nx_patch_guard.nx

nx_patch_guard.nx -- F803 THE PATCH-CASCADE STRUCTURAL TOOTH (ecosystem-as-editor law, operator 2026-07-20). Mechanizes CLAUDE rule-3: "if the second fix does not resolve it, STOP patching -- rewrite the function or module from scratch with a clear understanding of the root cause." Patch-cascade was the editor coverage board's LAST original GAP: a known failure mode of EVERY model (keep poking at a symptom, each patch obscuring intent and adding regression traps) that was covered by process law ALONE -- no structural tooth. This is the READ-ONLY verdict organ over the patch-ledger plane knowledge/store/patchledger- (seats append rows via nx_store_put; SAME division as nx_debt_view over debt- and nx_route_diff over the live API: the plane is data, the organ is the verdict). A seat calls `check <target>` BEFORE its next fix; N consecutive patch-rows on that target since the last rewrite|gate row = REFUSE -> rewrite now. nx_patch_guard check <target> [plane-prefix] -> VERDICT=OK (exit 0) | VERDICT=REFUSE (exit 3) LEDGER ROW (appended via nx_store_put <prefix> put <actor> <id> <target> <kind> <session> <note>): col0 id | col1 target | col2 kind (config|patch|rewrite|gate) | col3 session | col4 note CONFIG row: id=0 target=__config__ kind=config note=<max-consecutive-patches integer> (rule-11: the threshold is DATA, never a magic number in code; absent/unreadable config -> PG_DEFMAX, fail-safe). A rewrite|gate row RESETS the counter -- that is the rule-3 escape hatch made mechanical: prove the rewrite (or a GREEN gate) and the guard opens again. Enforcement-wiring into the nx_ws_cycle debt-gate = filed rung. ENVELOPE (declared in output): 256KB plane read, 4096 rows scanned, 6 cols. Fixture gates prove correctness NEVER scale -- the scale tooth lives in the gate plan (ark v1 lesson). license_tier: ORIGINAL No hw writes (Rule 26). expect_exit: 0