nx_mgmt_gaterun_gate.nx

nx_mgmt_gaterun_gate.nx -- GATE for the control plane's two lane-J fixes (2026-08-23): D1 /api/gate_run PROMOTES a gate that outruns its deadline onto the job lane (JOB-STARTED + .claim + .out, the worker kept ALIVE and reaped by the handler for its REAL exit code) instead of SIGKILLing it and answering verdict=TIMEOUT -- the absence of a verdict dressed as one. Measured 2026-08-23: nx_chkarith_gate / nx_boundscheck_gate read TIMEOUT under load while nx_job_run of the same binaries returned 17/17 and 11/11 GREEN. D2 /api/promote refuses ONE CONJUNCT AT A TIME, by name (NOTHING-STAGED with the path it looked at; UNDECLARED-KIND with the conf to edit; DECLARED-DAEMON with the deploy call), where one 400 text used to cover all of them and a consumed stage read as "undeclared kind" (lane F, same day). SHAPE: the incumbent nx_mgmt_api_gate's -- SOVEREIGN and IN-PROCESS. It imports the daemon's own source and drives the HANDLER FUNCTIONS (ma_do_gate_run / ma_do_promote / ma_promote_refuse / ma_gate_run_finish) with crafted request bytes: TEST THE SUBJECT, NOT THE ROUTE THAT HAPPENS TO REACH IT (a synthetic session has level 0 in production and every privileged route 403s before its handler). FIXTURES never touch a production plane: the daemon's seam ma_gr_set_fixture points the elf root at _build/nxgr_<pid>/ (runnable: NAS /tmp is noexec), the jobs dir and the window conf at /tmp/<gate>/. ONE fixture organ (runtime/nx_gaterun_fixture_test.nx) is compiled once and copied under four names; it keys on its own name because gate_run passes no argv. license_tier: ORIGINAL