code wiki / _hdl_build / nx_mgmt_authz_gate.nx

nx_mgmt_authz_gate.nx

buildroot/runtime/_hdl_build/nx_mgmt_authz_gate.nx

3466 B53 linesdepth 3pulls 3 transitivereach 0 importersview sourcekind gate/prooftopic mgmt

docs dependencies structs consts functions

about

nx_mgmt_authz_gate.nx -- PURE isolation gate for the management AUTHORIZATION tier (nx_mgmt_authz). The headline is T5: a VALID but NON-admin session (today's library reader) is FORBIDDEN (403) from a privileged route -- the exact privilege-escalation the bare ma_authed allows. Negative controls T5/T11/T12 keep it honest. No IO/socket/exec/auth. GREEN iff every rule holds. Sovereign: nx_mgmt_authz + nx_syscalls. license_tier: ORIGINAL

dependencies 2 imports · 0 importers

imports: nx_mgmt_authz.nxnx_syscalls.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

structs

none

consts

none

functions

8	func g_w(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 } called by 2: g_row main calls 1: sys_write
9	func g_len(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n } called by 2: mz_cls mz_adm
10	func g_row(name: *u8, ok: i64) -> i64 called by 1: g_eq calls 1: g_w
15	func g_eq(name: *u8, got: i64, want: i64) -> i64 { var ok: i64 = 0; if got == want { ok = 1 } return g_row(name, ok) } called by 1: main calls 1: g_row
17	func mz_cls(s: *u8) -> i64 { return mz_route_class(s, g_len(s)) } called by 1: main calls 2: mz_route_class g_len
18	func mz_adm(allow: u8, h: u8) -> i64 { return mz_is_admin_in(allow, g_len(allow), h, 0, g_len(h)) } called by 1: main calls 2: mz_is_admin_in g_len
20	func main() -> i64 calls 9: g_w g_eq mz_cls mz_status mz_adm sys_openat_append+3