nx_orphan_reap_gate.nx

nx_orphan_reap_gate.nx -- BITE-PROVEN guard test for nx_orphan_reap's victim-side protection. WHY: nx_orphan_reap is destructive BY DESIGN. Its old guard screened the NEEDLE against a hand-typed denylist, which can never be sound -- the dangerous case is a needle that matches a protected process WITHOUT NAMING IT. Measured 2026-08-01: a reap aimed at :8447's owner would have killed the live nx_translate_daemon; it survived ONLY because the guessed name missed. This gate proves the new victim-side filter with BOTH polarities, because a protection cell that is green before the hazard exists proves nothing. THE TOOTH (gv_bite): a crafted PROTECTED sleeper must SURVIVE a reap aimed squarely at it (good==0), and an otherwise-identical UNPROTECTED sleeper must DIE from the same needle (bad==1). One tooth, both polarities -- a filter that spares everything would pass the first half and fail the second. license_tier: ORIGINAL expect_exit:0