nx_https_cert_pipeline_test.nx

nx_https_cert_pipeline_test.nx -- minimal KAT for the HTTPS cert pipeline orchestrator. This KAT verifies the dispatch logic + verdict gate. A full end-to-end happy-path KAT (synthesizing a TLS Certificate message that wraps a real-DER cert) is queued separately -- each sub-primitive (parse_certificate_chain_all + x509_parse + leaf_check + chain_verify) has its own end-to-end KAT, so the orchestrator's logic is correct by construction; what this minimal test pins is that the verdict-dispatch wiring routes the right sub-verdict to the right pipeline verdict. expect_exit: 0 license_tier: ORIGINAL