code wiki / _hdl_build / nx_pub_governed_gate.nx

nx_pub_governed_gate.nx

buildroot/runtime/_hdl_build/nx_pub_governed_gate.nx

5348 B64 linesdepth 6pulls 11 transitivereach 0 importersview sourcekind gate/prooftopic pub
docsdependenciesstructsconstsfunctions

about

nx_pub_governed_gate.nx -- proof that the R6 policy is enforced INSIDE the production loop (pub_run_governed): an INTERNAL request publishes; an OUTWARD request is HELD (not published, not live) until the operator approves its exact artifact; after approval it publishes. Idempotent. This is the full operator-gated outward path, proven end-to-end + sovereign + per-wsid. license_tier: ORIGINAL expect_exit: 0

dependencies 3 imports · 0 importers

nx_syscalls.nx nx_publisher.nx nx_runpath.nx nx_pub_governed_gate.nx

imports: nx_syscalls.nxnx_publisher.nxnx_runpath.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main sys_mmap g_w sys_write rp_wsid sys_openat_rd sys_mmap ↻ sys_read sys_close rp_match rp_ensure sys_mmap ↻ rp_path dg_make sys_openat_wr sys_write ↻ sys_close ↻ pub_sha_file sys_mmap ↻ sys_read_file sys_openat_rd ↻ sys_lseek sys_mmap ↻ sys_read ↻ sys_close ↻ sha256_digest sys_mmap ↻ sha256_init sys_mmap ↻ sha256_k sha256_update sha256_compress_ni_blocks blk_set_byte sha256_compress sha256_compress_ni blk_word blk_byte sha256_final blk_set_byte ↻ sha256_compress ↻

structs

none

consts

none

functions

9func g_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
called by 3: g_ng_rowmain calls 1: sys_write
10func g_n(v: i64) -> i64 { var m: i64=v; if m<0{g_w("-" as *u8);m=0-m} let t:*u8=sys_mmap(24); var k:i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var i:i64=0; let o:*u8=sys_mmap(24); while i<k{o[i]=t[k-1-i];i=i+1} sys_write(1,o,k); return 0 }
called by 1: main calls 3: g_wsys_mmapsys_write
11func g_row(id: *u8, ok: i64, pass: *i64) -> i64 { g_w(" " as *u8); g_w(id); g_w(": " as *u8); if ok==1 { g_w("OK\n" as *u8); pass[0]=pass[0]+1 } else { g_w("FAIL\n" as *u8) } return 0 }
called by 1: main calls 1: g_w
12func dg_make(path: *u8, content: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x1a4); if fd < 0 { return 0 } var n: i64=0; while content[n]!=(0 as u8){n=n+1} sys_write(fd, content, n); sys_close(fd); return 1 }
called by 1: main calls 3: sys_openat_wrsys_writesys_close
13func dg_reset(path: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x1a4); if fd >= 0 { sys_close(fd) } return 0 }
called by 1: main calls 2: sys_openat_wrsys_close
14func dg_count(path: *u8) -> i64 { let fd: i64 = sys_openat_rd(path); if fd < 0 { return 0 } let buf: *u8 = sys_mmap(65536); let n: i64 = sys_read(fd, buf, 65536); sys_close(fd); if n<=0{return 0} var i: i64=0; var c: i64=0; while i<n { if buf[i]==(10 as u8){c=c+1} i=i+1 } return c }
called by 1: main calls 4: sys_openat_rdsys_mmapsys_readsys_close
16func main() -> i64
calls 17: sys_mmapg_wrp_wsidrp_ensurerp_pathdg_make+11