nx_stubmain_lib.nx

nx_stubmain_lib.nx -- THE STUB-MAIN RULER. One predicate, so the writer and the reader of this classification cannot drift apart. THE DEFECT IT NAMES, MEASURED 2026-09-03. buildroot/runtime/nx_https_get.nx ends with `// Compile-only smoke.` and `func main() -> i64 { return 0 }`. Nothing is reachable from that main, so the compiler DEAD-STRIPS the entire TLS closure: /api/build returns action=BUILT src_stable=1 with no error and stages 14,880 bytes against a LIVE 468,929-byte binary. Any seat running the ordinary build-then-promote loop replaces the estate's sovereign HTTPS client with a binary that returns 0 -- silently, off a GREEN receipt. ★THE SHARP PART, AND THE REASON THIS NEEDS ITS OWN RULER: nx_catalog ALREADY detects libraries, by "no top-level main()" -- nx_https_fetch reads `KIND LIB (a binary is NOT expected for this one)` and is therefore safe from this whole class. nx_https_get EVADES that detector PRECISELY BECAUSE IT HAS A MAIN. A stub one. So the lib detector is defeated by the very convention that lets a library compile standalone, and the catalogue then reports the name as LIVE because an .elf sits beside it. THREE STATES, NEVER TWO -- collapsing them is the whole bug: SM_NO_MAIN a library by construction. nx_catalog already handles it. NOT this ruler's subject. SM_STUB_MAIN a main that returns a constant and calls nothing. Compiles, links nothing, ships a no-op. SM_REAL_MAIN a program. WHAT IT DELIBERATELY DOES NOT DECIDE. Being SM_STUB_MAIN is NOT by itself a defect: it is a deliberate estate convention ("compile-only smoke") and a census over 12,067 sources found 114 of them, of which every one checked was correctly unpromoted. The ARMED condition is the CONJUNCTION -- stub main AND a promoted binary somebody calls -- and the promoted half is nx_artifactdrift's to answer, because that organ already walks the serving root and already resolves sources through PS_SRCROOT_A then PS_SRCROOT_B in builder order. This lib exists so that adoption is one predicate call and NOT a second tree walker: the estate has one drift census and must keep having one. NO SIZE THRESHOLD, ON PURPOSE. The tempting rule is "refuse a candidate much smaller than live", but that is a magic number (rule 11) and it fails in both directions -- a legitimate toolchain shrink of 304 permil is on record, and a stub of a SMALL program is not much smaller than the real thing. The structural fact (main calls nothing) is the signal; size is at most a triage hint. license_tier: ORIGINAL