code wiki / _hdl_build / nx_shard_guardrail.nx

nx_shard_guardrail.nx

buildroot/runtime/_hdl_build/nx_shard_guardrail.nx

1146 B17 linesdepth 2pulls 2 transitivereach 2 importersview sourcekind librarytopic shard
docsdependenciesstructsconstsfunctions

about

nx_shard_guardrail.nx -- CAP-SHARD-GUARDRAIL (cross-shard R4): org-level POLICY INHERITANCE. An org-default required-level per action is inherited by EVERY shard; a shard may TIGHTEN it (demand a HIGHER level) but NEVER LOOSEN it below the org floor -- so a tenant can't weaken a org-wide guardrail, only strengthen it for their own shard. This is the AWS Organizations SCP / GCP Org-Policy inheritance guarantee, done deterministic + sovereign, composing the level model (ag_resolve_level) over the shard registry. license_tier: ORIGINAL

dependencies 1 imports · 2 importers

nx_syscalls.nx nx_shard_guardrail.nx nx_shard_governance_gate.nx nx_shard_guardrail_gate.nx

imports: nx_syscalls.nx

imported by: nx_shard_governance_gate.nxnx_shard_guardrail_gate.nx

structs

none

consts

none

functions

9func gi_effective_required(org_required: i64, shard_required: i64) -> i64
called by 2: gi_allowedmain
14func gi_allowed(granted: i64, org_required: i64, shard_required: i64) -> i64
called by 2: authzmain calls 1: gi_effective_required