nx_live_governor.nx
buildroot/runtime/nx_live_governor.nx
about
nx_live_governor.nx -- THE NISHI LIVENESS GOVERNOR (grading core).
The control plane that ends the "hide and seek / junk drawer": a data-
driven catalog of what SHOULD be live (route, expected status, auth
class) is probed by the sovereign TLS client (nx_ng_verify_live's
pattern), and each result GRADED here against its expectation -> a board
of LIVE / BROKEN / WRONG_WALL. Pure, deterministic grading (gated); the
live probe + board is the runner. Heal (publisher submit / hostctl
restart) is the next rung.
THE EXCEED over ad-hoc go-live: liveness is a DECLARED desired-state that
is continuously VERIFIED, not a thing someone remembers to check. A
public asset hidden behind the login wall, or a walled asset exposed,
is caught as WRONG_WALL -- the exact failure class behind a broken hub.
genealogy_id: sre_health_check_control_loop + declared_desired_state
+ nishi_ng_verify_live_probe
dependencies 1 imports · 2 importers
imports: nx_syscalls.nx
imported by: nx_live_governor_run.nxnx_live_governor_test.nx
structs
| none |
consts
| 22 | const NX_LG_LIVE: i64 = 0 |
| 23 | const NX_LG_BROKEN: i64 = 1 // wrong status (404 / redirect-loop / dead backend) or wrong content |
| 24 | const NX_LG_WRONG_WALL: i64 = 2 // a PUBLIC asset is behind the login wall (or a walled one exposed) |
| 27 | const NX_LG_PUBLIC: i64 = 0 // must serve without a login wall |
| 28 | const NX_LG_WALLED: i64 = 1 // must sit behind the opaque wall (showing the wall IS correct) |
functions
| 34 | func nx_lg_grade(expected_status: i64, expected_auth: i64, |
| 44 | func nx_lg_verdict_name(v: i64) -> *u8 called by 1: lg_row |