code wiki / _hdl_build / nx_email_provision_gate.nx
nx_email_provision_gate.nx
buildroot/runtime/_hdl_build/nx_email_provision_gate.nx
about
nx_email_provision_gate.nx -- MEASURED gate for per-domain email provisioning, run for andelinwest.com (the
operator's "finish andelinwest email"). Provisions the domain via nx_email_provision_lib, then proves the WHOLE
mail path is correct for it -- inbound accept policy AND outbound DKIM -- using the real email organs:
T1 DKIM keypair round-trips -> the published pubkey validates this signer (ed25519 sign+verify)
T2 DNS zone structure -> MX/SPF/DKIM/DMARC + selector all present for andelinwest.com
T3 MTA own-domain accept policy -> info@andelinwest.com ACCEPTED, spammer@evil.com REFUSED (no open relay)
T4 end-to-end DKIM outbound -> a message From: postmaster@andelinwest.com signs+verifies; a tampered body fails
Verdict MEASURED from the real organs. GREEN iff 4/4. Appends knowledge/status/email_provision_gate.log and
prints the publishable zone. license_tier: ORIGINAL
dependencies 4 imports · 0 importers
imports: nx_email_provision_lib.nxnx_g_puts_lib.nxnx_email_mta.nxnx_email_send.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 15 | func g_slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n } |
| 16 | func g_w(fd: i64, s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(fd, s, n); return 0 } called by 1: main |
| 17 | func g_wn(fd: i64, v: i64) -> i64 called by 1: main |
| 23 | func g_contains(hay: *u8, hlen: i64, ndl: *u8) -> i64 |
| 30 | func main() -> i64 |