nx_nxa_secdump.nx

nx_nxa_secdump.nx -- THE MISSING NXA INSPECTOR: print the section directory of an NXA asset, verify every section against the checksum the format already carries, reconcile the byte partition, and on request print the leading words of any one section. WHY THIS EXISTS (measured 2026-09-01, lane=consumer-gap). The estate holds a WRITER for every NXA section (nx_nxa_texc, nx_nxa_texm, nx_nxa_dyna, nx_nxa_morf, nx_nxa_skin, nx_garment_gen) and a floor gate that prints tag:wordcount -- and NOTHING that can answer "are these two assets the same bytes in the sections they share?" or "how many map records does the SHIPPED TEXM carry, and how long is each?". nx_capsearch over 7,175 organs, corpus_complete=1, returns no inspector. The consequence was concrete: a 40 MB superset claim had to be argued from declared word counts alone, because nx_contentdiff CAPS BOTH SIDES AT 4,194,304 BYTES and therefore cannot adjudicate any asset larger than 4 MiB at all. THE OBSERVATION THIS ORGAN MONETISES: the NXA directory ALREADY CARRIES a per-section order-sensitive rolling checksum over that section's words. Byte-identity of a section between two assets is therefore a FREE, FORMAT-NATIVE comparison. Equal tag + equal wordlen + equal check is a weak-but-native identity claim, and it is stated as exactly that rather than dressed up as a cryptographic hash. COMPOSES, NEVER RE-IMPLEMENTS: nxa_check2 comes from nx_nxa.nx, the ONE definition of the format checksum, so this verifier cannot drift from the writers. nx_nxa_secdump <asset.nxa> -- directory + per-section verify + reconciliation nx_nxa_secdump <asset.nxa> <TAG> [nwords] -- the same, plus the first nwords words of <TAG> EXITS: 0 OK (every section checksum recomputed and matched) 1 I/O -- asset unreadable 2 usage (including a non-numeric nwords, which REFUSES rather than defaulting) 3 bad container (magic, version, section count, or a directory past EOF) 4 named TAG not present in the directory 5 at least one section FAILED verification (corrupt, hand-edited, or out of file) license_tier: ORIGINAL No hw writes (Rule 26). expect_exit: 0