nx_srcdiverge_gate.nx

nx_srcdiverge_gate.nx -- BINARY-AHEAD-OF-SOURCE detector (seq1392 rung 2). license_tier: ORIGINAL THE CLASS IT KILLS: a deployed elf can SERVE a route whose handler no longer exists in source -- because a concurrent whole-file write or an /api/unpack tar reverted the source while the binary kept running. Nothing warns. The next /api/build by ANY session or cron then silently DELETES a live capability that other lanes may already depend on. This happened FOUR times in one session (seq1392/1445); the perf lane had already adopted /api/gate_run by the third. I only ever caught it by luck, when an unrelated anchored edit returned NOMATCH. Luck is not a control. HOW: extract every /api/<name> token from the DEPLOYED elf's string data, then assert each one also appears in the SOURCE. A route the binary advertises but the source cannot produce is DIVERGENCE = RED. ★NON-VACUITY IS THE WHOLE POINT (T0): a scanner that extracts ZERO routes would report GREEN forever while the tree burned. So the gate REFUSES unless it finds at least SD_MIN_ROUTES -- an instrument that cannot fail to find anything is an instrument that proves nothing.