code wiki / (root) / nx_deploy_guard.nx

nx_deploy_guard.nx

buildroot/runtime/nx_deploy_guard.nx

2990 B54 linesdepth 3pulls 3 transitivereach 0 importersview sourcekind tooltopic deploy
docsdependenciesstructsconstsfunctions

about

nx_deploy_guard.nx -- ENFORCED adversarial deploy gate (census gap #1, the ratchet that makes "adversarial verification is REQUIRED" enforced, not advisory). NO mutating control-plane action (selfswap/deploy/restart/etc.) runs unless the adversarial CI is GREEN: it runs nx_adversarial_ci FAIL-CLOSED, and ONLY on GREEN does it invoke nx_aw_hostctl <sub>. A RED suite -> DEPLOY BLOCKED, nothing changes. Composes _offc/nx_adversarial_ci.elf + _offc/nx_aw_hostctl.elf. Usage: nx_deploy_guard <nx_aw_hostctl-sub> [arg] (e.g. nx_deploy_guard selfswap). license_tier: ORIGINAL

dependencies 2 imports · 0 importers

nx_syscalls.nx nx_itoa_lib.nx nx_deploy_guard.nx

imports: nx_syscalls.nxnx_itoa_lib.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main dg_puts sys_write sys_exit dg_run sys_fork sys_mmap sys_execve sys_exit ↻ sys_wait4 dg_putn nxi_out nxi_fd sys_mmap ↻ ccz_cat_num sys_write ↻ sys_munmap

structs

none

consts

9const DG_CI: *u8 = "_offc/nx_adversarial_ci.elf" as *u8
10const DG_HOSTCTL: *u8 = "_offc/nx_aw_hostctl.elf" as *u8

functions

12func dg_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 }
called by 1: main calls 1: sys_write
17func dg_putn(v: i64) -> i64 { nxi_out(v); return 0 }
called by 1: main calls 1: nxi_out
20func dg_run(path: *u8, a1: *u8, a2: *u8) -> i64
called by 1: main calls 5: sys_forksys_mmapsys_execvesys_exitsys_wait4
39func main(argc: i64, argv: *i64) -> i64
calls 4: dg_putssys_exitdg_rundg_putn