nx_ssh_client.nx

nx_ssh_client.nx -- sovereign SSH-2 client, end to end: KEX -> key derivation -> chacha20-poly1305@openssh.com transport -> userauth (publickey, Ed25519, our own identity) -> session channel + exec. All bits-up on our own crypto; proven phase by phase against the real NAS OpenSSH server. This is the remote-access substrate for managing the fleet (and the path to deploying the sites TCP_NODELAY fix). Identity: a persistent Ed25519 seed at ~/.nishi/nx_ssh_id (generated once). Its authorized_keys line is printed so it can be authorized on the NAS. license_tier: ORIGINAL