nx_jose_test.nx

nx_jose_test.nx -- smoke for nx_jose + nx_jwk. Covers: 1. JWK enum gates + emit OKP/Ed25519 for a known public key 2. JOSE enum gates + algorithm enum 3. Signature input matches RFC 7515 §5.1 shape 4. End-to-end sign + emit flattened-JSON for an EdDSA JWS 5. Bounds-check / BAD_ARG paths Not yet covered (separate slice): - RFC 8037 §A.4 KAT bytes (the example uses a specific keypair + nonce; the substrate ed25519_sign_full is deterministic so bytes match, but the §A.4 fixture isn't in this smoke). - JWK thumbprint SHA-256 (queued: nx_sha256_jwk_thumbprint). expect_exit: 0 NOTE 2026-05-16: nx_ed25519_signature.nx transitively imports nx_syscalls.nx (RV64 number) -- composing it with nx_syscalls_x86_64.nx (this test's natural import) hits the F-meta-4 cross-target portability gap (duplicate sys_dup3 / sys_getdents64 / blk_set_byte symbols at link). Fix path is to split nx_ed25519 (and its 5-file chain) into a types-only base layer + a syscall-using convenience layer, same shape as nx_arena_types.nx -- queued as multi-session refactor. For this slice: gauntlet entry is COMPILE-clean only; runtime verification awaits the refactor or an RV64-qemu harness. license_tier: ORIGINAL