code wiki / _hdl_build / nx_hr_entitle_gate.nx

nx_hr_entitle_gate.nx

buildroot/runtime/_hdl_build/nx_hr_entitle_gate.nx

7705 B94 linesdepth 13pulls 25 transitivereach 0 importersview sourcekind gate/prooftopic hr
docsdependenciesstructsconstsfunctions

about

nx_hr_entitle_gate.nx -- referee for SUPERUSER-BY-CONSTRUCTION entitlement resolution (nx_hr_entitle). PROVES: * an ACTIVE owner (elderwesto, lvl 3) is entitled to EVERY line even though NONE are keyed to "elderwesto" (auto-access to everything) ; a member (brad) gets only public("*") + own-handle lines (deny-by-default) ; * THE BY-CONSTRUCTION / NO-DRIFT PROOF: append a brand-new resource -> the owner's count auto-increments with ZERO edits to any grant, while the member's count is unchanged ; leak-checks: a member cannot see an admin-keyed resource, and an INVITED (not-yet-active) owner gets NOTHING extra (superadmin requires active). GREEN iff every row matches. Durable -> knowledge/status/hr_entitle_gate.log.

dependencies 5 imports · 0 importers

nx_hr_entitle.nx nx_g_puts_lib.nx nx_hr_admin.nx nx_hr.nx nx_syscalls.nx nx_hr_entitle_gate.nx

imports: nx_hr_entitle.nxnx_g_puts_lib.nxnx_hr_admin.nxnx_hr.nxnx_syscalls.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main g_puts sys_write sys_mmap g_mkpfx sys_mmap ↻ sys_now_ms sys_mmap ↻ sys_clock_gettime_mono hra_enroll hrs_enroll hrs_cred_id sys_mmap ↻ nx_ncs_derive_user_id_hash sys_mmap ↻ hrs_hexenc hrs_put_indexed hrs_seg_committed sys_mmap ↻ ss_manifest ss_manifest_file hrs_itoa sys_mmap ↻ hrs_streq hrs_status_code sys_mmap ↻ hrs_get ss_open sys_mmap ↻ ss_hget canon_decode hrs_field hrs_streq ↻ hrs_streq ↻ hrs_index_count ss_open ↻ sys_mmap ↻ ss_hget ↻ hrs_atoi_n sys_mmap ↻

structs

none

consts

none

functions

14func g_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 }
called by 2: chkmain calls 2: sys_mmapsys_write
15func g_w(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 }
called by 1: main calls 1: sys_write
16func g_wn(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 }
called by 1: main calls 2: sys_mmapsys_write
17func gtrunc(path: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x1a4); if fd>=0 { sys_close(fd) } return 0 }
calls 2: sys_openat_wrsys_close
18func g_mkpfx(base: *u8, ms: i64, out: *u8) -> i64 { var o: i64=0; while base[o]!=(0 as u8){out[o]=base[o];o=o+1} let t: *u8=sys_mmap(28); var m: i64=ms; var k: i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var z: i64=k-1; while z>=0{out[o]=t[z];o=o+1;z=z-1} out[o]=0 as u8; return o }
called by 1: main calls 1: sys_mmap
19func g_writefile(path: *u8, s: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x1a4); if fd<0 { return 1 } var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd, s, n); sys_close(fd); return 0 }
calls 3: sys_openat_wrsys_writesys_close
20func g_append(path: *u8, s: *u8) -> i64 { let fd: i64 = sys_openat_append(path, 0x1a4); if fd<0 { return 1 } var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd, s, n); sys_close(fd); return 0 }
calls 3: sys_openat_appendsys_writesys_close
21func g_contains(hay: *u8, hlen: i64, needle: *u8) -> i64
called by 1: main
28func chk(got: i64, want: i64, label: *u8) -> i64
called by 1: main calls 2: g_putsg_num
34func main() -> i64
calls 17: g_putssys_mmapg_mkpfxsys_now_mshra_enrollhra_invite+11