nx_provenance_chain.nx

nx_provenance_chain.nx -- typed transform chain (bit-traceability). Per [[feedback-end-to-end-bit-traceability-architecture]]: "Every transformation of any signal emits a (prev_hash, transform_id, params, output_hash, timestamp) ProvenanceLink to a local trace log so any bit's journey reconstructable end-to-end." THIS IS THE BIT-TRACE FOUNDATION. Every transform in the substrate (capture, preprocess, encode, packetize, encrypt, NIC send, NIC recv, decrypt, decode, render) creates a ProvenanceLink that chains to the prior link by prev_hash. The full chain is a Merkle DAG of what happened to a bit from generation to endpoint. Per user 2026-05-17: "id love for our system to be so sss class world class whatever that the bit is followed from generated signal to endpoint so we can see degradation both on silicon across the world so that its the circuitboard is the whole system itself." Composes: nx_methyl -- each link methyl-marked so chain authenticity survives even when some links are sent across cells / hosts / wire nx_xenocell -- signed observations are provenance links too nx_evict_journal -- significant events surface as journal entries while detail lives in the trace chain nx_pollinate -- federated trace fragments (peer-mesh of chains) V1 ships: - struct NxProvenanceLink with prev_hash, transform_id, params_hash, output_hash, timestamp, originator_id - struct NxProvenanceChain as ordered ring of links - append(): new link references the previous chain head - verify_continuity(): walk chain and check each prev_hash matches the prior link's output_hash - find_by_output_hash(): locate any link by its output hash (forensic query: "what produced this byte?") Gap list (V1 honest perf verdict): - links are in-memory ring; on-disk JSONL persistence is queued - merkle-tree summary of chain not built (V2: nx_trace_merkle)