nx_ppp_probe.nx

nx_ppp_probe.nx -- PERSON / PRODUCT / PLACE probe: ONE ruler, run on OUR live surface AND on each rival's live surface, so a /compare page can say how to build a better site than the competitor from a measurement instead of an opinion (operator 2026-08-24: "we need to know the person, product, and place ... competing on person via privacy and superior cx, product as a superior product ... place ... ease of navigation and ability to accomplish the desired task"). WHAT IT MEASURES, from the bytes a first visitor receives (HTML body over the sovereign TLS stack + the HTTP response headers) -- the same envelope for every subject, which is what makes the head-to-head fair: PERSON (privacy + CX) third-party asset hosts, third-party SCRIPT hosts, known tracker markers (tag manager, analytics, pixel, session-replay, ad networks, fingerprinting), consent-banner markers, cookie-less analytics markers, Set-Cookie count, Permissions-Policy, the 5 security headers (composes nx_uiq_wire_lib uw_audit -- one ruler for headers, never a second copy). PRODUCT (design quality + longevity) the design-hygiene score of nx_ui_audit (forked, /12), computed WCAG contrast over the page's real color tokens (composes nx_uiq_color uiq_audit_buf in-process), the static Core-Web-Vitals predictor of nx_uiq_perf (forked: render-blocking css/js, unsized media), script tags, inline-JS share of the page, noscript, dark-mode + reduced-motion media queries, canonical link, doctype, page weight. PLACE (findability + task) nav / main / footer landmarks, skip link, on-site search, breadcrumb, exactly-one h1, aria-current, link count and internal-link count, lang, viewport, title. SCORE: each axis is a permil computed by the DECLARED rules in pp_score_* below -- every rule is a count against a published bar (WCAG 2.2 landmarks and skip links, NN/g search + breadcrumb, web.dev CWV predictors, OWASP secure headers, the Markup Blacklight tracker classes) so it can be argued with, and the raw counts are printed beside the score so nobody has to trust the arithmetic. THIRD STATE: a sub-measure the probe could not observe (a fork that returned nothing, headers not captured) is printed as -1 and named in "unobserved" -- it scores ZERO for that rule and the page says so, never a silent acquittal (abstain-never-acquit). HONEST ENVELOPE: static HTML + headers, no render, no script execution. A client-rendered app is graded on what it ships to a no-JS first visitor -- which is the progressive-enhancement bar itself, stated on the page. Registrable domain = last two labels (wrong for co.uk-class suffixes; declared). nx_ppp_probe url <url> [connect-host:port] -> one JSON object on stdout nx_ppp_probe domain <dom> -> reads knowledge/compare/<dom>.ppp rows surface|<col>|<label>|<url>|<connect or -> probes each, writes knowledge/compare/<dom>.pppstate nx_ppp_probe --kat -> fixture self-test (bite-proven both directions) exit: 0 ok | 1 kat failed | 2 usage | 4 fetch failed (url verb) license_tier: ORIGINAL No hw writes (Rule 26).