code wiki / _hdl_build / nx_rand_gate.nx

nx_rand_gate.nx

buildroot/runtime/_hdl_build/nx_rand_gate.nx

3202 B65 linesdepth 3pulls 4 transitivereach 0 importersview sourcekind gate/proof
docsdependenciesstructsconstsfunctions

about

nx_rand_gate.nx -- GATE for nx_rand (the /dev/urandom CSPRNG wrapper). Flagged by the HONESTY SYSTEM 2026-07-16 as the #2 untested load-bearer: reach=587 organs (session tokens, CSRF, nonces) with ZERO direct validation. A CSPRNG wrapper cannot be KAT'd (nondeterministic BY CONTRACT) -- so the gate proves the CONTRACT: fills exactly n, never all-zeros, consecutive draws differ, bounded draws stay in bounds, fd-caching survives repeated use. license_tier: ORIGINAL expect_exit:0

dependencies 3 imports · 0 importers

nx_syscalls.nx nx_rand.nx nx_gate_verdict.nx nx_rand_gate.nx

imports: nx_syscalls.nxnx_rand.nxnx_gate_verdict.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main sys_mmap rand_bytes rand_open_urandom sys_openat_rd sys_read sys_close gw sys_write gn sys_mmap ↻ sys_write ↻ rand_u64 sys_mmap ↻ rand_bytes ↻ rand_below rand_u64 ↻ gv_ctr sys_mmap ↻ gv_verdict gv_puts sys_write ↻ gv_num sys_mmap ↻ sys_write ↻ sys_munmap gv_journal sys_openat_append sys_mmap ↻ gv_catn sys_mmap ↻ sys_munmap ↻ sys_now_realtime_sec sys_mmap ↻ sys_clock_gettime_real gv_cat sys_write ↻ sys_close ↻ sys_munmap ↻ sys_exit

structs

none

consts

none

functions

10func gw(s: *u8) -> i64 { var n:i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
called by 1: main calls 1: sys_write
11func gn(v: i64) -> i64 { let b:*u8=sys_mmap(24); var m:i64=v; if m<0{sys_write(1,"-" as *u8,1);m=0-m} let t:*u8=sys_mmap(24); var k:i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var j:i64=0; while j<k{b[j]=t[k-1-j];j=j+1} sys_write(1,b,k); return 0 }
called by 1: main calls 2: sys_mmapsys_write
13func main() -> i64
calls 9: sys_mmaprand_bytesgwgnrand_u64rand_below+3