code wiki / _hdl_build / nx_security_audit.nx

nx_security_audit.nx

buildroot/runtime/_hdl_build/nx_security_audit.nx

5730 B78 linesdepth 3pulls 3 transitivereach 0 importersview sourcekind tooltopic security

docs dependencies structs consts functions

about

nx_security_audit.nx -- the AUDITOR grades the security stack on the maturity ladder (ABSENT.. EXCEED), EVIDENCE-GATED: each capability's `exists` flag comes from RUNNING its real gate (fork/ exec, exit 0 = exists), never assertion. The hardened/parity/beats flags are the honest standing assessment encoded as data (Rule #11). This is the AUDITOR role's first DURABLE output (the role scorecard showed it NO-EVIDENCE). HONEST by construction: parity_vs_best=0 everywhere because the crypto is NOT yet triangulated against a best-in-class reference (openssl/libsodium KAT vectors) -> the ceiling here is PRODUCTION, never S-CLASS/EXCEED. Writes MATAUDIT lines to knowledge/status/maturity_audit.log. license_tier: ORIGINAL

dependencies 2 imports · 0 importers

imports: nx_syscalls.nxnx_maturity_auditor.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

structs

none

consts

none

functions

11	func _p(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } called by 2: sa_grade main calls 1: sys_write
12	func _pn(v: i64) -> i64 { let bb: u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48;k=1}; while m>0{t[k]=48+(m%10);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } calls 2: sys_mmap sys_write
13	func _fp(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 } called by 2: sa_grade main calls 1: sys_write
14	func _fn(fd: i64, v: i64) -> i64 { let bb: u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48;k=1}; while m>0{t[k]=48+(m%10);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 } called by 2: sa_grade main calls 2: sys_mmap sys_write
16	func sa_exists(path: *u8) -> i64 called by 1: main calls 7: sys_fork sys_mmap sys_openat_wr sys_dup3 sys_execve sys_exit+1
31	func sa_grade(lfd: i64, name: u8, exists: i64, real: i64, hard: i64, parity: i64, beats: i64, gap_note: u8, acc: *i64) -> i64 called by 1: main calls 6: mat_level _p mat_label _fp _fn mat_gap_to_sclass
44	func main() -> i64 calls 11: _p sys_openat_append sys_exit _fp _fn sys_now_realtime_sec+5