nx_lora_screen_lib.nx

nx_lora_screen_lib.nx -- LIB: the G16 lc_screen judgement (static contamination/integrity screen on an acquired LoRA or checkpoint FILE, before it may enter elara_loras.txt or the served model path). The lib carries ALL the judgement so nx_lora_screen_gate proves it in-process against crafted fixtures (the lib+program split that makes a gate honest); runtime/nx_lora_screen.nx is the thin main. WHAT IT JUDGES (.safetensors): the 8-byte LE header length, the JSON header's declared data_offsets, and whether those extents exactly tile the file's data region. A file whose declared sizes disagree with its bytes is either truncated, forged, or carrying an undeclared payload -- each flag is NAMED with its values printed. DECLARED IMPRECISION (so the next reader does not trust this as exact): the tiling check compares sum(extents) and max(end) to the region -- a gap and an overlap of EQUAL size cancel and pass; full interval-overlap proof is deliberately not implemented (sort-free single pass). Every real-world serializer writes tensors back to back, which sum==max_end==region does prove. .ckpt/.pt/.pth/.bin/.pkl are REFUSED OUTRIGHT: pickled checkpoints execute arbitrary code on load (CWE-502); the remedy is to obtain a .safetensors export. This is a refusal, not a flag -- there is no safe way to screen a pickle by reading it. verdicts (returned by lc_screen, printed with values): 0 CLEAN | 1 FLAGGED | 3 UNPROVEN (unreadable or a format this screen cannot judge -- abstain, never acquit) | 4 REFUSED-pickle license_tier: ORIGINAL