nx_nishios_kernel_gate.nx

nx_nishios_kernel_gate.nx -- the TRANSCRIPT gate for the composed NishiOS kernel boot. WHY THIS EXISTS (a measured instrument defect, not a hypothetical): the BOOTSOV runner decides its verdict from `halted && halt_code==0` ALONE -- it never reads the serial transcript. Proven 2026-07-31: a kernel image deliberately tampered so the Sv39 walk faults printed "...TICK TX" instead of "...PAGE USER OK" and BOOTSOV still returned verdict=GREEN exit=0. A runner that returns GREEN on a broken boot is not a check. This gate reads what the kernel actually SAID and compares it to the table-computed golden transcript. TEETH (each independently able to fail; the two NEG teeth are the non-vacuity proof): T1 image present and not the 72-byte banner it replaced T2 boots to a clean finisher halt T3 transcript is EXACTLY the golden transcript T4 every phase marker present (banner/trap/sched/timer/paging/user) T5 NEG-comparator: the comparator must REJECT a mutated golden (proves it can say no) T6 NEG-subject: a corrupted kernel image must NOT reproduce the golden transcript T7 step count is far above the 17-step banner baseline (the boot does real work) Sovereign: the emulator IS the runtime. license_tier: ORIGINAL Boot-and-capture comes from the SHARED primitive, not a private copy: this gate, the census and nx_kernel_adoption must agree byte-for-byte about what "booting the image" means, and three hand-maintained copies is three chances for them to drift apart silently.