code wiki / (root) / nx_https_fetch_lib_gate.nx

nx_https_fetch_lib_gate.nx

buildroot/runtime/nx_https_fetch_lib_gate.nx

8127 B146 linesdepth 21pulls 152 transitivereach 0 importersview sourcekind gate/prooftopic https
docsdependenciesstructsconstsfunctions

about

nx_https_fetch_lib_gate.nx -- runtime proof for the fetch composition extracted out of nx_https_get_cli.nx into nx_https_fetch_lib.nx (2026-07-31). WHY A LIVE FETCH AND NOT A MOCK: the thing being refactored is a TLS 1.3 handshake, a cert-chain validation and a chunked HTTP read. A mock would prove only that the function names still resolve. The whole risk of lifting this code is that some piece of state the old main() set up implicitly is now missing -- and only a real handshake against a real endpoint can show that. ★ A REFACTOR OF A CROWN-JEWEL PATH IS NOT DONE UNTIL THE BEHAVIOUR IS RE-PROVEN. license_tier: ORIGINAL

dependencies 3 imports · 0 importers

nx_https_fetch_lib.nx nx_gate.nx nx_gate_verdict.nx nx_https_fetch_lib_gate.nx

imports: nx_https_fetch_lib.nxnx_gate.nxnx_gate_verdict.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main gw sys_write hf_store_load nx_trust_store_load_from_c sys_mmap nxa_die sys_write ↻ sys_exit nxa_lock_take nxa_lock_addr sys_write ↻ nxa_lock_give nxa_lock_addr ↻ nxa_report_overrun sys_write ↻ nxa_dump_printable sys_write ↻ nxa_dump_sizes sys_write ↻ sys_read_file sys_openat_rd sys_lseek sys_mmap ↻ sys_read sys_munmap sys_close nx_nss_certdata_parse sys_mmap ↻ _pat_class_cert _pat_value_octal _pat_end _find_newline _starts_with _parse_octal_line sys_mmap ↻ _is_space _decode_octal_escape _is_octal hf_fetch

structs

none

consts

16const FL_CAP: i64 = 1048576

functions

18func fl_has(b: *u8, n: i64, s: *u8) -> i64
33func main() -> i64