organ is the correction. ---------------- THE ASYMMETRY, MEASURED, AND THE WHOLE REASON THIS ORGAN IS SUBTLE ---------------- Debt 1785471390 cites sha256 d7f1316d.. / 35043B for nx_adopt. The LIVE nx_adopt.elf measures sha256 5018513b.. / 36030B -- MISMATCH, because the organ was REBUILT after the row was filed. Yet the fix IS present (calling nx_adopt returns the full report the row said was EMPTY). => A SHA/BYTE CITATION IS A STRONG POSITIVE AND A WEAK NEGATIVE. MATCH => CONFIRMED (definitively that build is live) MISMATCH => INCONCLUSIVE. **NEVER "REFUTED".** A confirmer that read mismatch as "unfixed" would emit FALSE NEGATIVES on every rebuilt organ, i.e. on most of the corpus. Same family as the banked law BINARY GREP IS VALID ONE WAY ONLY. ---------------- HARD CONSTRAINTS (non-negotiable, enforced by construction) ---------------- 1. READ-ONLY. This organ NEVER eats a row and NEVER writes outside its own stdout. A bug here can only MIS-REPORT, never mark an unfixed problem solved. That is why it was safe to build at all. 2. TERNARY verdicts. There is NO refuted rung: absence of evidence is INSUFFICIENT, never a denial. 3. It COMPOSES nx_filehash rather than reimplementing sha256 (rule 15) -- one hasher, one truth. usage: nx_debtconfirm check <organ.elf> [expect-sha|-] [expect-bytes|-] nx_debtconfirm selftest exit 0=CONFIRMED 6=INCONCLUSIVE 7=INSUFFICIENT 2=usage 4=I/O license_tier: ORIGINAL No hw writes (Rule 26). expect_exit: 0