nx_svc_budget_gate.nx

nx_svc_budget_gate.nx -- REGRESSION PROOF for the self-retiring-service class (debt seq882, 2026-07-25). THE DEFECT IT LOCKS OUT: 44 sovereign services run `while served < budget { accept... } sys_exit(0)`. One launched with a SMALL finite budget therefore RETIRES ITSELF -- and nx_hostctl's guard (nx_hostctl.nx:798) reads the repeated exits as a crash-loop and BACKS OFF, so the surface goes genuinely DOWN while `status` still prints UP. Measured live 2026-07-25: the gallery gateway, the wiki/hub/torrent/gen gateways, the main OPAQUE login (:9091) AND the mgmt API itself were all launched with budget=5000. That is the root cause of the operator-reported "gallery wont let me login" AND of the chronic mgmt/MCP transport flake. nx_docportal_search_serve.nx:303 documents this SAME failure diagnosed on 2026-07-03 -- fixed there, never swept. This gate exists so it can never silently return. WHY IT ASSERTS ON BYTES, NOT INTENT: "we fixed it" is author optimism, not evidence. Each tooth greps the actual launch-command constant. T8 greps the LIVE DEPLOYED BINARY, not just source -- this session proved that lie twice (a carve-out banked in memory as "landed in source" was NOT in source; a deployed gallery thumbnailer predated its own fix by three weeks). Source-GREEN + binary-RED = NOT SHIPPED. T9/T10 are MUTATION teeth: they fail if the exact bad literal reappears, so a revert cannot pass quietly. Named _svc_ not _daemon_ deliberately: md_promote_deny substring-blocks "daemon" so real daemons are forced through the health-checked /api/deploy. This is a one-shot organ, so the honest name is the promotable one. Run from the nishihost CWD (the tools daemon fork-execs it there). license_tier: ORIGINAL No hw writes (Rule 26).