nx_nofloat_propose_verify_gate.nx

nx_nofloat_propose_verify_gate.nx -- THE PROPOSE->VERIFY LOOP, rung 1 (2026-07-15). The sovereign no-float Qwen2.5-0.5B PROPOSES arithmetic answers (greedy i32 few-shot completion through the SERVE core -- the exact production generator behind /gen); the LCF-kernel autoformalization verifier CERTIFIES or REFUTES every proposal (af_decide -- a wrong proposal CANNOT certify, soundness by construction). This is the autonomous-building safety primitive: generator proposes, sound checker disposes, nothing unverified is trusted. The generator's propose-rate is REPORTED as measured data; the gate's TEETH are the mechanism invariants, which do not depend on model IQ: T1 mechanism live: >=8/12 proposals parse as integers; zero generation or kernel failures T2 soundness cross-check: kernel verdict == independent in-gate arithmetic on EVERY parsed proposal (certified-and-wrong = 0 AND refuted-and-correct = 0) T3 NEG-CONTROL: all 12 deliberately-wrong proposals (truth+1) REFUTED by the kernel T4 NEG-CONTROL: corrupted-proposer outputs (word token / out-of-range number) land UNSUPPORTED, never certified T5 determinism: re-running Q1 reproduces BYTE-IDENTICAL text (greedy no-float exceed) 2026-07-15 consolidation: templating/generation/parse/claim now ride nx_propose_verify_lib (single source of truth shared with the organ nx_propose_verify + the solve probe) -- prompts byte-identical to the original inline version, so the measured 12/12 must reproduce (that reproduction = the migration proof). Requires /home/elderwesto/nx_stage/nx_real_model.gguf. Heavy: ~2-3 min. Return from main (pool reap), never sys_exit. No hw writes (Rule 26). expect_exit: 0 license_tier: ORIGINAL