nx_fw_real_flash_gate.nx

nx_fw_real_flash_gate.nx -- never-brick golden recovery on a REAL UEFI artifact. Proves the safe-flash mechanism (sovereign sha256 integrity + dual-image golden recovery) works on the ACTUAL sovereign UEFI boot stub _offc/nx_boot_uefi.efi (a 1024-byte PE32+ EFI_APPLICATION emitted by nx_boot_uefi), not just a synthetic payload: T0 real-efi-loaded : _offc/nx_boot_uefi.efi reads as a non-trivial image T1 clean-reflash-ok : re-flash the real image cleanly -> FW_OK + bootable N2 midflash-recovered : corrupt the real image mid-flash -> FW_RECOVERED + bootable T2 recovered-bytes-exact: the recovered payload is BYTE-IDENTICAL to the original .efi GREEN only if all four hold. Evidence -> knowledge/status/fw_real_flash_gate.log. HONEST: the image is still NXFW-wrapped (sha256 over the real .efi bytes); it is NOT yet BOOTED inside nx_emu_uefi (that execution-proof is the next sub-rung). Sovereign: imports the safe-flash organ (-> nx_sha256) + nx_framed_append + nx_syscalls. license_tier: ORIGINAL