nx_external_reach_probe_test.nx

nx_external_reach_probe_test.nx -- smoke test for the graduated nx_reach_probe_now wire-up against a real public endpoint. Mirrors nx_https_get_live_demo_test pattern: drives a real HTTPS GET against a public server with an EMPTY trust store, asserts the verdict is FAIL_TLS_HANDSHAKE (chain validation rejects without anchors). That proves the reach-probe wire-up successfully completes DNS + TCP + initial TLS bytes -- which IS the reachability signal we want to surface continuously against nishifamily.com from peer hosts. Once trust_store_alloc + Mozilla CA bundle compose into a populated trust store, the same call should return NX_REACH_OK against example.com / nishifamily.com / any reachable HTTPS endpoint. expect_exit: 0 license_tier: PUBLIC_NISHI_SUBSTRATE Composes: nx_external_reach_probe (the primitive under test) nx_https_get (substrate-side network stack) nx_clock_monotonic_ns (timing) nx_x509_trust_store (empty store for handshake-fail probe)