nx_image_access_gate.nx
buildroot/runtime/nx_image_access_gate.nx
about
nx_image_access_gate.nx -- referee for the search-by-image OPERATOR-ONLY access policy.
PROVES "only my access, not internet or others" as a deny-by-default / fail-closed decision matrix:
required level == OWNER (3)
level 0 (anonymous internet) -> DENY level 1 (family) -> DENY level 2 -> DENY
level -5 (garbage) -> DENY (fail-closed)
level 3 (OWNER / operator) -> ALLOW <-- the ONLY level that gets in
GREEN iff every below-OWNER level is denied AND owner is allowed (liar-kill: a single below-owner ALLOW
= a public LEAK = RED). Durable verdict -> knowledge/status/image_access_gate.log. license_tier: ORIGINAL
dependencies 1 imports · 0 importers
imports: nx_image_access.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 11 | func g_puts(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } called by 1: main |
| 12 | func g_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } called by 1: main |
| 13 | func g_w(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 } called by 1: main |
| 14 | func g_wn(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 } called by 1: main |
| 16 | func main() -> i64 |