code wiki / _hdl_build / nx_hr_access_gate.nx

nx_hr_access_gate.nx

buildroot/runtime/_hdl_build/nx_hr_access_gate.nx

5911 B77 linesdepth 17pulls 52 transitivereach 0 importersview sourcekind gate/prooftopic hr
docsdependenciesstructsconstsfunctions

about

nx_hr_access_gate.nx -- referee for the shared access adapter (nx_hr_access). Registers + logs in real OPAQUE sessions, then PROVES the session->HR-level resolution that gallery/hub would gate on: owner session -> level 3, is_super=1, gate(required=3) serves ; member -> level 1, gate(3) DENIED, gate(1) serves ; ★ a VALID session for a user NOT enrolled in HR -> level 0, gate(1) DENIED (authentication != authorization) ; ★ SUSPEND the member in HR -> the same valid token now resolves to 0 (HR is consulted per request) ; garbage token -> 0 ; hac_allows threshold math. GREEN iff every row matches. -> knowledge/status/hr_access_gate.log.

dependencies 5 imports · 0 importers

nx_hr_access.nx nx_opaque_login.nx nx_hr.nx nx_hr_admin.nx nx_syscalls.nx nx_hr_access_gate.nx

imports: nx_hr_access.nxnx_opaque_login.nxnx_hr.nxnx_hr_admin.nxnx_syscalls.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main sys_mmap g_w sys_write g_mkpfx sys_mmap ↻ sys_now_ms sys_mmap ↻ sys_clock_gettime_mono gtrunc sys_openat_wr sys_close olg_ctx_setup olg_ctx_setup_ttl nx_uas_server_keys_load_or sys_mmap ↻ sys_read_file sys_openat_rd sys_lseek sys_mmap ↻ sys_read sys_close ↻ _uas_hex_dec _uas_nib nx_csprng_fill sys_mmap ↻ nx_csprng_urandom_path sys_openat_rd ↻ sys_read ↻ sys_close ↻ nx_opq_derive_keypair sys_mmap ↻ _voprf_load_context_string u256_alloc nx_scratch nx_opq_hash_to_scalar sys_mmap ↻ nx_h2c_expand_message_xmd_ u256_alloc ↻ _opq_reduce_48be_mod_n

structs

none

consts

none

functions

13func g_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
called by 3: g_ng_rowmain calls 1: sys_write
14func g_n(v: i64) -> i64 { var m: i64=v; if m<0{g_w("-" as *u8);m=0-m} let t:*u8=sys_mmap(24); var k:i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var i:i64=0; let o:*u8=sys_mmap(24); while i<k{o[i]=t[k-1-i];i=i+1} sys_write(1,o,k); return 0 }
called by 2: g_rowmain calls 3: g_wsys_mmapsys_write
15func g_row(id: *u8, got: i64, want: i64, pass: *i64) -> i64 { g_w(" " as *u8); g_w(id); g_w(" got="); g_n(got); g_w(" want="); g_n(want); if got==want { g_w(" OK\n" as *u8); pass[0]=pass[0]+1 } else { g_w(" FAIL\n" as *u8) } return 0 }
called by 1: main calls 2: g_wg_n
16func gw(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 }
called by 1: main calls 1: sys_write
17func gtrunc(path: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x1a4); if fd>=0 { sys_close(fd) } return 0 }
called by 1: main calls 2: sys_openat_wrsys_close
18func g_mkpfx(base: *u8, ms: i64, out: *u8) -> i64 { var o: i64=0; while base[o]!=(0 as u8){out[o]=base[o];o=o+1} let t: *u8=sys_mmap(28); var m: i64=ms; var k: i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var z: i64=k-1; while z>=0{out[o]=t[z];o=o+1;z=z-1} out[o]=0 as u8; return o }
called by 1: main calls 1: sys_mmap
20func main() -> i64
calls 21: sys_mmapg_wg_mkpfxsys_now_msgtruncolg_ctx_setup+15