nx_emu_uefi.nx

nx_emu_uefi.nx -- the sovereign UEFI EXECUTION-PROOF harness (NOS execution gate). A purpose-built minimal x86-64 interpreter WITH a flat memory model + stack + a hooked UEFI SystemTable, just enough to EXECUTE the entry of an emitted nx_boot_uefi*.efi and PROVE it does what it claims -- the in-house analog of running the RV64 boot stub on rv64im_min_sim (no qemu, no real laptop). It sets up a mock SystemTable/ConOut whose OutputString is a sentinel HOOK; when the executed code calls it, we CAPTURE the UTF-16 string it asked to print. A correct nx_boot_uefi prints "NISHI"; the buggy off-by-one variant would capture garbage -- so this is a real gate, not a structural rubber-stamp. Memory is the flat image space with ImageBase=0: .text loaded at its RVA (0x1000), so RIP-relative leas resolve to the real string RVAs. Mock UEFI placed elsewhere in MEM. Decoded forms (exactly what the nx_boot_uefi* / nx_gop_efi emitters produce): 50+r push r64 | 58+r pop r64 | C3 ret | 31 /r xor r/m,r (reg-direct) 48 83 grp1 (add/sub/and/cmp imm8) | 48 C7 mov r64,imm32 | 48 C1/D3 shr | 48 01/29/39 add/sub/cmp 48 31 /r xor r64,r64 (reg-direct) | 48 89 /r mov store | 48 8B /r mov load (disp8/SIB+disp8/disp32/reg) 48 8D lea [rip+disp32] (mod00) or [SIB-base+disp8] (mod01) | B8+rd mov r32,imm32 (zero-extended) FC cld | F3 AB rep stosd (one interpreter step, bounds-refused -34) FF /2 call [base+disp8] (mod01) or call r64 (mod11) -- HOOK-aware EB FE jmp $ -> distinct HOLD return: a painting app KEEPS the screen; the verdict is then decided by MEASURING the modeled framebuffer (color read from the artifact, never assumed): nonzero color AND 100% fill -> PAINTED-AND-HOLDING, anything less -> RED. Mock UEFI hooks: ConOut->OutputString (capture) | BootServices->GetMemoryMap (writes 0x1800) | BootServices->LocateProtocol (GUID-CHECKED: only the GOP GUID is served, wrong GUID -> -33) -> modeled GOP: gop->Mode->FrameBufferBase/Size = a real 1280x800x32 in-MEM framebuffer (mirrors the OVMF oracle mode, so sovereign + foreign engines judge the same geometry). Usage: nx_emu_uefi <path.efi> [expect-prefix] | nx_emu_uefi selftest (4 teeth incl. negative controls) Gate: captured console output begins "NISHI" -> GREEN. Log -> knowledge/status/nishi_os.log Sovereign: syscalls only, no gcc/qemu/.sh. license_tier: ORIGINAL