code wiki / _hdl_build / nx_evindep_gate.nx
nx_evindep_gate.nx
buildroot/runtime/_hdl_build/nx_evindep_gate.nx
about
nx_evindep_gate.nx -- THE INDEPENDENCE AXIS, LIVE ON THE BOARD THAT JUDGES CLAIMS.
The independence law (nx_evoracle) was live on the NAS but nothing CONSUMED it, so no claim's standing
changed. A capability that beats the baseline in a gate but is not wired at the live chokepoint IS the
baseline -- this ecosystem has paid for that law four times. This organ is the consumer.
WHAT IT ANSWERS, per compare domain that declares executable evidence:
does ANY of its declared gates rest on an authority OUTSIDE this ecosystem?
It reads <domain>.gates, takes the 4th field (the declared SUBJECT SOURCE), and classifies that subject's
party-ness with evo_classify. THIRD => the domain has at least one externally-anchored gate. FIRST or
UNRESOLVED => every gate it declares is graded against answers we wrote ourselves.
★DELIBERATELY A SEPARATE ORGAN FROM nx_sota_status (rule 9). nx_sota_status feeds deploy check #12, and a
sibling is landing a change that makes POST /api/deploy REFUSE on RED. Adding an axis there could flip a
domain and stop every deploy in the ecosystem the hour it shipped. This reports; it never convicts.
★AND IT IS GENUINELY A READ-ONLY VERIFIER, which is why running it through /api/gate_run is honest --
that route executes verifiers only, and that bound is what makes it never-brick. My row-DERIVING organ
(nx_evoracle_sweep) writes a file and is correctly refused by that same route; I did not rename it to
slip past the bound.
★SELF-CHECK TEETH FIRST (T1/T2). A census that silently finds nothing reads exactly like a corpus that
contains nothing -- the single most repeated failure in this ecosystem. So before reporting anything the
organ proves its classifier still separates a known third-party header from a known first-party one, and
FAILS RED if it cannot. An instrument must prove itself before it grades a corpus.
⚠A domain whose .gates file is absent is reported NO-GATES, never skipped: a domain we could not measure
and a domain with no external anchor must never look the same.
license_tier: ORIGINAL expect_exit: 0
dependencies 2 imports · 0 importers
imports: nx_syscalls.nxnx_evoracle.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 31 | func w(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 } |
| 33 | func nn(v: i64) -> i64 |
| 47 | func slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n } called by 1: main |
| 49 | func bcat(buf: *u8, at: i64, s: *u8) -> i64 |
| 59 | func load_subject(rel: *u8, rl: i64, lp: *i64) -> *u8 |
| 81 | func domain(c: *i64, dom: *u8) -> i64 |
| 175 | func main() -> i64 |