nx_plane_migrate.nx

nx_plane_migrate.nx -- migrate a plane's VALUE ENCODING from flat tab-delimited lines to NXR1 records (seq1326 rung 2, the actual retirement). ADDITIVE BY CONSTRUCTION: it writes to a NEW destination prefix and NEVER touches the source, so rule 13 holds and a bad migration costs a wasted prefix, not data. ORDER OF OPERATIONS IS THE SAFETY PROPERTY: 1. load the source with the HONEST loader 2. REFUSE BEFORE WRITING ANYTHING if the read was truncated or the plane was empty -- migrating a partial read would silently drop rows into a plane that then looks authoritative. This is the lesson nx_plane_check taught me by catching my own false GREEN: a checker that has not seen every row must never act as if it has. 3. write every row as NXR1 under the same q:<seq> key 4. VERIFY by reading the destination back and rendering each record to TSV, comparing byte-for-byte against the source line. Verification reads the STORE, not the in-memory buffer, so it exercises the real commit path rather than trusting the writer. WHY THE KEY STAYS q:<seq> FOR NOW: this rung changes the ENCODING only. Re-keying to business keys is a separate rung with its own blast radius, and doing both at once would make a failure impossible to attribute. One change, one gate. EXIT: 0 migrated+verified · 2 usage · 3 verify mismatch · 4 source empty · 6 source read TRUNCATED 7 too many rows for the row table · 8 commit failed license_tier: ORIGINAL No hw writes (Rule 26).