nx_edge_vantage.nx

nx_edge_vantage.nx -- EDGE REACHABILITY AS A SOVEREIGN ORGAN (2026-08-06, debt 1786068787). WHY THIS FILE EXISTS AT ALL. The capability shipped first as nishi-ops/edge_vantage_beat.ps1 -- POWERSHELL, i.e. a borrowed third-party runtime -- which violates the standing law "build NISHI tooling for every need; never default to linux/3rd-party tools where an organ exists or can be built" and rule 27 (shell exists ONLY to launch a sovereign ELF). The operator caught it directly. The MEASUREMENT is irreducibly off-box -- the NAS cannot tell you whether the WAN reaches its own front door, so something must run away from the box -- but NOTHING about that requires PowerShell. The estate already settled this exact shape with nx_content_ship: an organ whose work irreducibly starts laptop-side is still a SOVEREIGN ELF, and the shell is reduced to one launch line. WHAT IT MEASURES, AND WHY IT IS NOT A PING. A pass/fail probe cannot separate "our edge, transient blip" from "answered by the wrong server entirely" -- and for two days the estate's standing answer to any transport error was a memory line about a :443 co-squat that had ALREADY BEEN FIXED on 08-04. So this asks WHO ANSWERED: our sovereign edge stamps X-Served-By, and a co-squatting server cannot. That single header turns folklore into a measurement. DEGRADED IS A DISTINCT VERDICT ON PURPOSE. Collapsing partial reachability into OK is how an intermittent fault hides until it is total; collapsing it into FAIL cries wolf. MEASURED on the PowerShell predecessor: a real window came back 4-of-6 handshakes with the rest clean, which is exactly the state neither OK nor FAIL describes. VANTAGE IS PART OF THE READING, NEVER AN ASSUMPTION -- so it is an ARGUMENT and it is printed. Running this organ ON the NAS and OFF it are DIFFERENT EXPERIMENTS with different correct answers (the NAS hairpin does not necessarily reach our own edge), which makes the same binary its own negative control. A row that does not say where it was taken is not evidence. nx_edge_vantage [url] [n] [vantage-label] license_tier: ORIGINAL No hw writes (Rule 26). expect_exit: 0