nx_swarm_tend_gate.nx

nx_swarm_tend_gate.nx -- gate for the active queue tender (SOTA queue ops, no fire-and-forget). T1 PURE verdict table: no waiters->OK, fresh waiter->DRAINING, starved waiter->JAMMED. T2 ACTIVE REAP: plant a HOLD for a DEAD pid + a HOLD for a LIVE pid (init=1) in the store, with NO waiter present; tend_reap frees ONLY the dead one (writes DONE) -> the leaked-slot bug the passive path can't fix (no waiter to trigger it). reaped==1; live holder untouched. T3 JAM DETECTION live: plant a waiter with an ancient enqueue timestamp -> tend_health sees a large oldest_wait_ms -> verdict JAMMED (the traffic-jam alarm fires before a silent timeout). T4 clean: fresh empty queue -> OK, 0 reaped. T5 MULTI-ENTRY index: dead holder + live holder coexist in q:ids; reap frees ONLY the dead one, the live one stays counted. (The case a false "seg_store bug" diagnosis claimed impossible -- the real bugs were nx_cc empty-literal + const-syscall getpid, both fixed/worked around.) license_tier: ORIGINAL expect_exit: 0