code wiki / _hdl_build / nx_host_attest_test.nx

nx_host_attest_test.nx

buildroot/runtime/_hdl_build/nx_host_attest_test.nx

3656 B48 linesdepth 4pulls 4 transitivereach 0 importersview sourcekind gate/prooftopic host
docsdependenciesstructsconstsfunctions

about

nx_host_attest_test.nx -- HOSTATTESTGATE: proves sovereign behavior-attestation. An honest host whose observed probe responses MATCH the spec fingerprint (with >=2 diverse paths agreeing) upgrades NAME-TRUSTED -> BEHAVIOR-ATTESTED. A swapped/poisoned host (one probe response wrong) is REFUSED and stays NAME-TRUSTED (the L2-silicon / L4-OS swap defense, executable). Single-source (paths<2) = auto-distrust. GREEN iff golden attests, swap is caught, single-source is refused. exit 0 on 6/6.

dependencies 2 imports · 0 importers

nx_host_attest.nx nx_syscalls.nx nx_host_attest_test.nx

imports: nx_host_attest.nxnx_syscalls.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main ag_puts sys_write sys_mmap ha_match ha_attest ag_num sys_mmap ↻ sys_write ↻ ha_posture sys_exit

structs

none

consts

none

functions

9func ag_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 }
called by 1: main calls 1: sys_write
10func ag_num(v: i64) -> i64 { let b: *u8 = sys_mmap(28); var m: i64=v; if m<0 {m=0-m}; let t: *u8 = sys_mmap(28); var k: i64=0; if m==0 {t[0]=48;k=1}; while m>0 {t[k]=48+(m%10); m=m/10; k=k+1}; var i: i64=0; while i<k {b[i]=t[k-1-i]; i=i+1}; sys_write(1,b,k); return 0 }
called by 1: main calls 2: sys_mmapsys_write
12func main() -> i64