code wiki / _hdl_build / nx_realm_multi_gate.nx

nx_realm_multi_gate.nx

buildroot/runtime/_hdl_build/nx_realm_multi_gate.nx

5296 B65 linesdepth 13pulls 25 transitivereach 0 importersview sourcekind gate/proof
docsdependenciesstructsconstsfunctions

about

nx_realm_multi_gate.nx -- proves the DATA-DRIVEN realm (one daemon serves many properties) isolates correctly: the SAME ls_signup_allowed, given a different realm + that realm's HR store, makes realm-correct decisions and NEVER leaks across realms. nishifamily (brad invited) vs andelinwest (robert invited) -- a handle invited in one realm is denied in the other, because cred_id = SHA-256(realm|||handle) namespaces identities. This is the andelinwest.com enablement: run nx_lan_signup_daemon with [6]=andelinwest_admin + andelinwest_hr.log. GREEN iff every row matches. Durable -> knowledge/status/realm_multi_gate.log.

dependencies 5 imports · 0 importers

nx_lan_signup.nx nx_g_puts_lib.nx nx_hr_admin.nx nx_hr.nx nx_syscalls.nx nx_realm_multi_gate.nx

imports: nx_lan_signup.nxnx_g_puts_lib.nxnx_hr_admin.nxnx_hr.nxnx_syscalls.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main g_puts sys_write sys_now_ms sys_mmap sys_clock_gettime_mono sys_mmap ↻ g_mkpfx sys_mmap ↻ hra_invite hrs_invite hrs_cred_id sys_mmap ↻ nx_ncs_derive_user_id_hash sys_mmap ↻ hrs_hexenc hrs_put_indexed hrs_seg_committed sys_mmap ↻ ss_manifest ss_manifest_file hrs_itoa sys_mmap ↻ hrs_streq hrs_status_code sys_mmap ↻ hrs_get ss_open sys_mmap ↻ ss_hget canon_decode hrs_field hrs_streq ↻ hrs_streq ↻ hrs_index_count ss_open ↻ sys_mmap ↻ ss_hget ↻ hrs_atoi_n sys_mmap ↻

structs

none

consts

none

functions

13func g_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 }
called by 2: chkmain calls 2: sys_mmapsys_write
14func g_w(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 }
called by 1: main calls 1: sys_write
15func g_wn(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 }
called by 1: main calls 2: sys_mmapsys_write
16func gtrunc(path: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x1a4); if fd>=0 { sys_close(fd) } return 0 }
17func g_mkpfx(base: *u8, ms: i64, out: *u8) -> i64 { var o: i64=0; while base[o]!=(0 as u8){out[o]=base[o];o=o+1} let t: *u8=sys_mmap(28); var m: i64=ms; var k: i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var z: i64=k-1; while z>=0{out[o]=t[z];o=o+1;z=z-1} out[o]=0 as u8; return o }
called by 1: main calls 1: sys_mmap
18func g_streq(a: *u8, b: *u8) -> i64 { var i: i64=0; while 1==1 { let ca: i64=a[i] as i64; let cb: i64=b[i] as i64; if ca!=cb { return 0 } if ca==0 { return 1 } i=i+1 } return 1 }
called by 1: main
19func g_ip4(out: *u8, a: i64, b: i64, c: i64, d: i64) -> i64 { out[0]=a as u8; out[1]=b as u8; out[2]=c as u8; out[3]=d as u8; return 0 }
called by 1: main
20func chk(got: i64, want: i64, label: *u8) -> i64
called by 1: main calls 2: g_putsg_num
26func main() -> i64