nx_layerscan_gate.nx

nx_layerscan_gate.nx -- LAYERING-VIOLATION CENSUS: which runtime/ organs import a lib that exists ONLY in _hdl_build/, and are therefore SILENTLY UNBUILDABLE? WHY (three instances found BY CHANCE in one session, each a whole capability): nx_clock.nx -> darkened 174 gguf/f32_llm organs (the sovereign LLM stack, frozen ~Jul 16) nx_bm25.nx -> darkens rights-enforced DMS search (licensed-media consent gating) nx_fft.nx -> darkens nx_fft_f32 -> nx_autograd_tensor -> THE ENTIRE TRAINING CAPABILITY Each was found only because somebody happened to build the right target. Three hits from a handful of attempts means this is a POPULATION, not a coincidence -- and it is mechanically detectable in one pass. THE RULE BEING ENFORCED (banked law, re-confirmed by measurement): **runtime/ CANNOT import _hdl_build/**, while _hdl_build/ CAN import runtime/. Proven both directions: nx_syscalls.nx exists ONLY in runtime/ and every _hdl_build organ imports it and builds; nx_clock.nx existed ONLY in _hdl_build/ and runtime/nx_loop.nx could not see it until a copy was placed in runtime/. The asymmetry is what makes the remedy a MOVE. METHOD, deliberately probe-based rather than table-based: for each flat runtime/*.nx, scan its import lines; for each imported basename X, if runtime/X does NOT exist but _hdl_build/X DOES, that is a violation. No name tables, no hashing -- two openat probes per import, so the scan cannot silently overflow a table. FIX FOR EVERY HIT IS THE SAME AND IT IS A MOVE, NEVER A COPY: relocate the lib _hdl_build/ -> runtime/. Because _hdl_build can still reach runtime/, existing consumers keep resolving it and NO duplicate basename is created. Copy-and-leave manufactures the same-name-two-copies divergence class measured repeatedly. ENVELOPE, declared in output and never silent: FLAT scan of runtime/ (no recursion, so _attic/_retired/ _stage_local shadows are excluded); only the first LS_HEADCAP bytes of each file are scanned for imports (imports are declared at the top of every organ in this tree); file and hit counts are capped and the caps are PRINTED with the remainder. A capped scan reports PARTIAL, never a clean total. license_tier: ORIGINAL No hw writes (Rule 26). expect_exit: 0