nx_fw_capstone_gate.nx

nx_fw_capstone_gate.nx -- the WHOLE-STACK never-brick capstone, on a REAL artifact, EXECUTED. Ties the entire arc together: the real _offc/nx_boot_uefi.efi is wrapped as SIGNED UEFI capsules (real EFI_CAPSULE_HEADER + ed25519, rung 11) into A/B banks + an immutable factory; selection is SIGNATURE-gated (uc_verify); a forged image planted in the active bank is rejected and the system falls back to a signed survivor, which is UNWRAPPED and ACTUALLY BOOTED in nx_emu_uefi (-> NISHI). C1 forged-active-survivor-boots : forged active -> signed survivor selected -> emu rc==0 (boots NISHI) C2 double-fault-signed-factory : forged A + garbage B -> the signed immutable factory is selected C3 all-forged-not-selectable : banks + factory all forged/garbage -> select null (never boot a forgery) GREEN only if all three hold. ONE emu fork (bounded reads keep fork cheap). The emu must be pre-built: ./_offc/nx_sov_build_run.elf nx_emu_uefi. Evidence -> knowledge/status/fw_capstone_gate.log. Sovereign: nx_fw_uefi_capsule (-> nx_fw_capsule -> nx_ed25519) + nx_framed_append + nx_syscalls. license_tier: ORIGINAL