nx_toolflags.nx

nx_toolflags.nx -- SAFETY-FLAG DERIVER (2026-08-06). Emits knowledge/tool_flags.conf so tools/list can stop publishing a FABRICATED safety profile for tools whose flags were never looked up. THE DEFECT, MEASURED on the live tools/list: 694 of 869 tools (79.9%) carry the identical quad ro=0 destr=1 idem=0 open=1. That is not a measurement -- it is a hardcoded constant written by ma_schema_append_row at registration time. It does not merely omit, it LIES: nx_pm_board, a READ-ONLY dashboard, is published destructiveHint=true, so an agent that honours annotations refuses a safe read. (The constant errs CONSERVATIVE, so this is an INFORMATION defect, not an unsafe one -- but a fabricated value ends the enquiry where a blank would have invited a lookup.) MATCHES THE KNOWN GOOD: the marker sets and the conservatism below are nx_schema_backfill's sb_derive_flags (shipped 2026-08-06) COPIED DELIBERATELY, not reinvented -- same syscalls, same "DESTRUCTIVE is narrower than writes" split, same refusal to claim `idempotent` (nothing in the source declares it, so it stays 0, the conservative direction). Two consumers is not yet a shared lib (rule 15 says three); if a third appears, extract sb_derive_flags to a lib and delete this copy. THE TWEAK, AND WHY IT IS A SAFETY FIX: sb_derive_flags scans ONE FILE. An organ that writes through an imported helper reaches sys_openat_wr in the LIB, not in its own source, so a single-file scan calls it READ-ONLY -- wrong in the UNSAFE direction. This organ scans the organ's own source AND one level of its `import "x.nx"` closure, and REPORTS `depth0_readonly` vs `depth1_readonly`: the difference IS the count of tools the single-file scan would have mislabelled read-only. The number is published either way, so the tweak can never be claimed without evidence. HONEST: no source, or a read that FILLED the buffer (so a marker past the cap may have been missed), => NOT DERIVED, conservative default kept, and COUNTED. Blank beats bad. nx_toolflags -> writes knowledge/tool_flags.conf, prints a JSON census on stdout license_tier: ORIGINAL No hw writes (Rule 26). expect_exit: 0