code wiki / _hdl_build / nx_live_reach_test.nx

nx_live_reach_test.nx

buildroot/runtime/_hdl_build/nx_live_reach_test.nx

3531 B42 linesdepth 3pulls 3 transitivereach 0 importersview sourcekind gate/prooftopic live

docs dependencies structs consts functions

about

nx_live_reach_test.nx -- prove the live-or-mirror policy degrades gracefully. The outcomes below are the documented stages nx_https_get returns (REACHABLE / TLS_FAIL / TCP_FAIL / DNS_FAIL); the byte fetch + cert validation are env-gated and proven elsewhere, so here we certify the team's DECISION: reachable + no mirror -> USE_LIVE, answerable, mirror-it-now TLS blocked + have mirror -> USE_MIRROR, answerable (the real local case: empty trust store) TCP blocked + no mirror -> NO_DATA, NOT answerable (honest: nothing to serve) DNS fail + have mirror -> USE_MIRROR, answerable The guarantee: a blocked live web never starves us when we have mirrored. Exit 0 on 7/7. license_tier: ORIGINAL

dependencies 2 imports · 0 importers

imports: nx_live_reach.nxnx_syscalls.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

structs

none

consts

none

functions

14	func lt_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 } called by 1: main calls 1: sys_write
15	func lt_num(v: i64) -> i64 { let bb: u8 = sys_mmap(28); var m: i64=v; if m<0 {m=0-m; sys_write(1,"-" as u8,1)}; let t: *u8 = sys_mmap(28); var k: i64=0; if m==0 {t[0]=48;k=1}; while m>0 {t[k]=48+(m%10); m=m/10; k=k+1}; var i: i64=0; while i<k {bb[i]=t[k-1-i]; i=i+1}; sys_write(1, bb, k); return 0 } called by 1: main calls 2: sys_mmap sys_write
17	func main() -> i64 calls 8: lt_puts lr_policy lt_num lr_mirror_after_live lr_blocked_but_covered lr_answerable+2