code wiki / _hdl_build / nx_gen_authz_gate.nx

nx_gen_authz_gate.nx

buildroot/runtime/_hdl_build/nx_gen_authz_gate.nx

3859 B61 linesdepth 13pulls 25 transitivereach 0 importersview sourcekind gate/prooftopic gen
docsdependenciesstructsconstsfunctions

about

nx_gen_authz_gate.nx -- proves the AREA-APPROVAL authZ (operator 2026-06-24: "use my nishifamily login + OPAQUE allows access to NEW areas they're approved on"). REUSES the existing entitlement engine (nx_hr_entitle): grant /gen to a handle via he_ent_put (the rollout/approval action), then he_has_access gates per-area. NO new auth realm. GREEN iff: granted->access, NOT-granted->denied (deny-by-default), public "*"->all, owner(super)->all, unknown-area->denied. license_tier: ORIGINAL

dependencies 3 imports · 0 importers

nx_hr_entitle.nx nx_syscalls.nx nx_gate_verdict.nx nx_gen_authz_gate.nx

imports: nx_hr_entitle.nxnx_syscalls.nxnx_gate_verdict.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main ga_p sys_write he_ent_put he_ent_has he_ent_count ss_open ss_open2 ss_open3 sys_mmap nxa_die sys_write ↻ sys_exit nxa_lock_take nxa_lock_addr sys_write ↻ nxa_lock_give nxa_lock_addr ↻ nxa_report_overrun sys_write ↻ nxa_dump_printable nxa_dump_sizes ss_hget sys_mmap ↻ ss_len ss_hlocate ssl_hash_raw ss_r32 ss_r32 ↻ ss_idx_find ss_r32 ↻ ss_len ↻ ss_kcmp he_atoi_n ss_close ss_close_seg sys_munmap ss_aux_free_row sys_munmap ↻ ss_manifest_free

structs

none

consts

10const GA_ENT: *u8 = "knowledge/status/gen_authz_test_ent-"

functions

12func ga_p(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
called by 1: main calls 1: sys_write
13func ga_pn(v: i64) -> i64
called by 1: main calls 2: sys_mmapsys_write
21func main() -> i64