code wiki / _hdl_build / nx_media_path_gate.nx

nx_media_path_gate.nx

buildroot/runtime/_hdl_build/nx_media_path_gate.nx

3363 B52 linesdepth 3pulls 3 transitivereach 0 importersview sourcekind gate/prooftopic media
docsdependenciesstructsconstsfunctions

about

nx_media_path_gate.nx -- proves the /media (everyone/family) file allowlist: SFW library paths are served, but the OWNER-ONLY recordings/NSFW (/mnt/nas_logging, served only by /gallery) are DENIED even by direct path. Operator 2026-06-17: /media live for everyone, /gallery (owner-only) is the other thread. license_tier: ORIGINAL

dependencies 2 imports · 0 importers

nx_galx_authz.nx nx_syscalls.nx nx_media_path_gate.nx

imports: nx_galx_authz.nxnx_syscalls.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main mpw sys_write mpok galx_media_path_ok galx_starts galx_has mpslen mprow mpw ↻ sys_mmap sys_write ↻ sys_mmap ↻ sys_write ↻ sys_openat_append mpslen ↻ sys_close sys_exit

structs

none

consts

none

functions

7func mpw(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
called by 2: mprowmain calls 1: sys_write
8func mpslen(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} return n }
called by 2: mpokmain
9func mprow(id: i64, ok: i64, what: *u8) -> i64 { mpw("MPROW " as *u8); let b: *u8=sys_mmap(8); b[0]=(48+id) as u8; sys_write(1,b,1); mpw(" " as *u8); if ok==1 { mpw("PASS " as *u8) } else { mpw("FAIL " as *u8) } mpw(what); mpw("\n" as *u8); return ok }
called by 1: main calls 3: mpwsys_mmapsys_write
10func mpok(p: *u8) -> i64 { return galx_media_path_ok(p, mpslen(p)) }
called by 1: main calls 2: galx_media_path_okmpslen
12func main() -> i64
calls 9: mpwmpokmprowsys_mmapsys_writesys_openat_append+3