code wiki / (root) / nx_https_fetch_lib_gate.nx

nx_https_fetch_lib_gate.nx

buildroot/runtime/nx_https_fetch_lib_gate.nx

8127 B146 linesdepth 21pulls 140 transitivereach 0 importersview sourcekind gate/prooftopic https
docsdependenciesstructsconstsfunctions

about

nx_https_fetch_lib_gate.nx -- runtime proof for the fetch composition extracted out of nx_https_get_cli.nx into nx_https_fetch_lib.nx (2026-07-31). WHY A LIVE FETCH AND NOT A MOCK: the thing being refactored is a TLS 1.3 handshake, a cert-chain validation and a chunked HTTP read. A mock would prove only that the function names still resolve. The whole risk of lifting this code is that some piece of state the old main() set up implicitly is now missing -- and only a real handshake against a real endpoint can show that. ★ A REFACTOR OF A CROWN-JEWEL PATH IS NOT DONE UNTIL THE BEHAVIOUR IS RE-PROVEN. license_tier: ORIGINAL

dependencies 3 imports · 0 importers

nx_https_fetch_lib.nx nx_gate.nx nx_gate_verdict.nx nx_https_fetch_lib_gate.nx

imports: nx_https_fetch_lib.nxnx_gate.nxnx_gate_verdict.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main gw sys_write hf_store_load nx_trust_store_load_from_c sys_mmap sys_read_file sys_openat_rd sys_lseek sys_mmap ↻ sys_read sys_close nx_nss_certdata_parse sys_mmap ↻ _pat_class_cert _pat_value_octal _pat_end _find_newline _starts_with _parse_octal_line sys_mmap ↻ _is_space _decode_octal_escape _is_octal trust_store_alloc sys_mmap ↻ nx_x509_trust_store_load sys_mmap ↻ x509_parse sys_mmap ↻ asn1_cursor_init asn1_expect_tag sys_mmap ↻ asn1_read_tlv_header asn1_read_length x509_read_tlv sys_mmap ↻ asn1_expect_tag ↻ x509_read_alg_id sys_mmap ↻

structs

none

consts

16const FL_CAP: i64 = 1048576

functions

18func fl_has(b: *u8, n: i64, s: *u8) -> i64
33func main() -> i64