nx_recovery_guard.nx
buildroot/runtime/nx_recovery_guard.nx
about
nx_recovery_guard.nx -- the ENFORCEMENT bridge: before recovered media is accepted, fingerprint it and refuse it if
it matches an APPROVED do-not-recover entry. Crucially it loads ONLY status=approved rows from the seg_store
blocklist -- pending entries (awaiting operator review) do NOT block. One organ across what looked like two syscall
stacks: syscalls.nx is an alias that path-dedups to nx_syscalls.nx, so nx_phash (image) + nx_seg_store (storage)
share one surface. Composes nx_gif_decode + nx_phash + nx_media_exclusion + nx_blocklist_store. license_tier: ORIGINAL
dependencies 5 imports · 1 importers
imports: nx_gif_decode.nxnx_phash.nxnx_media_exclusion.nxnx_blocklist_store.nxnx_tabrec.nx
imported by: nx_recovery_guard_gate.nx
structs
| none |
consts
| 11 | const K_MAGIC_1048576: i64 = 1048576 |
functions
| 14 | func guard_load_approved(prefix: *u8, bl_dhash: *i64, bl_thresh: *i64, cap: i64) -> i64 |
| 44 | func guard_check_gif(path: *u8, prefix: *u8) -> i64 |