nx_novel_close.nx

nx_novel_close.nx -- the INDEPENDENT REFEREE that CLOSES genuinely-built NOVEL queue rows that nx_reconcile refuses to touch (NOVEL is never auto-flipped by design: novel work is judged after the visit). A NOVEL row whose deliverable is really built+gated cannot otherwise close, so its dependents stay FLOATING in nx_capability_ladder. This organ adjudicates each candidate MECHANICALLY -- it does NOT trust the row's stored ||MARK. Referee check per candidate (an auto_builder-emitted deliverable): DELETE the deliverable .nx + _test.nx -> re-run nx_auto_builder from its build-spec -> assert ALL of: (a) BOTH files RE-EMITTED, (b) builder exit==0 AND stdout carries the candidate's green marker "AUTO-BUILD GREEN: <name> shape=<N> KAT green", (c) line 1 of the re-emitted primary .nx carries "AUTHORED BY THE NISHI BUILDER" (proves author=organ, not a hand-written false-green). Only ALL-PASS closes the row. A stale/hand-written deliverable cannot survive deletion -> strongest no-false-green probe. The organ is NOT the builder, so there is NO self-grade: it re-runs the team's own auto_builder and reads the verdict. NOVEL is 5 bytes, DONE is 4 -> closing SHRINKS the line by 1 byte, so this is a LENGTH-CHANGING line REWRITE (reconcile only does same-length 4-byte in-place patches). We read the whole file, and for a referee-PASSED candidate row scoped by (field1==id AND field6=="NOVEL") emit the prefix, write "DONE", then the rest from after "NOVEL" (skip 5 src bytes, write 4). NEVER global-replace "NOVEL" (other rows' descriptions contain it); field6 is located by tab position. BAKED SELF-TEST runs FIRST on a SCRATCH scenario (control_pos via the proven erf pipeline MUST close; control_neg via a non-existent spec MUST NOT close); any mismatch -> print RED + nonzero exit, real queue UNTOUCHED. Proves it cannot false-close (sibling of nx_capability_ladder / nx_epic_rollup baked controls). argv[1] = queue-path override (scratch queue for dry-run; no side effects beyond that named file -- like reconcile's is_live guard). No-arg => LIVE: operates on knowledge/registry/assignment_queue.tsv (the only run that writes the real queue) and writes a .bak first. SOVEREIGN ONLY (nx_cc->nxasm, no gcc/python/qemu). Additive/history-sacred: the log is append-only; referee deletions are repaired by the re-emit (verified) or restored from backup on FAIL. The referee execs /tmp/nx_auto_builder.sov.elf, so the wrapper must build nx_auto_builder into /tmp in the SAME shell session. license_tier: ORIGINAL