nx_mod_manifest_gate.nx

nx_mod_manifest_gate.nx -- THE MOD PACKAGE MANIFEST GATE (/compare/modding MD18, 2026-09-06). A three-member package (an OBJ, a PNG under a subdirectory, a VMD) is written under /tmp/nx_mod_manifest_gate/pkg/ at runtime; one member carries a provenance row on a SCRATCH journal (cc0-1.0, the MD9 composition), the others have none. The manifest must emit deterministically (two emits byte-identical), parse back to the same fields, verify ACCEPT, and then every tamper the rung names must be REFUSED BY NAME: a member's bytes changed (TAMPERED, the head of the files moves while the declared chain still verifies), a member removed (MISSING), the audit head forged (HEAD), a content row forged (the chain no longer matches). A licence the rights table lacks refuses at emit; a non-redistributable licence still emits with redist=0 because private use is allowed and the publish door is MD23's refusal; unsafe member paths refuse. The command is the second witness through the ladder. usage: nx_mod_manifest_gate (no args) license_tier: ORIGINAL No hw writes (Rule 26). expect_exit: 0