nx_selfsuff.nx

nx_selfsuff.nx -- THE SOVEREIGNTY LEDGER: outside DEPENDENCY measured per /compare domain and per organ, so "self sufficiency" is a number with a worklist instead of a feeling. Operator 2026-08-20: "where would be the best investment that drives the most self sufficiency down". Recorded interpretation (feedback-foundation-and-autonomous-frontier-2026-08-20): drive outside DEPENDENCY down / sovereignty UP, across three measurable kinds. TWO of the three are measured HERE. The third -- outside TOOLS -- already has an incumbent (nx_claude_harvest ch_gauge_json) and a second ruler for it would be the duplicate-ruler defect, so this organ does not compute it and SAYS SO rather than quietly leaving a gap. (b) outside SERVICES -- what breaks with no internet, DERIVED FROM WHAT THE CODE CALLS. Every "scheme://host" occurrence that sits INSIDE A STRING LITERAL and OUTSIDE A COMMENT is a host the organ dials. Both halves of that predicate are load-bearing: a scanner that does not skip comments measures the DOCUMENTATION, not the code (measured law 2026-08-06), and a scanner that skips strings measures NOTHING, because the URL *is* a string. Hosts classify against the conf's sovereign= prefixes; everything else is OUTSIDE and is NAMED in the ledger, never only counted. TWO SEPARATE ANSWERS, because they answer two different questions and merging them would silently re-price the whole estate: outside_dep -- distinct outside hosts an organ dials ITSELF, plus distinct carriers it touches at ONE HOP. Sparse and exact; this is the RANKER's coefficient, and it is held at one hop deliberately so a measurement change cannot re-price every rung behind the reader's back. net_dep -- does this organ reach the network AT ALL: DIRECT (a socket primitive in its own code, or a host it dials itself) or VIA-HELPER (it reaches one over the TRANSITIVE import/fork closure). This is the honest answer to "what breaks with no internet", and it needed the closure: an organ that reaches the network through a helper carries NO url literal and NO ".elf" literal, so a same-organ test reports every well-factored caller as sovereign. THAT ERROR LOOKS LIKE GOOD NEWS, which is why it survived a whole build. The closure walks import edges as well as fork edges, seeds itself from the matrix organs and pulls in whatever they reach; lane F proved the import graph ACYCLIC (0 nontrivial SCCs over 18,945 nodes), so the fixpoint terminates. Nodes the closure pulls in are EVIDENCE, not subjects: they are never published in the host partition, the ledger or the roll-up. (c) CLAUDE-IN-THE-LOOP -- an organ whose capability only exists while a seat drives it: absent from every clock row and every roster/registry the conf names, AND forked by nothing in the scanned corpus. When no autonomy source loads, seat_only is -1 UNOBSERVED: an axis that cannot see must ABSTAIN, not acquit. ⚠ SCOPE, STATED BECAUSE IT SETS THE DIRECTION OF THE ERROR: the fork-edge corpus is drawn