code wiki / _hdl_build / nx_shard_guardrail_gate.nx

nx_shard_guardrail_gate.nx

buildroot/runtime/_hdl_build/nx_shard_guardrail_gate.nx

3284 B47 linesdepth 3pulls 4 transitivereach 0 importersview sourcekind gate/prooftopic shard
docsdependenciesstructsconstsfunctions

about

nx_shard_guardrail_gate.nx -- hermetic gate for CAP-SHARD-GUARDRAIL (R4). Proves the tighten-only inheritance: a shard can RAISE the required level but a shard's attempt to LOWER it below the org floor is ignored -- a tenant can never weaken an org-wide guardrail. Sovereign: nx_syscalls + nx_shard_guardrail. expect_exit: 0

dependencies 3 imports · 0 importers

nx_syscalls.nx nx_shard_guardrail.nx nx_gate_verdict.nx nx_shard_guardrail_gate.nx

imports: nx_syscalls.nxnx_shard_guardrail.nxnx_gate_verdict.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main gp sys_write gi_effective_required gi_allowed gi_effective_required ↻ gn sys_write ↻ sys_mmap gv_ctr sys_mmap ↻ gv_verdict gv_puts sys_write ↻ gv_num sys_mmap ↻ sys_write ↻ sys_munmap gv_journal sys_openat_append sys_mmap ↻ gv_catn sys_mmap ↻ sys_munmap ↻ sys_now_realtime_sec sys_mmap ↻ sys_clock_gettime_real gv_cat sys_write ↻ sys_close sys_munmap ↻ sys_exit

structs

none

consts

none

functions

8func gp(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
called by 1: main calls 1: sys_write
9func gn(v: i64) -> i64 { var t: i64=v; if t<0{sys_write(1,"-" as *u8,1);t=0-t} let tm:*u8=sys_mmap(24); var k:i64=0; if t==0{tm[0]=48 as u8;k=1} while t>0{tm[k]=(48+(t%10)) as u8;t=t/10;k=k+1} let b:*u8=sys_mmap(24); var j:i64=0; while j<k{b[j]=tm[k-1-j];j=j+1} sys_write(1,b,k); return 0 }
called by 1: main calls 2: sys_writesys_mmap
11func main(argc: i64, argv: *i64) -> i64
calls 7: gpgi_effective_requiredgi_allowedgngv_ctrgv_verdict+1