nx_plan_run.nx

nx_plan_run.nx -- WORKFLOWS-AS-DATA: the sovereign plan executor (operator 2026-07-18: "i still see scratchpadding not via nishi... get what you are doing outside of it in mcp and api and workflow"). Kills the session-side shell-script orchestration class: a PLAN is rows in a plane (seeded via the MCP-live nx_store_put), and ONE cap-gated tools/call executes the whole sequence SERVER-SIDE, recording per-step results to a results plane (provenance in the plane, as always). nx_plan_run <planid> [allowlist] [planprefix] [resultsprefix] plan rows : knowledge/store/plan-<id>- seq<TAB>tool<TAB>arg... (executed in seq order) results rows: knowledge/store/planrun-<id>- seq<TAB>tool<TAB>rc<TAB>output-snippet SECURITY = the tools-plane model, no escalation: each step's tool MUST be a GREEN row in tool_allowlist.conf; a row's PINNED args override plan args (fixed-arg pinning, caller args ignored); unknown tool -> REFUSED fail-closed; a failing step STOPS the plan (later steps never run) with the failure recorded. nx_plan_run itself is cap-gated on the tools plane. license_tier: ORIGINAL No hw writes (Rule 26). expect_exit: 0