nx_torrent_access.nx

nx_torrent_access.nx -- ACCESS POLICY for torrent downloads + watch-while-stream, by AREA. Operator directive (2026-06-20): "make the gallery able to download sfw or nsfw and the media is where the family users can download; on the gallery it allows where to download (media for sfw OR gallery for nsfw). this is important for the watch while streaming off /torrent." TWO destination areas, each with a REQUIRED level (deny-by-default / fail-closed, NIST SP 800-207, the same posture as nx_access_wall / nx_image_access): AREA_SFW ("media" destination) -> required FAMILY (1): any logged-in family member or the operator. AREA_NSFW ("gallery" destination) -> required OWNER (3): the operator ONLY. A family member (1) can NEVER reach the NSFW/gallery area; no session (0) reaches nothing; garbage/negative levels DENY; an UNKNOWN area DENIES even for the owner (no download to a bogus destination). OWNER==3 MIRRORS nx_galx_authz GALX_OWNER (the gallery's operator-only level for cam recordings + NSFW) and nx_image_access NX_IMGSEARCH_OWNER; single vocabulary, asserted ==3 by nx_torrent_access_gate. The enforcement point (the torrent daemon /add + /stream) derives viewer_level from the OPAQUE- authenticated session exactly as the gallery does (nx_opaque_login olg_whoami -> handle -> roles level), then calls nx_taccess_allow BEFORE writing/serving any byte. Internal CLI callers are trusted (Cardinal 12: validate at the boundary). license_tier: ORIGINAL