nx_mod_manifest_lib.nx

nx_mod_manifest_lib.nx -- THE SOVEREIGN MOD PACKAGE MANIFEST (/compare/modding MD18 mod_manifest_emit, 2026-09-06). One manifest carries the package name, version, game targets, dependencies, the licence ROW read from the ONE rights table (nx_licgate_lib: id, redistribution right after the unverified cap, verified flag), one content row per member (relative path, bytes, sha256), the provenance verdict per member from the ONE asset journal (nx_asset_prov_lib, MD9) and an AUDIT HEAD: the nx_sign_envelope_lib hash chain h0 = genesis, h = sha256(h || canonical(record)) over the header record and every content record, canonicalised by nx_canon_cid so field order cannot change the bytes. Any edit to a member's bytes, to a content row, or to the header changes the head, and the verifier REFUSES BY NAME (missing, tampered, head). There is exactly ONE chain function, mm_chain, and both the emitter and the verifier call it, so they cannot disagree by drift. The manifest is the estate's own line format (record|field|field), deterministic (no timestamps), so two emits of the same package are byte-identical. Transport is the content-put door's job; this lib only writes and reads the bytes. license_tier: ORIGINAL No hw writes (Rule 26).