nx_docportal_ingest_gate.nx

nx_docportal_ingest_gate.nx -- the REAL, MEASURED gate for the per-domain document-portal ingest primitive. Self-contained (in-process; no forked CLI, no /tmp staging) per the sovereign-exec doctrine: it drives dp_ingest/dp_read directly against the sovereign seg_store and MEASURES the exceed dimensions of the standard (knowledge/research/2026-06-28-legaldocs-portal-exceed-standard.md): T1 PUBLIC ingest -> stored byte-exact in the public shard AND findable via the SOVEREIGN store-native search (dss_search over the shard's own .terms postings -- NO derived tsv). T2 PRIVATE isolation -> stored in the private shard, NOT in the public shard, and a public dss_search for a private-only term returns 0 (the -prv- shard is physically never opened). [dim #3] T3 CID determinism -> re-ingesting identical bytes yields the SAME content id (idempotent). [dimension #8] T4 cross-domain -> a doc in domain dptest is NOT readable from domain dpother's shard. [dimension #6] T5 integrity -> the private doc reads back byte-exact (immutable, never-delete). [dimension #2] Verdict MEASURED from real store reads + live queries, never asserted. GREEN iff 5/5. Appends to knowledge/status/docportal_ingest_gate.log. license_tier: ORIGINAL