code wiki / _hdl_build / nx_pub_bypass_gate.nx

nx_pub_bypass_gate.nx

buildroot/runtime/_hdl_build/nx_pub_bypass_gate.nx

3599 B52 linesdepth 6pulls 11 transitivereach 0 importersview sourcekind gate/prooftopic pub

docs dependencies structs consts functions

about

nx_pub_bypass_gate.nx -- R7 proof for THE NISHI PUBLISHER no-bypass LAW. A small corpus of source files is audited: (1) a workstream that calls the raw transport nx_aw_send directly is FLAGGED; (2) likewise nx_aw_push; (3) a workstream that publishes via pub_submit is NOT flagged; (4) the publisher itself (which legitimately wraps the transport) is allowlisted -> NOT flagged. Clean passing + bypass catching = the audit is content- driven, not always-pass/always-flag. This makes "no more direct publishing from workstreams" MECHANICAL. Sovereign, per-wsid isolated. license_tier: ORIGINAL expect_exit: 0

dependencies 3 imports · 0 importers

imports: nx_syscalls.nxnx_publisher.nxnx_runpath.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

structs

none

consts

none

functions

11	func g_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } called by 3: g_n g_row main calls 1: sys_write
12	func g_n(v: i64) -> i64 { var m: i64=v; if m<0{g_w("-" as u8);m=0-m} let t:u8=sys_mmap(24); var k:i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var i:i64=0; let o:*u8=sys_mmap(24); while i<k{o[i]=t[k-1-i];i=i+1} sys_write(1,o,k); return 0 } called by 1: main calls 3: g_w sys_mmap sys_write
13	func g_row(id: u8, ok: i64, pass: i64) -> i64 { g_w(" " as u8); g_w(id); g_w(": " as u8); if ok==1 { g_w("OK\n" as u8); pass[0]=pass[0]+1 } else { g_w("FAIL\n" as u8) } return 0 } called by 1: main calls 1: g_w
14	func dg_make(path: u8, content: u8) -> i64 called by 1: main calls 3: sys_openat_wr sys_write sys_close
20	func main() -> i64 calls 10: sys_mmap g_w rp_wsid rp_ensure rp_path dg_make+4