code wiki / _hdl_build / nx_evoracle_sweep.nx

nx_evoracle_sweep.nx

buildroot/runtime/_hdl_build/nx_evoracle_sweep.nx

15421 B356 linesdepth 3pulls 5 transitivereach 0 importersview sourcekind tooltopic evoracle
docsdependenciesstructsconstsfunctions

about

nx_evoracle_sweep.nx -- DERIVE ORACLE ROWS ACROSS THE THIRD-PARTY POPULATION, on the host that SERVES the claims, and WRITE the attestation file. Separate organ from the single-subject producer on purpose (rule 9): measuring ONE subject and driving a FLEET are different jobs, and the fleet driver has a failure mode the single-shot one does not -- PARTIAL COVERAGE THAT READS AS COMPLETE. So DERIVED / REFUSED / NO-ELF / NOT-GREEN are counted and printed separately and never collapsed. A gate we could not test and a gate that failed must never look the same, or the sweep becomes the thing it audits. PATHS ARE NAS-NATIVE: subjects at buildroot/runtime/_hdl_build/, artifacts at buildroot/_build/. The laptop keeps them at runtime/_hdl_build/ and _build/ -- the artifact-root class this ecosystem has been bitten by five times. Declared here rather than guessed. ROWS ARE UNSIGNED, AND at_verify_row WILL REFUSE THEM. That is the honest end state for an agent: knowledge/attest_keys.conf is absent because nx_fs_write denies paths matching `key`, and an agent that can register its own signing key can certify its own work. This organ supplies the DERIVATION; only a key the operator holds supplies the ATTRIBUTION. license_tier: ORIGINAL expect_exit: 0

dependencies 4 imports · 0 importers

nx_syscalls.nx nx_itoa_lib.nx nx_sha256_wasm.nx nx_evoracle.nx nx_evoracle_sweep.nx

imports: nx_syscalls.nxnx_itoa_lib.nxnx_sha256_wasm.nxnx_evoracle.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main sys_mmap w sys_write bcat one sys_mmap ↻ bcat ↻ sys_read_file sys_openat_rd sys_lseek sys_mmap ↻ sys_read sys_close w ↻ evo_classify evo_self_oracle evo_has evo_find evo_starts evo_cites_spec evo_has ↻ evo_cites_refimpl evo_has ↻ extract_ref evo_find ↻ nx_sha256_one_shot _h_set _sha256_compress _blk_word_be _rotr32 _h_get _sha256_k _h_set ↻ _h_get ↻ hexnib wb sys_write ↻ run_gate sys_fork

structs

none

consts

23const K_MAGIC_1024: i64 = 1024
24const K_MAGIC_65536: i64 = 65536
39const SWEEP_CONF_CAP: i64 = 65536
40const SWEEP_CONF_MAXROWS: i64 = 256
41const SWEEP_TOK_CAP: i64 = 128

functions

26func w(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 }
called by 2: onemain calls 1: sys_write
27func wb(b: *u8, n: i64) -> i64 { sys_write(1, b, n); return 0 }
called by 1: one calls 1: sys_write
33func nn(v: i64) -> i64 { nxi_out(v); return 0 }
called by 2: onemain calls 1: nxi_out
35func hexnib(v: i64) -> i64 { if v < 10 { return 48 + v } return 87 + v }
called by 1: one
50func sweep_line_end(src: *u8, from: i64, n: i64) -> i64
called by 1: sweep_conf_rows
60func sweep_conf_rows(c: *i64, rb: *u8, rl: *i64, path: *u8) -> i64
called by 1: main calls 4: sys_mmapsys_read_filesweep_line_endone
117func bcat(buf: *u8, at: i64, s: *u8) -> i64
called by 2: onemain
122func bcatb(buf: *u8, at: i64, s: *u8, n: i64) -> i64
called by 1: one
127func bcatn(buf: *u8, at: i64, v: i64) -> i64
called by 1: one calls 1: sys_mmap
138func extract_ref(b: *u8, n: i64, out: *u8, cap: i64) -> i64
called by 1: one calls 1: evo_find
179func run_gate(elf: *u8) -> i64
called by 1: one calls 5: sys_forksys_mmapsys_execvesys_exitsys_wait4
200func one(c: *i64, rb: *u8, rl: *i64, name: *u8, scope: *u8) -> i64
called by 2: sweep_conf_rowsmain calls 14: sys_mmapbcatsys_read_filewevo_classifyextract_ref+8
298func main() -> i64
calls 9: sys_mmapwbcatonesweep_conf_rowssys_openat_wr+3