nx_forkcensus.nx

nx_forkcensus.nx -- WHICH FORKED BINARIES DO NOT EXIST? A census of every "<path>.elf" string literal in a source tree, RESOLVED against the filesystem and classified by DURABILITY. THE MEASURED PROBLEM (debt 1786073817). _timer_irq_gate forked "/tmp/nx_timer_irq_emit.sov.elf" -- the VOLATILE build-time twin -- while every other fork in the SAME FILE already used _offc/. /tmp is cleared on idle, so the moment that happened the gate printed reason=emit-failed forever and indicted the KERNEL for a missing temp file. The emitter was never broken: run directly it still wrote its image (84 B, golden=BT). Repointing that ONE literal flipped the gate RED -> GREEN 2/2. A grep then found 490 such literals over 255 files, 151 of them gates -- and nobody knew how many were DEAD, because a grep can find the string but only the filesystem can say whether the target exists. A GREP FINDS THE CLAIM; ONLY A STAT SETTLES IT. Classes, in the order that matters for repair: VOLATILE-MISSING under /tmp/, absent NOW -- dead, silently. THE ACTIONABLE SET. DURABLE-MISSING under _offc/ or the root, absent -- dead, loudly (exit 127 = NOT-FOUND). VOLATILE-PRESENT under /tmp/, present NOW -- ALIVE ONLY UNTIL THE NEXT /tmp SWEEP. DURABLE-PRESENT durable path, present -- correct. VOLATILE-PRESENT is not a pass. It is the same defect between cleanups, and reporting it as healthy is how this class stayed invisible: every one of the 151 looked fine on the day it was written. usage: nx_forkcensus [dir] [mode] dir default buildroot/runtime/_hdl_build mode dead (default, prints the two MISSING classes) | all | summary | repairable | subjects exit 0 ALL-RESOLVABLE · 1 MISSING (a durable subject is absent from the CWD and from every deploy root in knowledge/forkcensus_roots.conf, and not in knowledge/forkcensus_allow.conf) · 3 UNPROVEN (unsound arithmetic / cap hit / nothing scanned) `subjects` prints the deduped remedy worklist: ALLOWED | REPAIR-OFFC-INSTALL | PRESENT-OTHER-ROOT | BUILD | PHANTOM | ALT-SPELLING -- the last line is always the verdict (positional anchor). KNOWN IMPRECISION (stated, not hidden): a caller that probes SEVERAL candidate paths in order registers every non-winning candidate as a dead literal; the subject then prints as ALT-SPELLING (binary present) or PRESENT-OTHER-ROOT, never as clean. Read the caller. SHIP-PROOF 2026-08-07: this line was added solely to prove /api/ship moves the LIVE artefact in one call. staged==live proves nothing when the source is unchanged -- the binary must actually change. license_tier: ORIGINAL expect_exit: 0