nx_http_template.nx

nx_http_template.nx -- sealed-enum context-typed HTML templates. Production-class template engine with STRUCTURAL XSS prevention. Every variable substitution flows through nx_html_render's typed-context escape primitive (which closes CWE-79 at the substrate boundary). Substrate doesn't trust callers to remember to escape -- the template syntax FORCES context declaration. Template syntax: <h1>Hello, {{ name }}!</h1> (default TEXT context) <a href="{{ url | url }}">click</a> (URL context) <div class="{{ cls | attr }}">... (ATTR_DQ context) <p>{{ html_fragment | raw }}</p> (RAW; audited bypass) Unknown modifiers reject the entire template (BAD_MODIFIER verdict). This makes "I forgot to escape" structurally impossible. Per cardinal feedback-no-third-party-trust-native-or-nothing: substrate's own template engine; no Twig, no Handlebars, no Jinja, no Mustache. ~300 LOC; auditable. Per cardinal feedback-defensive-at-boundaries-trusting-internally: the template VAR LOOKUP is at the boundary; once a variable is substituted with the correct escape, the resulting bytes are trusted as safe HTML. nx_capability_claims: needs: [sealed_enum, byte_ops, html_render_typed_context] provides: [template_emit_with_context_typed_substitution, structural_xss_prevention_at_template_layer] safety: [no_unchecked_deref, no_floating_point, no_syscall, bounded_iteration, xss_prevented_by_construction] verdict: [sealed_enum_6_state] license: ORIGINAL kind: racing_crew_specialist layer: L4 (composite over L2 nx_html_render)