nx_pushback_lib.nx

nx_pushback_lib.nx -- COMMUNITY PUSH-BACK WITH LICENCE, PROVENANCE AND THE REFEREE GRADE ATTACHED (/compare/modding MD23 pushback_publish, 2026-09-06). Our own models go back to the communities as ONE bundle per community target: the sovereign mod manifest (nx_mod_manifest_lib, MD18) copied byte-for-byte, the package archived by the estate's own 7z writer (nx_sevenz_lib sz_write_copy, MD29), the content id, magnet, download url and index row from the ONE transport addresser (nx_dist_publish), and a publish row carrying the licence row, the member count, the manifest and archive digests and the referee grade. Every door this lib composes is fail-closed and it adds no second ruler: the manifest must VERIFY against the files as they are (mm_verify), the package licence is re-read from the ONE rights table (a hand-edited id is refused LICENCE-UNKNOWN), every journaled member is re-asked from the ONE asset journal at publish time (a rip whose licence class is unknown is refused PROVENANCE by name -- the rung's own words), the community's redistribution floor is applied to the package and to every journaled member, and an UNGRADED package never publishes (the operator's law: presence is not completion; a push-back without a referee grade is a poorly-done cut shipped to strangers). The community targets are DATA (knowledge/modding_communities.conf); the same manifest bytes land in every bundle, which is the invariant the gate proves. license_tier: ORIGINAL No hw writes (Rule 26).