nx_gate_build_sweep.nx

nx_gate_build_sweep.nx -- THE UNBUILT-GATE PARTITIONER (2026-07-31, ws=gate-dry-d001). WHY: nx_gatebuilt_gate measures gate_sources=2891 built=232 UNBUILT=2659 (built_permil=80) and states the law -- AN UNBUILT GATE IS INDISTINGUISHABLE FROM A PASSING ONE IN EVERY REPORT THAT MENTIONS IT. But it stops at the COUNT. A count cannot tell you whether those 2659 are merely NEVER-COMPILED (cheap: nobody ran the builder) or GENUINELY BROKEN (real defects hiding behind a number). Those two populations need opposite remedies, and conflating them is the same class of error as a MISSING X vs a WEDGED X. A hand spot-check of 4 (nx_cap_keygen_gate/nx_coindex_gate/nx_anti_slop_gate/nx_warc_index_gate) built 4/4 CLEAN on the first try -- which says the population is probably mostly the cheap kind, but 4 is a spot check and MUST NOT be banked as a measurement (a candidate ruler's output is never a measurement). This organ turns the spot check into a census. WHAT IT IS NOT: it does NOT promote. Compiling proves a gate CAN exist; promoting it into the shared prod root is an outward-facing change to a tree seven sibling sessions are using, and belongs to a deliberate operator-authorised step. This organ ONLY partitions, and says so in its own output. ENVELOPE, declared in-band and never silent: FLAT scan of runtime + runtime/_hdl_build relative to the DISCOVERED buildroot (no recursion -- the _attic/_retired/_stage_local shadow trees stay excluded, same envelope as nx_gatebuilt_gate so the two numbers are comparable); every run is BOUNDED by an explicit max (argv[1]) and resumable by an explicit skip (argv[2]) so it can never run away; every build is deadline-bounded (tr_run_capture_to) because ONE hanging compile must not wedge a 2659-target sweep. IDEMPOTENT (rule 10): a target whose /tmp/<t>.sov.elf already exists is SKIP-EXISTS, not rebuilt. ADDITIVE (rule 13): appends one frame per target to an append-only journal; never rewrites history. ANOMALY class, deliberately its own bucket: builder returns rc=0 but NO artifact appears. That is an instrument claiming success it cannot show, and it must never be silently counted as BUILT. usage: nx_gate_build_sweep <max> [skip] [journal] [timeout_ms] argv[1] max REQUIRED, > 0 -- refuse rather than default to unbounded (no silent runaway) argv[2] skip resume offset into the scan order, default 0 argv[3] journal append-only outcome log, default /tmp/gate_build_sweep.jrnl (absolute recommended: this organ chdir's to the buildroot, so a relative path resolves THERE) argv[4] timeout per-build deadline in ms, default 180000 license_tier: ORIGINAL No hw writes (Rule 26).