nx_scaffolding_audit.nx

nx_scaffolding_audit.nx -- REPO-FILE audit primitive that enforces the no-temporary-third-party-scaffolding-when-substrate-arc-exists cardinal. AUDIT-FIRST CORRECTION (2026-05-20, post-creation): user caught that I built this without checking for existing prior art. The substrate already ships an audit family: - nx_audit_dashboard.nx : substrate-STATE aggregation (hunter kills / gatherer yields / xenocell alerts / immune health / book unseen-alert / organism pressure / pollinate pending) - nx_audit_server_daemon.nx : exposes substrate state over HTTP - nx_audit_server_main.nx : daemon entry point - nx_audit_compose_test.nx : test harness - nx_ai_audit.nx : AI-output audit - nx_adversarial_pattern_audit.nx: adversarial input pattern detection THIS primitive (nx_scaffolding_audit) is a DIFFERENT DOMAIN: it audits REPO FILES against the SCAFFOLDING_REPLACED_BY cardinal. Distinct from the substrate-state-aggregation primitives above. However it could COMPOSE INTO the dashboard: future nx_audit_dashboard rows could include a "scaffolding violations" counter sourced from nx_saudit_run, surfacing the cardinal-compliance state alongside other substrate health metrics. Per feedback-no-temporary-third-party-scaffolding-when-substrate-arc-exists audit-first rule: ls nxc2/runtime/ before authoring new primitives. module: nishi-core.ops.scaffolding_audit depends: nishi-core.perception.profile + nishi-core.io.syscalls disk_kb: 9 capability: OPS wired_status: PARTIAL_WIRED (nx_saudit_check_one_file + nx_saudit_run both GRADUATED to basic-glue 2026-05-20: compose sys_read_file + nx_str_find + nx_dir_list; refuses self-exempt loophole at substrate level; aggregates per-file findings into NxSauditSummary; rest of entries still PARTIAL_WIRED)