nx_tenancy_gate.nx

nx_tenancy_gate.nx -- SOVEREIGN tenancy-orthogonality gate ORGAN (ports nx_tenancy_orthogonality_gate.sh + nx_tenancy_gate_alert.sh out of bash -- operator law: sovereign all the way up and down, no shell loops). Enforces the three-plane model (alpha=private dogfood | product=own domain | client=isolated, billable): orthogonality is DATA-isolation (realms/keys/stores), never port-exclusivity. Reads the LIVE SSOTs each cycle, checks INV-1..9, classifies findings against the acknowledged debt baseline (GREEN with known debt baselined; RED the instant NEW sprawl appears), serves the full report on 127.0.0.1:18094 (seqlock shared page + forked server -- the proven /status pattern; NO tsv, NO files as the interface), and appends NEW violations to tenancy_alerts.log. Invariants: INV-1 every served host (proxy_routes+sites) declares a plane in tenancy_planes.conf INV-3 every RUNNING nx_mgmt_api sits on a DECLARED shards.conf mgmt port (no orphan store-sharer) INV-4 client shards use their OWN keys+store (never the shared control opaque_keys/opaque_store) INV-5 a confirmed product is not a bare path on an alpha domain (products graduate to own domains) INV-6 every property_registry domain routed to :8443 has a cert row in certs/sni_certs.manifest INV-7 every manifest cert+key file exists and is non-empty INV-8 every sites.conf vhost has a domain_lifecycle.reg row (the monitored-domain list) INV-9 LIVE-EDGE EVIDENCE via the sovereign HTTPS client (fork+exec nx_https_get_cli.elf, loopback endpoint, SNI from the URL): stage!=production MUST serve the coming-soon marker (else = an unapproved go-live LEAK); stage=production must NOT (else = launch STUCK). Fetch-failure is its own finding (fetchfail), never mistaken for a leak -- an improvement over the bash gate, which could read an empty failed fetch as "no marker" = false leak. Skipped while the edge is down (selfheal owns that alarm). BOUNDED-VSZ discipline: every buffer is allocated ONCE before the loop; the hot loop performs ZERO mmap. license_tier: ORIGINAL module: nishi-core.ops.tenancy_gate