nx_segsweep.nx

nx_segsweep.nx -- SOVEREIGN seg-store sweeper. The organ that retires nx_segguard.sh (2026-08-06). OPERATOR DOCTRINE: ".sh are not nishi ecosystem". nx_segguard.sh was a SHELL WRAPPER around an organ that already existed -- it parsed segguard.conf with sed+head, enumerated the planes, and forked nx_seg_compact_cli.elf ONCE PER PLANE under a lock. The real work is ss_compact_cap in nx_seg_store.nx, a LIBRARY function callable in-process. With ~1087 manifests under knowledge/store that wrapper paid a SUBSHELL PLUS A CLI FORK PER PLANE, plus date/sed/head/mkdir every tick. MEASURED COST OF THE WRAPPER: 717s per run against a DECLARED 600s period (three independent measurements: 655s, 700s+, 717s), and a sibling seat measured it consuming 1399s of an 1800s clock window = 78pct, starving 31 of 45 jobs. It is also the direct source of the RED forks_per_sec=57 in nx_procchurn. This organ replaces ~2x1087 forks with ZERO. (STAR)A SHELL SCRIPT THAT WRAPS A SOVEREIGN ORGAN PAYS A PROCESS PER ITEM TO DO WORK THE LIBRARY WOULD DO PER CALL -- THE COST IS NOT THE ALGORITHM, IT IS THE WRAPPER. (STAR)THE SLOWEST THING ON A SOVEREIGN BOX IS THE PART THAT IS NOT SOVEREIGN YET. THE ONE THING THIS MUST NOT INHERIT: nx_seg_compact_cli.elf takes a BLOCKING flock(LOCK_EX) and holds it until PROCESS EXIT. Its own header records what that cost: "48 nx_segguard.sh + 24 nx_seg_compact_cli stacked, all State=S, oldest ~6h, thread count climbing ~260/hr on a box already 92pct into swap." A blocking lock is survivable in a fork-per-plane design because the process dies; in a SINGLE long-lived sweeper it would wedge the whole sweep forever. So this organ takes LOCK_EX|LOCK_NB and SKIPS a contended plane, and CLOSES the fd every iteration so locks can never accumulate. (STAR)A LOCK DISCIPLINE THAT IS SAFE ONLY BECAUSE THE PROCESS EXITS IS NOT SAFE IN A PROCESS THAT DOES NOT. BOUNDED + RESUMABLE (rule 10, idempotent): a wall-clock budget caps one run, and a persisted CURSOR makes the next run continue where this one stopped. A budget WITHOUT a cursor would re-scan the same alphabetical head forever and never reach the tail -- silent permanent blindness for whatever sorts last. nx_segsweep [threshold] [budget_secs] license_tier: ORIGINAL No hw writes (Rule 26). expect_exit: 0