code wiki / _hdl_build / nx_hr_gate.nx

nx_hr_gate.nx

buildroot/runtime/_hdl_build/nx_hr_gate.nx

4904 B65 linesdepth 11pulls 19 transitivereach 0 importersview sourcekind gate/prooftopic hr
docsdependenciesstructsconstsfunctions

about

nx_hr_gate.nx -- referee for NISHI HR (the S-class user-management SSOT). PROVES the lifecycle + deny-by-default: enroll operator(3)+family(1) -> resolve 3 / 1 · unknown cred -> 0 (deny-by-default) suspend family -> resolve 0 (LEAK-CHECK: a suspended user grants nothing) · set_role 1->3 -> resolve 3 hr_cred_id stable (provision-by-handle id == re-derived id) · append-only (history records > current users) GREEN iff every row matches. Prints verdict=GREEN to STDOUT *and* returns the exit code. Durable -> knowledge/status/hr_gate.log. license_tier: ORIGINAL

dependencies 3 imports · 0 importers

nx_hr.nx nx_g_puts_lib.nx nx_syscalls.nx nx_hr_gate.nx

imports: nx_hr.nxnx_g_puts_lib.nxnx_syscalls.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main g_puts sys_write gtrunc sys_openat_wr sys_close sys_mmap chk g_puts ↻ g_num sys_mmap ↻ sys_write ↻ hr_enroll hr_cred_id sys_mmap ↻ nx_ncs_derive_user_id_hash sys_mmap ↻ hr_hexenc hr_append sys_mmap ↻ hr_puts hr_putn sys_mmap ↻ sys_write ↻ sys_close ↻ hr_slen hr_resolve_level sys_mmap ↻ hr_read sys_openat_rd sys_read sys_close ↻ hr_line_end hr_field_end hr_eqrange hr_intrange hr_suspend hr_append ↻ hr_set_role hr_append ↻

structs

none

consts

none

functions

11func g_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 }
called by 2: chkmain calls 2: sys_mmapsys_write
12func g_w(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 }
called by 1: main calls 1: sys_write
13func g_wn(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 }
called by 1: main calls 2: sys_mmapsys_write
14func gtrunc(path: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x1a4); if fd>=0 { sys_close(fd) } return 0 }
called by 1: main calls 2: sys_openat_wrsys_close
15func g_streq(a: *u8, b: *u8) -> i64 { var i: i64=0; while 1==1 { let ca: i64=a[i] as i64; let cb: i64=b[i] as i64; if ca!=cb { return 0 } if ca==0 { return 1 } i=i+1 } return 1 }
called by 1: main
16func chk(got: i64, want: i64, label: *u8) -> i64
called by 1: main calls 2: g_putsg_num
22func main() -> i64
calls 18: g_putsgtruncsys_mmapchkhr_enrollhr_slen+12