code wiki / _hdl_build / nx_nist_unwall.nx

nx_nist_unwall.nx

buildroot/runtime/_hdl_build/nx_nist_unwall.nx

4018 B88 linesdepth 21pulls 129 transitivereach 0 importersview sourcekind tooltopic nist
docsdependenciesstructsconstsfunctions

about

nx_nist_unwall.nx -- R-RSI-006 (NIST-blog-unwalled). The nist.gov blog was filed WALLED (exit-2, "h2/ALPN suspect"). Wall-triage (nx_wall_triage + _wt_probe_one, 2026-06-14) REFUTED that for the blog PATH: https://www.nist.gov/blogs returns HTTP/1.1 200 via OUR sovereign client; only the apex https://www.nist.gov/ hangs (124, redirect/apex, NOT an ALPN wall). This organ un-walls it for real: fetch the blog with nx_https_get (the team's sovereign HTTPS GET) and STORE the body to knowledge/library/nist_blog.txt (a real library source, like the R-RSI-004 fetches). NEGATIVE CONTROL: a known h2-only host (rumble.com) must STILL FETCH-FAIL our HTTP/1.1 client -- so a 200 from nist proves reachability, not a trivially-succeeding fetch. Sovereign (nx_cc->nxasm_x86, no gcc); egress is the operator-provided real-world dependency. license_tier: ORIGINAL

dependencies 6 imports · 0 importers

nx_str.nx nx_syscalls.nx nx_csprng.nx nx_x509_trust_store.nx nx_pem_loader.nx nx_https_get.nx nx_nist_unwall.nx

imports: nx_str.nxnx_syscalls.nxnx_csprng.nxnx_x509_trust_store.nxnx_pem_loader.nxnx_https_get.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main sys_mmap nu_fetch trust_store_alloc sys_mmap ↻ nx_pem_trust_load_file sys_mmap ↻ sys_read_file sys_openat_rd sys_lseek sys_mmap ↻ sys_read sys_close nx_pem_trust_load nx_str_len _pem_find nx_str_len ↻ sys_mmap ↻ b64_decode b64_grab b64_dec_char x509_parse sys_mmap ↻ asn1_cursor_init asn1_expect_tag sys_mmap ↻ asn1_read_tlv_header asn1_read_length x509_read_tlv sys_mmap ↻ asn1_expect_tag ↻ x509_read_alg_id sys_mmap ↻ asn1_expect_tag ↻ trust_store_add sys_mmap ↻ nx_csprng_fill sys_mmap ↻ nx_csprng_urandom_path sys_openat_rd ↻

structs

none

consts

17const NU_MAGIC_2097152: i64 = 2097152
18const NU_MAGIC_262144: i64 = 262144
20const NU_BLOG: *u8 = "https://www.nist.gov/blogs"
21const NU_RUMBLE: *u8 = "https://rumble.com/"
22const NU_OUT: *u8 = "knowledge/library/nist_blog.txt"
23const NU_CA: *u8 = "/etc/ssl/certs/ca-certificates.crt\x00"

functions

25func nu_puts(s: *u8) -> i64 { sys_write(1, s, nx_str_len(s)); return 0 }
called by 1: main calls 2: sys_mmapsys_write
26func nu_putn(v: i64) -> i64 { let bb: *u8 = sys_mmap(28); var m: i64=v; if m<0 {m=0-m}; let t: *u8 = sys_mmap(28); var k: i64=0; if m==0 {t[0]=48;k=1}; while m>0 {t[k]=48+(m%10); m=m/10; k=k+1}; var i: i64=0; while i<k {bb[i]=t[k-1-i]; i=i+1}; sys_write(1, bb, k); return 0 }
29func nu_contains(buf: *u8, n: i64, needle: *u8) -> i64
43func nu_fetch(url: *u8, out: *u8, cap: i64) -> i64
51func main() -> i64