nx_iot_hub_tenant_gate.nx

nx_iot_hub_tenant_gate.nx -- proves IoT multi-tenancy is the NISHI HR SPINE, not a bespoke store: - HR level -> IoT tier mapping (owner/family/deny) - per-HOUSE isolation BY CONSTRUCTION: enroll owner of house_b; resolved against house_a -> DENY (same handle, different realm = different cred = level 0) -- the key sharding proof - level drives the tier: house_a owner=OWNER, house_a family=FAMILY, stranger=DENY, suspended=DENY - the DENY render leaks NO devices + NO control forms; FAMILY/OWNER do; OWNER alone gets /home/manage Uses a fresh temp HR store (unlinked first for determinism). expect_exit: 0 license_tier: ORIGINAL