nx_iot_provision_softap_test.nx

nx_iot_provision_softap_test.nx -- gate for the auto-pair state machine. Proves the operator's "no more manual re-pair" outcome as PURE LOGIC, off the LAN, plus the never-brick guarantee (CLAUDE.md #26) mechanically: - sealed-enum validity (state / action / event / fail) - NEVER-BRICK: every action in the alphabet is brick-safe and writes no firmware; the firmware classifier is FAIL-SAFE (an out-of-range / future action defaults to "writes firmware" = RED) - init writes a coherent session; default + override + null guard - pairing-SSID filter routes known vendors, rejects unknown APs - HAPPY PATH end-to-end: SCAN -> JOIN -> PUSH_CREDS -> REJOIN -> VERIFY -> ANCHOR -> DONE, asserting action + state + brick-safety each step, landing a stable logical id with NO manual step - terminal states are sticky + idempotent (CLAUDE.md #10) - every FAILURE path: no-AP, unknown-vendor, join/push/rejoin/verify retries-exhausted, anchor-fail -- each with the right sealed reason - bounded retry RECOVERS (transient join failure then success) - defensive: malformed event is a no-op; null session does not crash Grounded in the live fleet: the pairing SSID is the operator's REAL device, TP-LINK_HS210_C209 (the Kasa HS210 found blinking 2026-06-18). expect_exit: 0 license_tier: ORIGINAL