nx_nxa2glb_gate.nx

nx_nxa2glb_gate.nx -- THE GATE FOR THE RIGGED EXPORT LEG: NXANIM01 (SKEL+SKIN) -> glTF skins/JOINTS_0/WEIGHTS_0/IBM. SUBJECT: the nx_mesh2glb ELF, forked for real (tr_run_capture). The rig surviving export is measured by INDEPENDENT READERS, never by this gate re-parsing what the subject wrote with the subject's own assumptions: (a) nx_gltf2mesh -- our glTF IMPORTER -- counts skin_joints in the exported .glb; it reads skins[].joints itself (b) gltf_load_std -- our native LOADER lib -- must load it and agree on vertex and triangle counts (c) ANTI-VACUITY, asserted BEFORE (a): the JSON declares skins, JOINTS_0, WEIGHTS_0, inverseBindMatrices, and the JOINTS_0 accessor count equals the vertex count, parsed with the loader lib's own gls_accessor (d) WEIGHTS: every vertex's four WEIGHTS_0 decode back to EXACTLY its source q12 sum -- FULL POPULATION, worst deviation printed. The tolerance is DERIVED = 0: every k/4096 is exactly representable in f32 (23 mantissa bits >> 12) and the encoder is exact for dyadic rationals, so any deviation at all is a defect. (e) NEG-CONTROL via gv_bite: an NXA with NO SKEL exports NO skins (importer reports skin_joints=0), paired with (a) -- a writer that reports success for everything cannot score on this pair. (f) a truncated NXA is REFUSED BY NAME (the format's own checksum), never a silent empty .glb. (g) NO SILENT INPUT CAP (2026-08-22): nx_mesh2glb carried a 32 MiB input read cap and a 400000-tri cap; an intact NXMSH2 past either was refused, past the byte cap WITH THE WRONG REASON. The anti-vacuity fixture is a synthetic NXMSH2 DERIVED to exceed BOTH, and the tooth asserts the exported accessor counts equal tris*3, parsed from the JSON. Its truncated twin is refused by name (the NXMSH2 mirror of (f)), paired via gv_bite. The output capacity must be DERIVED and ANNOUNCED (out_cap_derived / out_used) -- a cap nobody can see is a cap nobody can check. FIXTURES at runtime under /tmp/nx_nxa2glb_gate/; every subject output is unlinked at SETUP -- a gate that is not idempotent reports on its first run and lies about every run after. argv: [subject elf] [importer elf] [rigged donor nxa] [unrigged donor nxa] (defaults resolve from the serving root) license_tier: ORIGINAL No hw writes (Rule 26). expect_exit: 0