code wiki / _hdl_build / nx_mgmt_api_gate.nx
nx_mgmt_api_gate.nx
buildroot/runtime/_hdl_build/nx_mgmt_api_gate.nx
about
nx_mgmt_api_gate.nx -- SOVEREIGN in-process referee for the ecosystem control-plane API. NO socket, NO
curl, NO shell: arms a realm + registers an admin via the real Modern Auth, writes snapshot FIXTURES via
syscalls, then feeds crafted HTTP request BYTES straight into the pure router ma_handle and asserts the
response bytes. Proves the "true monitoring, no false +/-" property mechanically:
T1 GET /api -> 200 + route index (public)
T2 POST /api/login (correct) -> 200 + {"token":...} (mint no-cookie session)
T3 GET /api/health (degraded) +tok -> 200 DEGRADED + dueling-supervisors + crash-loop (no false-GREEN)
T4 GET /api/health NO tok -> 401 (infra state default-deny)
T5 GET /api/services(degraded) +tok -> 200 + the down/loop svc + "dup":1 (per-svc truth)
T6 POST /api/deploy NO tok -> 401 (privileged route GUARDED)
T7 POST /api/deploy +tok -> 501 (route reserved; honest, not faked)
T8 GET /api/health (healthy) +tok -> 200 + overall OK (no false-RED)
T9 GET /api/bogus -> 404
T10 GET /api/health (MISSING snap) +tok -> 200 + UNKNOWN + no-snapshot (no false-GREEN on absent data)
GREEN iff T1..T10 hold. Sovereign: nx_mgmt_api + nx_modern_auth_flow + nx_syscalls. license_tier: ORIGINAL
dependencies 4 imports · 0 importers
imports: nx_mgmt_api.nxnx_gate_verdict.nxnx_modern_auth_flow.nxnx_syscalls.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| 29 | const MG_CHECKS: i64 = 22 |
functions
| 33 | func g_w(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 } |
| 34 | func g_len(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n } |
| 35 | func g_row(name: *u8, ok: i64) -> i64 |
| 42 | func g_cat(d: *u8, o: i64, s: *u8) -> i64 { var i: i64 = 0; while s[i] != (0 as u8) { d[o + i] = s[i]; i = i + 1 } return o + i } called by 1: mg_api_legacy_main |
| 43 | func g_find(hay: *u8, hn: i64, ndl: *u8) -> i64 { var nl: i64=0; while ndl[nl]!=(0 as u8){nl=nl+1} if nl==0 { return 0-1 } var s: i64=0; while s+nl<=hn { var m: i64=1; var k: i64=0; while k<nl { if hay[s+k]!=ndl[k] { m=0; k=nl } else { k=k+1 } } if m==1 { return s } s=s+1 } return 0-1 } called by 1: mg_api_legacy_main |
| 44 | func g_cat_n(d: *u8, o: i64, s: *u8, n: i64) -> i64 { var i: i64 = 0; while i < n { d[o + i] = s[i]; i = i + 1 } return o + n } called by 1: mg_api_legacy_main |
| 45 | func g_trunc(path: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x180); if fd >= 0 { sys_close(fd) } return 0 } |
| 46 | func g_log(s: *u8) -> i64 |
| 51 | func g_write_file(path: *u8, s: *u8) -> i64 |
| 58 | func g_starts(buf: *u8, n: i64, s: *u8) -> i64 |
| 65 | func g_contains(hay: *u8, n: i64, needle: *u8) -> i64 called by 5: mg_args_gatemg_release_identity_gatemg_tc_bank_gatemainmg_api_legacy_main calls 1: g_len |
| 77 | func g_extract_token(resp: *u8, n: i64, out: *u8) -> i64 called by 1: mg_api_legacy_main |
| 102 | func mg_args_case(label: *u8, input: *u8, encoded: i64, cap: i64, maxargs: i64, expected: i64, ctr: *i64) -> i64 |
| 109 | func mg_args_gate() -> i64 |
| 145 | func mg_release_identity_gate(expected: *u8) -> i64 |
| 173 | func mg_tc_fixture_elf(path: *u8, tag: i64) -> i64 |
| 183 | func mg_tc_tag(path: *u8) -> i64 |
| 192 | func mg_tc_bank_gate() -> i64 |
| 235 | func oa_contains(b:*u8,n:i64,s:*u8)->i64{let z:i64=sd_len(s);var p:i64=0;while p+z<=n{var k:i64=0;while k<z{if b[p+k]!=s[k]{break};k=k+1};if k==z{return 1};p=p+1};return 0} |
| 236 | func oa_call(form:*u8,out:*u8)->i64 |
| 241 | func oa_refuse(c:*i64,label:*u8,form:*u8,out:*u8)->i64 |
| 245 | func mg_organ_capacity_gate()->i64 |
| 291 | func main(argc: i64, argv: *i64) -> i64 |
| 299 | func mg_api_legacy_main() -> i64 |