nx_pub_smoke_gate.nx

nx_pub_smoke_gate.nx -- R9 PROOF + MEASURED HEAD-TO-HEAD: post-deploy HTTP smoke test + health-gated auto-rollback. The publisher's pre-promote sha-verify (pub_deploy) proves the staged BYTES are right; it is BLIND to whether the live URL actually SERVES them. This gate forks the publisher's own static server, then stages a "disk-OK but URL broken" failure (the content lands where the served URL does NOT map -- the literal sites.elf shape: a deploy that "succeeded" on disk while the world gets nothing) and measures, head-to-head, over real loopback HTTP: NAIVE blind deploy : writes bytes, reports SUCCESS, never checks the URL -> ships broken-but-claims-success. pub_deploy_smoke : promotes, GETs the live URL, hashes the SERVED body -> catches it, auto-rolls-back, REJECTS. EXCEEDS iff naive false-successes > 0 (the gap is REAL, not a strawman -- liar-kill) AND publisher false-successes = 0. Sovereign both sides (our sockets), per-wsid liveroot+port. license_tier: ORIGINAL expect_exit: 0