code wiki / (root) / nx_recovery_guard_gate.nx

nx_recovery_guard_gate.nx

buildroot/runtime/nx_recovery_guard_gate.nx

3446 B55 linesdepth 8pulls 15 transitivereach 0 importersview sourcekind gate/prooftopic recovery
docsdependenciesstructsconstsfunctions

about

nx_recovery_guard_gate.nx -- proves the enforcement bridge end-to-end on REAL images, and that it honors supervision: (T1) a fingerprint APPROVED on the seg_store blocklist blocks its real image; (T2) a fingerprint that is on the blocklist but only PENDING does NOT block (the same image is allowed); (T3) once the operator approves it, that same image is now blocked. So only operator-approved entries enforce -- nothing blocks behind your back. license_tier: ORIGINAL

dependencies 3 imports · 0 importers

nx_recovery_guard.nx nx_gate.nx nx_tabrec.nx nx_recovery_guard_gate.nx

imports: nx_recovery_guard.nxnx_gate.nxnx_tabrec.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main gw sys_write dhash_gif sys_read_file sys_openat_rd sys_lseek sys_mmap sys_read sys_close gif_decode gif_decode_core gif_u16le nx_phash_dhash nx_phash_downscale hex16 seed tr_cat tr_tab bl_put_pfx bl_key bls_cat ss_next_segid sys_mmap ↻ ss_cat ss_readall sys_openat_rd ↻ sys_lseek ↻ sys_mmap ↻ sys_read ↻ sys_close ↻ ss_segid_ok ss_begin ss_begin_cap sys_mmap ↻ ss_add ss_add2 ss_w32 ss_len ss_get

structs

none

consts

none

functions

9func hex16(v: i64, out: *u8) -> i64 { var i: i64=0; while i<16 { let sh: i64=(15-i)*4; let nib: i64=(v>>sh)&0xf; if nib<10 { out[i]=(48+nib) as u8 } else { out[i]=(87+nib) as u8 } i=i+1 } out[16]=0 as u8; return 16 }
called by 1: main
10func dhash_gif(path: *u8) -> i64
called by 1: main calls 3: sys_read_filegif_decodenx_phash_dhash
16func seed(prefix: *u8, id: *u8, dhhex: *u8) -> i64
called by 1: main calls 3: tr_cattr_tabbl_put_pfx
22func main() -> i64
calls 7: gwdhash_gifhex16seedbl_set_status_pfxguard_check_gif+1