nx_dup_source_check.nx

nx_dup_source_check.nx v3 -- ANTI-CLOBBER cross-tree source-dup detector. 🚨v3 EXISTS BECAUSE v2 WAS AN OOM BOMB THAT TOOK THE NAS DOWN (2026-07-20). Root cause, stated plainly: v2 widened the scan from 2 hardcoded dirs to ALL discovered source trees (78 pairs) -- a good change -- but REUSED v1's `exists()` helper UNCHANGED, and that helper did `sys_mmap(4096)` PER CALL and never unmapped. v1 called it ~15k times (ONE pair) = ~60MB = survivable. v2 called it ~250k times = ~1GB LEAKED PER RUN, on a cron. Result: NAS userspace starved -- kernel still SYN-ACKs but sshd gives no banner, HTTPS returns status=0, even DSM stops answering. ★THE LESSON, so it is never repeated: CHANGING A CALLER'S FAN-OUT RE-COSTS EVERY CALLEE. A 2->78 pair change is a 17x amplifier on an O(files) helper. Reviewing only the code you WROTE is not enough -- you must re-cost the code you INHERITED AND AMPLIFIED. And note what the v2 selftest could NOT do: it was GREEN 4/4 because fixture dirs hold 2-3 files, so it tested the ALGORITHM at scale and never the RESOURCE at scale. A scale-law tooth that asserts only correctness-on-big-input is HALF a tooth; the other half is a RESOURCE bound. v3 FIX: every path buffer is allocated ONCE PER PAIR (or once per walk) and passed down, never per file. Allocation profile is now O(pairs + dirs), not O(files), and it is DECLARED in the output envelope so the property is inspectable rather than assumed. Detection semantics and the emitted " DUP basename: " line are UNCHANGED (rule 19) -- nx_favela_census counts that exact substring out of knowledge/status/dup_source.log. expect_exit:0 when clean.