nx_proc_spawn.nx

nx_proc_spawn.nx -- HIGH-LEVEL spawn-with-capability-gate layer above the FULLY_WIRED nx_proc.nx primitive (fork/exec/wait4 syscall wrappers). AUDIT-FIRST CORRECTION (2026-05-20, post-creation): user caught that I built this without checking for existing prior art. nx_proc.nx already ships with nx_proc_fork / nx_proc_execve / nx_proc_wait4 / wait-status inspectors. This primitive does NOT duplicate those -- it adds the capability-token + priv-class + log-redirect layer ABOVE them. When graduated, nx_proc_spawn_execute will CALL nx_proc_fork + nx_proc_execve internally; it is the supervised wrapper, not a competing implementation. Per feedback-no-temporary-third-party-scaffolding-when-substrate-arc-exists audit-first rule: ls nxc2/runtime/ before authoring new primitives. Composes with the existing nx_supervisor state-machine primitive (which decides what to do); THIS primitive does the actual process management. module: nishi-core.ops.proc_spawn depends: nishi-core.perception.profile + nishi-core.ops.supervisor + nishi-core.io.syscalls disk_kb: 5 capability: OPS wired_status: PARTIAL_WIRED MISSING_CAPABILITIES: - FORK_EXEC_SETSID (sys_fork + sys_execve + sys_setsid; sys_fork is proven via nishi_video_room.nx, sys_execve glue needed) - CAPABILITY_TOKEN_VERIFY (content-addressed capability proof that replaces /etc/sudoers.d/* NOPASSWD entries with cryptographic capability bearer tokens; composes with nx_ed25519 + nx_blake2b which are FULLY_WIRED per status doc) - PRIV_DROP (after fork, child drops privilege per NX_SUPV_PRIV_* declared class before execve) - FD_HYGIENE (close-on-exec all inherited fds except declared ones) - STDIO_REDIRECT (per-child stdout/stderr to substrate-managed log files) license_tier: PUBLIC_NISHI_SUBSTRATE genealogy_id: feedback-no-temporary-third-party-scaffolding-when-substrate-arc-exists_2026 + feedback-substrate-does-heavy-lifting-user-is-partner-not-gate + nx_supervisor (existing state-machine primitive) + nx_daemon_health_audit