code wiki / _hdl_build / nx_gen_authz_gate.nx

nx_gen_authz_gate.nx

buildroot/runtime/_hdl_build/nx_gen_authz_gate.nx

2928 B50 linesdepth 13pulls 25 transitivereach 0 importersview sourcekind gate/prooftopic gen
docsdependenciesstructsconstsfunctions

about

nx_gen_authz_gate.nx -- proves the AREA-APPROVAL authZ (operator 2026-06-24: "use my nishifamily login + OPAQUE allows access to NEW areas they're approved on"). REUSES the existing entitlement engine (nx_hr_entitle): grant /gen to a handle via he_ent_put (the rollout/approval action), then he_has_access gates per-area. NO new auth realm. GREEN iff: granted->access, NOT-granted->denied (deny-by-default), public "*"->all, owner(super)->all, unknown-area->denied. license_tier: ORIGINAL

dependencies 3 imports · 0 importers

nx_hr_entitle.nx nx_syscalls.nx nx_gate_verdict.nx nx_gen_authz_gate.nx

imports: nx_hr_entitle.nxnx_syscalls.nxnx_gate_verdict.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main ga_p sys_write he_ent_put he_ent_has he_ent_count ss_open ss_open2 sys_mmap ss_manifest_dyn ss_cat ss_loadfile ss_load_aux2 ssl_total_keys ssl_pow2 ssl_build ss_r32 ssl_lookup ss_manifest_free sys_munmap sys_mmap ↻ ss_hget sys_mmap ↻ ss_idx_find ss_r32 ↻ ss_len ss_kcmp he_atoi_n sys_mmap ↻ he_ent_get sys_mmap ↻ he_idx_key he_itoa sys_mmap ↻ ss_open ↻ ss_hget ↻ canon_decode ud_r32 sys_mmap ↻ he_ent_field

structs

none

consts

10const GA_ENT: *u8 = "knowledge/status/gen_authz_test_ent-"

functions

12func ga_p(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
called by 1: main calls 1: sys_write
13func ga_pn(v: i64) -> i64
called by 1: main calls 2: sys_mmapsys_write
21func main() -> i64
calls 7: ga_phe_ent_puthe_has_accessga_pngv_ctrgv_verdict+1