nx_porkbun_ping_probe.nx

nx_porkbun_ping_probe.nx -- THROWAWAY DIAGNOSTIC for the Porkbun TLS/HTTP "empty response" failure (nx_porkbun_set_txt). Pinpoints WHERE the round-trip to api.porkbun.com breaks: PROBE B (root-cause): manual handshake to api.porkbun.com, capture the server's Certificate handshake message, dump the chain shape (n_certs, per-cert sig_len/sig_alg/DN, trust-anchor lookup), then run the EXACT validation the real client runs (nx_https_cert_pipeline_verify_with_store) and print its sealed verdict by name. This says "TLS handshake OK but cert validation returned NO_TRUST_ANCHOR / CHAIN_SIG_FAIL / LEAF_* / ..." -- the precise failure point. PROBE A (end-to-end): full client stack (nx_tls13_client_session_run + nx_https_post_complete) doing a Porkbun PING POST (read-only; returns your IP). Prints session_run's exact stage verdict on failure, or the HTTP status + body on success. Uses real wall-clock now() + the live Mozilla trust store, matching nx_acme_dns01_issue exactly. Creds come from the sovereign vault decrypt output /tmp/nxsecret.out (line1=apikey, line2=secretapikey). license_tier: ORIGINAL (throwaway probe; composes shipped primitives)