code wiki / (root) / nx_ivvbeat.nx

nx_ivvbeat.nx

buildroot/runtime/nx_ivvbeat.nx

22743 B456 linesdepth 5pulls 8 transitivereach 0 importersview sourcekind tool
docsdependenciesstructsconstsfunctions

about

nx_ivvbeat.nx -- the IV+V beat: re-runs the estate's own verification gates and reports DRIFT. WHY THIS EXISTS. The ivvreg- plane holds four rows of desired independent-verification state and, measured 2026-08-07 across buildroot/*.nx (51,707 files), _offc/*.sh (12,433) and knowledge/registry (297) -- every scan marker-confirmed coverage_complete=1 -- NOTHING HAS EVER READ IT. The consumer was specified in data and never built. So this is not a port of anything; the plane IS the spec. (STAR)A DATA PLANE WITH NO CONSUMER IS A SPECIFICATION NOBODY IMPLEMENTED -- IT LOOKS LIKE STATE AND BEHAVES LIKE A TODO. The rows even include a purpose-built negative control, so whoever wrote them knew exactly what the beat had to do. WHAT IT ANSWERS: "do the estate's own gates still pass?" That is the same hole board item 7 named for published surfaces -- nothing was checking -- one level down: nothing checks the CHECKERS. SAFETY. Every exec and every delete is decided by nx_ivvguard, whose predicates are proven 23/23 by nx_ivvguard_gate INCLUDING all four live rows. That gate previously passed 12/12 while the predicate was WRONG, because every fixture in it was fabricated; the four real rows were what exposed it. THE WIPE IS DELIBERATELY NOT IMPLEMENTED IN v1, and each row says so out loud. The wipe column asks for a prefix-glob delete; the verification value -- do the gates still pass -- is fully available without it. (STAR)WHEN THE RISKY HALF OF A CAPABILITY IS NOT REQUIRED FOR ITS VALUE, SHIP THE OTHER HALF FIRST AND MEASURE WHETHER THE RISKY HALF WAS EVER NEEDED. If gates pass unwiped, the delete is unnecessary; if they fail, that is evidence the wipe is load-bearing, and its predicates are already proven and waiting. A row whose wipe spec is UNSAFE is refused outright rather than run dirty -- the author asked for cleaning this beat will not do, so its result would not mean what the row intended. v1 IS REPORT-ONLY BY CONSTRUCTION: it files no debt. A detector's first live run must be readable before it is allowed to write, or its own defects arrive as a pile of authored records. license_tier: ORIGINAL No hw writes (Rule 26). Deletes nothing.

dependencies 4 imports · 0 importers

nx_syscalls.nx nx_store_seed_lib.nx nx_guarded_run.nx nx_ivvguard.nx nx_ivvbeat.nx

imports: nx_syscalls.nxnx_store_seed_lib.nxnx_guarded_run.nxnx_ivvguard.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main ivb_puts sys_write sys_mmap nxa_die sys_write ↻ sys_exit nxa_lock_take nxa_lock_addr sys_write ↻ nxa_lock_give nxa_lock_addr ↻ nxa_report_overrun sys_write ↻ nxa_dump_printable sys_write ↻ nxa_dump_sizes sys_write ↻ sts_load_honest sts_gen_note sts_pfxhash ss_max_segid sys_mmap ↻ ss_cat ss_readall sys_openat_rd sys_lseek sys_mmap ↻ sys_read sys_close ss_segid_ok ss_open_cached ssc_init sys_mmap ↻ ssc_sig_of ss_cat ↻ sys_fstatat ssc_streq ss_open ss_open2

structs

none

consts

34const IVB_PLANECAP: i64 = 1048576
35const IVB_FIELDCAP: i64 = 4096
36const IVB_SCRATCH: i64 = 8192
37const IVB_DEADLINE_MS: i64 = 180000
38const IVB_MAXARGS: i64 = 32
39const IVB_TAB: i64 = 9
40const IVB_NL: i64 = 10
41const IVB_SP: i64 = 32
42const IVB_RC_NOTFOUND: i64 = 127
45const IVB_COVERAGE_FLOOR_PERMIL: i64 = 900
74const IVB_CLOCK_DEADLINE_MS: i64 = 900000
75const IVB_SWEEP_MARGIN_MS: i64 = 120000
76const IVB_SWEEP_BUDGET_MS: i64 = IVB_CLOCK_DEADLINE_MS - IVB_SWEEP_MARGIN_MS
77const IVB_MODE_644: i64 = 0x1a4

functions

79func ivb_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 }
called by 1: main calls 1: sys_write
81func ivb_putn(v: i64) -> i64
called by 1: main calls 2: sys_writesys_mmap
92func ivb_streq(a: *u8, b: *u8) -> i64
called by 1: main
101func ivb_field(buf: *u8, s: i64, e: i64, idx: i64, dst: *u8, dcap: i64) -> i64
called by 1: main
130func ivb_build_argv(cmd: *u8, scratch: *u8, slot: *i64) -> i64
called by 1: main
155func ivb_outpath(idx: i64, dst: *u8) -> i64
called by 1: main calls 1: sys_mmap
169func main() -> i64