nx_import_qualified_gate.nx

nx_import_qualified_gate.nx -- LN14 QUALIFIED IMPORTS: the referee for runtime/nx_import.nx's `import "m.nx" as ns` / `ns::name` rung. WHAT IT PROVES, and the shape of the proof: 1. THE CENSUS IS MEASURED, NOT INHERITED. The matrix row this rung hangs off cites "22 shadow collisions found 2026-06-23". That number is a measurement with a date on it, so this gate RE-TAKES it every run over the full population of runtime/ and runtime/_hdl_build/ (composing nx_janitor_dupname, the organ that already owns that walk -- there is no second ruler here) and prints what it finds, with the SHADOW/COPY/ UNREADABLE partition reconciled against the total. 2. A REAL COLLISION FROM THAT CENSUS IS THE FIXTURE. The gate picks the first collision whose two copies genuinely DIFFER and which declares at least one top-level name in BOTH copies, then compiles two programs that import both copies: one plainly, one with the _hdl_build copy qualified. Plain must fail; qualified must build clean. The candidate is checked for solo buildability FIRST, so a RED cannot be a red for some unrelated reason. 3. TWO REAL COMPILERS, NOT A SYNTHESISED MUTANT. Every fixture is built with the CHALLENGER passed in argv AND with the live baseline _offc/nx_cc_sovereign.elf. The qualified program must build under the challenger and must be REFUSED by the baseline: that pair is the bite, and neither half is available to a gate that only ever sees one compiler. 4. EVERY REFUSAL NAMES ITS RULE. The three neg-controls do not merely check "was it refused" -- each greps the compiler's own stderr for the exact rule token nx_import.nx emits (ALIAS-UNKNOWN-NAMESPACE, ALIAS-NO-SUCH-EXPORT, ALIAS-MODULE-ALREADY-IMPORTED). A mutant that disabled one check but still refused for a different reason passes a "was it refused" suite and fails this one. 5. POSITIVE CONTROLS, BECAUSE A GUARD THAT REFUSES EVERYTHING PASSES EVERY NEGATIVE TEST. An ordinary unaliased fixture must BUILD AND RUN under both compilers, and the shipping resolver must still resolve every import edge in the compiler's own closure, bound to the count of files it spliced. Without those, a noexec mount or a missing assembler reads as a verdict about the language.