nx_lossclass.nx

nx_lossclass.nx -- the missing discriminator for nx_stale_check's CAPABILITY-LOSS verdict. WHY THIS EXISTS (root-caused 2026-08-06). nx_stale_check compares a fresh build against the deployed elf and, when a DEPLOYED STRING IS ABSENT FROM THE REBUILD, returns CAPABILITY-LOSS + "DO NOT RESTAGE". That conflates TWO OPPOSITE EVENTS: (a) REGRESSION -- the source genuinely lost the capability. Restaging destroys shipped function. (b) CORRECTION -- someone DELIBERATELY deleted a string because it was a LIE or described a bug that has since been FIXED. Restaging SHIPS THE FIX. Measured cases that provoked this organ, BOTH class (b): nx_https_get lost "BAD_CIPHER ... (0x1302 AES-256-GCM-SHA384)" because R9 (2026-08-05) made 0x1302 REAL -- the diagnostic had become false. Token 0x1302: 41 source hits. nx_page_verify lost "image/avif" from its Accept header because the estate has NO AVIF decoder and advertising it was a lie (nx_codec_caps_gate pins it BY NAME). 17 source hits. CONSEQUENCE: a gauge that reads every deletion as damage BLOCKS EVERY CORRECTION FROM PRODUCTION. In an estate whose doctrine is to delete unfounded claims, that gauge manufactures the staleness it reports (CURRENT=77/1427 measured the same day). ***THE STALENESS GAUGE WAS CAUSING THE STALENESS.*** THE DISCRIMINATOR: a capability that was CORRECTED still has its SUBJECT in the tree -- the topic is discussed, gated, re-implemented. A capability genuinely LOST has no trace. So: grep the missing string's most distinctive TOKEN across the source tree. token still present => DELIBERATE-EDIT => restage is SAFE (and is how the fix ships) token absent => GENUINE-LOSS => do NOT restage; recover the source first ***A FAILED SEARCH IS NOT AN ABSENT TOKEN.*** If the fork never ran or the scan was partial, this organ returns UNSCORABLE and REFUSES to classify. Reporting a defeat as "absent" would flip the verdict to GENUINE-LOSS and block a good fix -- the exact laundering nx_ui_audit was caught doing. nx_lossclass classify <token> [srcdir] [ext] (srcdir default buildroot/runtime, ext default nx) nx_lossclass selftest exit: 0 classified | 2 usage | 3 selftest-fail | 5 unscorable license_tier: ORIGINAL expect_exit: 0