nx_prim_registry.nx

nx_prim_registry.nx -- prim lane F781 (BOTTOM-UP pillar of the meet-in-the-middle synthesis engine). Tier-1: read knowledge/tool_schemas.conf (name|title|readOnly|destructive|idempotent|openWorld| output-desc|argv-grammar[col8]) and EMIT a primitives manifest knowledge/store/prim_registry.json -- one primitive per MCP tool: primitive_id, title, domain (name-prefix-derived), capabilities (structural facets from data, NOT hallucinated verbs -- rule 4), signature (the col8 typed argv grammar VERBATIM, or a flagged generic when absent = back-compat), output, safety{ro/destr/idem/open}, typed. The 'what do I have' half of meet-in-the-middle; F782 query_primitives reads this. ATOMIC (tmp+rename, no torn read). READ-ONLY over the source (Rule 26). Declares its envelope (scanned/typed/generic/window). ENVELOPES ARE DERIVED, NOT PICKED (2026-09-14, search rung E7; operator: the estate-wide magic numbers go). Until today this organ admitted the first K_MAGIC_1024 rows and DROPPED the rest -- 936 of 1966 registered tools on 2026-09-14 -- so every organ registered after the 1024th (the whole search ship loop among them) was undiscoverable to nx_prim_query, which answered matched=0 scanned=1024 for search_ship. A row cap with no buffer behind it is a defect generator: it was announced (dropped=) and still nobody read it. Now the input is read WHOLE by sys_read_file (sized from the file, cannot short-read), the output window is DERIVED from that size (every schema byte can at most double under JSON escaping) plus a per-row overhead for the keys and facets this emitter adds (PR_ROW_OVERHEAD, counted per newline), and the only bound left is that window, which refuses LOUDLY on saturation instead of truncating. No row is ever dropped. THE OUTPUT IS NOT SOVEREIGN AND NOT A PLANE (corrected 2026-08-15 -- the line above used to read "a sovereign primitives manifest"). It is JSON, and it sits in knowledge/store/, which is the SEG-STORE PLANE DIRECTORY (comparewatch- elarastate- im- ...). A third-party format inside the plane directory is exactly what the standing order forbids, and the word "sovereign" made the exception invisible to anyone grepping for one. A NAME THAT CLAIMS THE PROPERTY ITS ARTIFACT LACKS HIDES THE ONE PLACE SOMEBODY WOULD HAVE LOOKED. MIGRATION CONTRACT, measured 2026-08-15 (corpus_complete=1) so the next seat need not re-derive it: WRITER this organ (out path in main, tmp beside it) READERS nx_prim_synth.nx:93 . nx_model_card.nx:325 . nx_prim_gap.nx:109 . nx_prim_query.nx:71 nx_prim_gap:153 and nx_prim_query:117 ALSO EMIT this path as a "source" field in their own reports, so the migration has SIX edit sites, not four -- a repoint that fixes only the reads leaves two published reports citing a file that no longer exists. Same shape as the TSV lane: one emitter, N readers, and the FORMAT is the whole defect. nx_prim_registry run [schema.conf] [out.json] [tmp.json] exit: 0 GREEN | 4 ABSENT-INPUT (schema unreadable) | 5 WRITE-FAIL | 2 usage. license_tier: ORIGINAL expect_exit: 0