nx_gcode_manifest.nx

nx_gcode_manifest.nx -- per-print provenance manifest emitted as G-code header comments. Carries a BLAKE2b digest of every input to the slicer (mesh, config, machine graph, material profile, slicer commit) so a printed artefact -- or a failed print -- maps deterministically back to the exact slicer state. Per cardinal feedback-end-to-end-bit-traceability-architecture + roadmap NISHI_3D_PRINT_ROADMAP §2.5: no SOTA slicer in May 2026 (OrcaSlicer, PrusaSlicer, Bambu Studio, SuperSlicer) embeds source-mesh provenance in their G-code output. This is a clean- room EXCEED axis with no prior art to match against. Conceptually distinct from: - nx_provenance.nx -- license-class source gate (different role) - nx_attest.nx -- substrate-wide Merkle chain log (this primitive can be COMPOSED to feed the chain in a later phase; see P0.2 notes) Manifest format (human-readable text, valid G-code comments): ; NX_GCODE_MANIFEST_V1 ; mesh.blake2b <128 hex chars> ; config.blake2b <128 hex chars> ; machine.blake2b <128 hex chars> ; material.blake2b <128 hex chars> ; slicer.sha <substrate build hash, caller-supplied> ; manifest.blake2b <128 hex chars over all preceding lines> All hashes are BLAKE2b-512 (per substrate convention -- nx_blake2b is the shipped primitive; nx_blake3 is queued for a later session). Final "manifest.blake2b" line covers exactly the bytes of every preceding line in the buffer, making the manifest self-attesting: tampering with any earlier line breaks the final hash check. G-code consumers (Klipper, Marlin, RepRapFirmware, Bambu firmware) uniformly skip semicolon-prefixed lines -- this manifest has zero effect on print behaviour. license_tier: ORIGINAL