nx_domain_admit.nx

nx_domain_admit.nx -- THE REFUSING ADMISSION GATE for a /compare domain. Specified but never built: knowledge/compare/ADMISSION_STANDARD.txt ends with an ENFORCEMENT RUNG that says COMPOSE the admission checks from the instruments that already exist and wire it into the authoring lane so a new .matrix cannot publish without passing. Measured 2026-08-06: 0 matches for nx_domain_admit across 50,386 files. The standard existed as prose and nothing refused against it, which is exactly the estate's central defect -- a rule that scores nothing changes nothing. WHAT THIS ENFORCES (the mechanical subset; the rest is reported UNVERIFIED, never faked GREEN): C1 SYMBOL GROUNDING -- every non-_ABSENT_ row's symbol must occur, ON A WORD BOUNDARY, inside the organ the row itself declares. This is the liar-kill check: it is what stops a matrix asserting coverage that no file backs. A prefix or substring hit does NOT count (the standard names 11 prefix rows repaired in arrears; a bare substring is how they passed in the first place). C2 RIVAL BARS -- knowledge/barcheck.conf must carry at least one pinned row for the domain, OR the matrix header must explicitly declare the bars UNPINNED. An unpinned comparison is unfalsifiable; the standard permits saying so out loud and forbids staying silent. C3 EXECUTABLE EVIDENCE -- knowledge/compare/<domain>.gates must exist and be non-empty, else the domain is CLAIM-ONLY and must say so. C4 FRESH-KILL -- every gate the <domain>.gates map declares, partitioned by its durable bite record: bite-proven / never-bitten / bitten-but-zero-kill. Reports, does not refuse. C5 SECOND METHOD CLASS -- the signed experiential row, READ and cryptographically VERIFIED through the estate's one verifier (at_verify_row), in THREE states that must never collapse into each other: SIGNED / UNSIGNED-CANDIDATE / ABSENT, plus a separately declared SIGNED-BUT-REFUSED. Reports. C6 STAMP AND BOARD -- ALWAYS ABSTAINS, and names which conjunct it could not evaluate. The stamp half is read from knowledge/status/evstamp_<domain>.verdict (forking the producer measured ~25 s per domain); the board half is structurally unavailable, because nx_sota_status has no `why <domain>` verb and publishes no per-domain verdict at all. An abstention that names its dead conjunct is a measurement; a bare UNVERIFIED is not, and a bare UNVERIFIED is what this organ printed for both of these from the day it was written until 2026-08-25. EXIT: 0 = ADMIT, 1 = REFUSE, 2 = usage, 3 = matrix unreadable. A REFUSE is not a failure of the domain -- the standard says an unproven domain is admitted as HONESTLY UNPROVEN when it declares that. This gate refuses SILENT unprovenness, not unprovenness. 100% sovereign. No hardware writes (Rule 26). license_tier: ORIGINAL expect_exit: 0