nx_mem_healer.nx

nx_mem_healer.nx -- the swarm ADDRESS/PREVENT pillar: a periodic memory-cap AUTO-HEAL. Dispatched ARG-LESS by the sovereign clock (nx_clock_tickless, a root supervisor child) every ~60s. Reads /proc/meminfo; if used% >= MH_THRESHOLD it scans /proc (getdents, bounded reads -- never sys_read_file) for the TOP-RSS process, and if that process is a known guard-supervised daemon it restarts it via `./nx_hostctl <kicksub>` (root -> kill by name; the hostctl guard respawns it fresh, reclaiming the leaked pages). This catches ANY daemon memory leak BY CONSTRUCTION -- the docportal per-request-mmap class and any future one -- with zero per-daemon code and NO edit to the supervisor. Composes the /proc idioms from nx_node_beacon + nx_zombie_audit. Run: nx_mem_healer (the live/clock path): sample mem; heal the top offender iff mem>=threshold. Building via nx_sov_build_run runs this once on WSL (mem<threshold -> OK -> exit 0). nx_mem_healer gate self-gate: pure-logic KATs (threshold decision + comm->kicksub map), no /proc, no heal. license_tier: ORIGINAL