nx_iot_discover.nx

nx_iot_discover.nx -- universal multi-vendor device DISCOVERY brain. Roadmap: NISHI_IOT_HUB_ROADMAP.md Epoch 1 (DISCOVER), rung D1. Operator ask (2026-06-22): "it needs a discovery mechanism like all the hardware discovery" -- find EVERY device on the LAN and figure out what each one is, WITHOUT knowing brands in advance. This is the DISCOVERY ORCHESTRATOR that ties the existing thin organs into one pass: a captured datagram (raw bytes + source port + source IP + optional MAC) goes IN; a classified, de-duplicated logical device in the anchor registry comes OUT. It composes -- it duplicates nothing: - nx_iot_local_kasa : decrypt the autokey-XOR :9999 replies + confirm sysinfo (the one wire format nx_iot_announce's first-byte classifier could not read) - nx_iot_classify : fuse 4 signals (reply / OUI / port / SSID) -> vendor - nx_iot_anchor : idempotent adopt keyed by stable hardware id -> re-discovery RE-ADOPTS (no duplicate-on-repair) The live socket sweep (rung D2) calls nx_iot_disc_ingest once per captured datagram; this brain has NO sockets so it is deterministic, portable across every nxc2 backend, and hard-gateable with canned beacons. NEVER-BRICK (CLAUDE.md #26): discovery is READ-ONLY classification plus an ADDITIVE in-memory registry adopt (soft-state, #13). It emits no device write of any kind -- brick-safe by construction; there is no firmware path here to prove safe because none exists. UNKNOWN is a FIRST-CLASS result (no silent drop): an unrecognised device still anchors + gets a logical id, so the hub can active-probe / build a driver for it later (operator's "build it autonomously" path). genealogy_id: NISHI_IOT_HUB_ROADMAP.md Epoch 1 + project-iot-hub-multi-vendor-kickoff-2026-05-16 license_tier: ORIGINAL nx_capability_claims: needs: [pointer_arithmetic] provides: [universal_discovery_ingest, kasa_reply_decode, fused_vendor_classify, dedup_by_hardware_id, unknown_is_first_class, measured_duplicates_prevented] safety: [no_unchecked_deref, no_floating_point, no_syscall,