nx_provcensus_lib.nx

nx_provcensus_lib.nx -- the classification and reconciliation half of the fleet provenance-drift census (2026-08-26). WHY THIS IS A SEPARATE FILE. The census program must fork nx_provcheck once per gate, and a gate that fork/execs a deployed elf CANNOT be mutation-proven: every mutant reads NOT-REACHED, so the harness reports the gate's own fault rather than the subject's. A lib compiled INTO the gate's build closure can be bitten. So all the judgement lives here and all the walking and forking lives in nx_provcensus.nx -- the split is what makes the load-bearing half provable. DELIBERATELY IMPORTS NOTHING. Every function here is pure byte arithmetic over a caller-supplied buffer: no syscalls, no allocation, no clock. That keeps it linkable from both the program (which pulls in nx_dir.nx via the syscalls.nx alias stub) and the gate (which pulls in nx_gate_verdict.nx via nx_syscalls.nx) with no chance of a duplicate-symbol collision between the two spellings. license_tier: ORIGINAL No hw writes (Rule 26).