nx_sweepgate.nx

nx_sweepgate.nx -- ASK A POPULATION QUESTION BY ITS INVARIANT, AND SEE EVERY SPELLING OF IT. WHY THIS EXISTS, from a measured failure on 2026-08-14. An out-of-bounds allocation bug was swept for with the pattern `sys_mmap(128) as *NxEGraph`. That returned 9 sites in 5 files, and the number was published as the population. It was the population OF ONE SPELLING: the same struct was also being allocated at 256 and at 96, and the 96-byte sites overran a 280-byte struct by 184 bytes -- the WORST sites in the estate, left live by a sweep that reported a clean, confident, complete-looking answer. The true population was 27 sites in 16 files. What eventually surfaced the miss was not another grep; it was the arena's ring detector printing ARENA-OVERRUN while the gate reported 15/15 GREEN. -- A SWEEP THAT MATCHES THE WRONG VALUE REPORTS A CLEAN POPULATION AND LEAVES THE WORST SITES LIVE. THE RULE THIS MAKES MECHANICAL: query by the INVARIANT (`as *NxEGraph`), never by an INSTANCE (`sys_mmap(128) as *NxEGraph`). An instance pattern cannot answer a question about its own siblings, and it fails in the direction of looking finished. So this organ takes the invariant, finds every line, and reports the DISTINCT NUMERIC LITERALS across those lines with their counts. On the real case its first line of output would have been: shapes=3 128 x9 256 x11 96 x6 and the 17 hidden sites are visible before anyone acts on the 9. IT ALSO REFUSES TO CENSUS THROUGH A PARTIAL SCAN. nx_shelltool already prints coverage_complete and corpus_complete; on 2026-08-14 a `matches=0` was read as absence while corpus_complete was 0, and the wrong conclusion was published. Those flags are fields a reader may ignore, so this organ reads them FOR the reader and returns UNPROVEN rather than a number it cannot stand behind. -- A NUMBER THAT MIGHT BE PARTIAL IS MORE DANGEROUS THAN NO NUMBER. COMPOSES nx_shelltool; adds no second scanner. exit 0 SINGLE-SHAPE - 1 SPLIT (the finding) - 3 UNPROVEN (partial coverage, or the tool could not be reached) - 2 usage. license_tier: ORIGINAL expect_exit: 0