code wiki / _hdl_build / nx_host_attest.nx

nx_host_attest.nx

buildroot/runtime/_hdl_build/nx_host_attest.nx

1619 B27 linesdepth 3pulls 3 transitivereach 1 importersview sourcekind librarytopic host
docsdependenciesstructsconstsfunctions

about

nx_host_attest.nx -- sovereign BEHAVIOR-ATTESTATION for infra hosts: the mechanism that flips a host from NAME-TRUSTED to BEHAVIOR-ATTESTED in the infra_hosts census, operationalizing nishi-trusting-trust principle #5 (trust by behavior matching spec, NOT by identity) + #3 (single-source = auto-distrust). A host is attested ONLY if its observed probe responses match the spec-expected fingerprint AND >=2 independent probe paths agree. A swapped/poisoned host (wrong response) is REFUSED -- it keeps NAME-TRUSTED and never upgrades. Pure logic; the probes are DATA; the gate proves it with a liar-kill (mismatch caught) + a single-source-distrust control. license_tier: ORIGINAL Composes nx_infra_control (TP_* posture).

dependencies 2 imports · 1 importers

nx_infra_control.nx nx_syscalls.nx nx_host_attest.nx nx_host_attest_test.nx

imports: nx_infra_control.nxnx_syscalls.nx

imported by: nx_host_attest_test.nx

structs

none

consts

none

functions

12func ha_match(observed: *i64, expected: *i64, n: i64) -> i64
called by 1: main
20func ha_attest(matched: i64, paths_agree: i64) -> i64
called by 1: main
27func ha_posture(attested: i64) -> i64 { if attested == 1 { return TP_BEHAVIOR_ATTESTED } return TP_NAME_TRUSTED }
called by 1: main