nx_external_path_audit.nx

nx_external_path_audit.nx -- NR-1.5 of NISHI_ROUTER_CONTROL_ROADMAP. Bits-up health check for the public WAN path. Runs on the NAS (or any host with internet egress); periodically tries to TCP-connect from this host's OUTBOUND interface to its OWN public IP on :443. Logs OK / TIMEOUT / REFUSED per check + writes a verdict file the operator (or other Nishi substrate) can grep. Today's outage (2026-05-21) revealed the operator had ZERO bits-up signal that the router was dropping inbound :443. Friend reports via Waterfox console blowups are NOT a substrate signal. This is. V1 simplicity: - Hardcoded public IP (75.28.18.94) + port (443). NR-1.5b adds DNS- resolved lookup so it auto-tracks WAN IP changes. - Loops forever (5 sec interval). No daemon-level scheduling -- just run under nx_supervisor_run. - Writes one line per probe to /tmp/nx_external_path.log (path configurable via env in V2). V2 sub-stones: - NR-1.5b: resolve target via our sovereign DNS, not hardcoded IP - NR-1.5c: emit signals through D5 nx_metrics (instead of /tmp log) - NR-1.5d: per-port audit (probe :443 AND :80 AND :8443 etc) - NR-1.5e: tail-and-alert mode (push alert when verdict changes)