nx_kfloor_lib.nx

nx_kfloor_lib.nx -- HIERARCHICAL k-ANONYMITY RELEASE WITH COMPLEMENTARY SUPPRESSION (shared lib, 2026-08-24). THE ONE OWNER of the question "which nodes of an aggregate tree may be published under a floor k". Admitted as a LIBRARY, not a verb of one organ, because every multi-organisation feedback surface on the estate (surveys, connect polls, the community pulse) faces the same two defects and today solves only the first, per organ: 1. a level with fewer than k contributors is withheld (nx_survey_serve already does this, per survey); 2. a PUBLISHED parent minus its PUBLISHED children exposes the withheld remainder -- if that remainder has fewer than k contributors the floor at the child was defeated by subtraction. Nobody on the estate handled (2); the lib exists so nobody has to remember it. Model: Sweeney, k-anonymity, IJUFKS 10(5) 2002 -- a release is k-anonymous when every released group is indistinguishable from at least k-1 others. Here a "group" is the set of contributors behind one published number; the complementary rule keeps every DERIVABLE group at k as well. DATA MODEL (parallel arrays, caller-owned, n nodes): own[i] contributors recorded directly at node i (an organisation's own ballots; 0 for a locality) parent[i] index of the parent node, or KFL_NOPARENT for a root; a forest is allowed tot[i] OUT: own[i] plus every descendant's own (kfl_totals) state[i] OUT: KFL_PUB, KFL_WITHHELD_K (under the floor) or KFL_WITHHELD_COMP (complementary) Every function returns a count or a NAMED negative; nothing here prints, allocates beyond scratch, or reads a file. Pure integer. No sampling: every node is visited every call. license_tier: ORIGINAL