nx_licgate_lib.nx

nx_licgate_lib.nx -- the SHIPPABILITY verdict as a LIBRARY: may I SELL what this generation chain produced? Split out of nx_licgate.nx so the EMIT PATH can call it in-process. WHY A LIB (the same unblock as nx_swarm_endpoint_lib): a gate nothing calls is DARK, and the one consumer that MUST call this is the generator itself -- it has to refuse BEFORE bytes hit disk, not after. An organ with main() cannot be imported (double-main), so the verdict had to leave the CLI. The CLI is now a thin caller of this, which means the command line and the emit path prove the SAME code. THE DEFECT IT PREVENTS: output rights and weight rights are DIFFERENT RIGHTS. NoobAI-XL is freely downloadable, freely mergeable, and forbids commercialising model-GENERATED PRODUCTS -- so a game built entirely from "open" checkpoints can be in breach on every frame. And a generation's rights are the INTERSECTION over its whole provenance chain: one non-commercial LoRA in a forty-node graph poisons everything downstream of it. FAIL-CLOSED: unknown model, unresolved licence, or an EMPTY chain -> REFUSE. Silence is never permission. Rights table is DATA (knowledge/model_license.conf) -- a new checkpoint costs a row. Rights are encoded ORDERED (0 NO < 1 CONDITIONAL < 2 YES) so "most restrictive wins" is a plain MIN; deriv_must_open is an OBLIGATION, so it takes the MAX instead. license_tier: ORIGINAL