code wiki / (root) / nx_mls_group_gate.nx

nx_mls_group_gate.nx

buildroot/runtime/nx_mls_group_gate.nx

13150 B260 linesdepth 5pulls 6 transitivereach 0 importersview sourcekind gate/proof
docsdependenciesstructsconstsfunctions

about

nx_mls_group_gate.nx -- REFEREE for C7 (nx_mls_group, contract mls_epoch_advance). END-TO-END: keygens three members, creates a group, commits a REMOVAL, and forks the PROMOTED elf to prove the pre-declared done-rule: member removal forces an epoch advance, the removed member CANNOT decrypt the next frame (negative control), with forward-secrecy and post-compromise teeth. EVERYTHING is proven by forking the real elf; convergence is checked via the epoch-secret COMMITMENT (sha256 of the secret) that each member prints -- the secret itself never leaves a file. license_tier: ORIGINAL expect_exit: 0

dependencies 3 imports · 0 importers

nx_syscalls.nx nx_tool_run.nx nx_gate_verdict.nx nx_mls_group_gate.nx

imports: nx_syscalls.nxnx_tool_run.nxnx_gate_verdict.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main gv_ctr sys_mmap nxa_die sys_write sys_exit nxa_lock_take nxa_lock_addr sys_write ↻ nxa_lock_give nxa_lock_addr ↻ nxa_report_overrun sys_write ↻ nxa_dump_printable sys_write ↻ nxa_dump_sizes sys_write ↻ gv_head gv_puts sys_write ↻ sys_mkdir sys_mmap ↻ mgg_run tr_run_capture sys_mmap ↻ sys_pipe2 sys_fork sys_close sys_dup3 sys_execve_clean sys_close_inherited sys_close_inherited_proc sys_openat_rd sys_mmap ↻ sys_getdents64 dirent_reclen sys_close ↻ sys_munmap sys_execve tr_exec_failed

structs

none

consts

11const MGG_CAP: i64 = 65536

functions

12func mgg_len(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n }
13func mgg_count(buf: *u8, n: i64, needle: *u8) -> i64
called by 1: main calls 1: mgg_len
27func mgg_after(buf: *u8, n: i64, after: *u8, out: *u8) -> i64
called by 1: main calls 1: mgg_len
44func mgg_run(elf: *u8, av: *i64, out: *u8, ol: *i64) -> i64 { return tr_run_capture(elf, av, out, MGG_CAP, ol) }
called by 1: main calls 1: tr_run_capture
45func main(argc: i64, argv: *i64) -> i64