nx_sheriff_gate.nx

nx_sheriff_gate.nx -- gate for the UAT/acceptance sheriff (nx_sheriff). On nx_gate_verdict (migrate-on-touch law: new gates import THE lib). Teeth: T1 above-floor domain ACCEPTED; T2 sub-floor WITH filed rung = ACCEPTED-FILED-CLIMB (the climb is the design); T3 sub-floor NO rung = REJECTED-UNFILED-GAP + proposed SHF- debt row (and NO debt proposed for the accepted domain); T4 unscored row = UNSCORED (score -1, never invented); T5 DONE claim over lane-scoped open debt = REJECTED-DONE-OVER-DEBT; T6 clean DONE = ACCEPTED; T7 NEG-CONTROL fail-closed: absent registry -> rc!=0 + SHERIFF-FAIL (no acceptance from missing evidence); T8 SCALE tooth (scale law: production-shape input, declared envelope): 600-row registry -> rows_scanned=512 rows_dropped=88 DECLARED, never silent. Per-run-unique /tmp fixtures; drives the staged CLI via dep_run_capture. license_tier: ORIGINAL No hw writes (Rule 26). expect_exit: 0