nx_mirrorintegrity_lib.nx

nx_mirrorintegrity_lib.nx -- IS THE EVIDENCE WE PINNED ACTUALLY COMPLETE? WHY THIS EXISTS. The /compare citation register mirrors every reference into knowledge/fetched/ and pins it with a sha256. nx_compare_refs_gate then proves pin==filehash on every declared mirror. That proof is real but it answers a NARROWER question than its name suggests: A PIN PROVES THE BYTES ARE UNCHANGED SINCE THEY WERE STORED. IT CANNOT PROVE THEY WERE EVER COMPLETE. A truncated body hashes perfectly and matches forever. Measured 2026-08-20: nx_research_fetch's TLS-1.2 leg saved 255935 bytes of an 814052-byte PDF, twice, byte-identical, while printing status=200 and a SAVED line that reads as success. That mirror would have passed the refs gate every day for the rest of its life. A TRUNCATED MIRROR IS WORSE THAN NO MIRROR: IT IS A CITATION THAT READS AS VERIFIED. WHAT IT DOES. For every file under a directory it reads only the HEAD and the TAIL (never the whole body, so a 6 MB PDF costs two reads) and asks the body to describe its own completeness: PDF -- a linearized PDF DECLARES ITS OWN TOTAL LENGTH in the header (/L <n>); if that exceeds the file on disk the body is provably short. Otherwise a complete PDF ends in the EOF marker. HTML -- a complete document closes its html element. JSON -- a complete document closes the brace or bracket it opened. PNG -- a complete stream ends with the IEND chunk type. JPEG -- a complete stream ends with the EOI marker FF D9. Anything whose format declares no length and carries no terminator is UNKNOWN. It is NOT counted as complete. AN AXIS THAT CANNOT SEE MUST ABSTAIN, NOT ACQUIT. THE PARTITION IS PRINTED AND MUST SUM: proven + suspect + complete + unknown == files. CAP-EXACT is a SEPARATE AXIS, not a partition member, because a body can be complete AND land on a power-of-two boundary by coincidence -- folding it in would silently break the reconciliation. license_tier: ORIGINAL LIBRARY -- no main. nx_mirrorintegrity.nx and nx_mirrorintegrity_gate.nx BOTH consume it, so the census and its gate share ONE ruler by construction and cannot drift apart.