code wiki / _hdl_build / nx_docportal_admin_gate.nx
nx_docportal_admin_gate.nx
buildroot/runtime/_hdl_build/nx_docportal_admin_gate.nx
about
nx_docportal_admin_gate.nx -- MEASURED gate for the admin.<domain> document-portal handler. Self-contained
(nx_status_daemon pattern: craft HTTP request byte-buffers, call da_handle directly, assert the response bytes
AND the real side effects in the sovereign store -- no socket, no fork, deterministic). Proves the admin
capability the operator asked for: authenticated per-domain upload with public/private classification + RBAC
deny-by-default.
T1 authed client upload (level 1) -> 200 OK + UPLOADED, and the doc is in the domain's PUBLIC shard
T2 anonymous upload (level 0) -> 401 Unauthorized, and NOTHING is ingested (deny-by-default)
T3 private upload routing -> lands in the PRIVATE shard, not the public one
T4 per-domain isolation -> the upload is not readable from another domain's shard
T5 unknown route -> 404
GREEN iff 5/5. Appends knowledge/status/docportal_admin_gate.log. license_tier: ORIGINAL
dependencies 2 imports · 0 importers
imports: nx_docportal_admin_lib.nxnx_g_puts_lib.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 15 | func g_num(v: i64) -> i64 called by 1: main |
| 23 | func g_w(fd: i64, s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(fd, s, n); return 0 } called by 1: main |
| 24 | func g_wn(fd: i64, v: i64) -> i64 called by 1: main |
| 30 | func g_contains(hay: *u8, n: i64, ndl: *u8) -> i64 called by 1: main |
| 38 | func g_mkreq(out: *u8, head: *u8, body: *u8, blen: i64) -> i64 called by 1: main |
| 44 | func g_slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n } called by 1: main |
| 46 | func main() -> i64 |