code wiki / _hdl_build / nx_ttrust_response.nx
nx_ttrust_response.nx
buildroot/runtime/_hdl_build/nx_ttrust_response.nx
about
nx_ttrust_response.nx -- the CAPTAIN MORONI active-defense FSM (operator: "a true captain moroni -- i
wont attack you but if you attack me ill put you in the ground and find where you came from and scorched
earth back on that connection WITH PROPER AUTHORIZATION"). Makes the horse-on-fire protocol from
nishi-trusting-trust-defense executable: the graded response when a lattice-layer refusal fires. Pure
logic; the thresholds are the operator's doctrine. TWO disciplines are enforced:
(1) NO 90s-car-alarm -- escalation requires ALL THREE independent evidence axes (behavior + context +
provenance) to violate a stated invariant. Wind violates no contract, so wind never trips.
(2) NO vigilante -- the phase-6 counter-offensive (scorched earth on the attacker's own pipe) fires ONLY
with an explicit Auth(counter_offensive) token rooted in hex0. Without it the FSM STOPS at phase 5
(signed evidence held privately, no counter-pipe). license_tier: ORIGINAL
Composes nx_ttrust_lattice (the refusal that triggers this response).
dependencies 1 imports · 1 importers
imports: nx_syscalls.nx
imported by: nx_ttrust_response_test.nx
structs
| none |
consts
| 15 | const CM_PRINCIPLED: i64 = 0 // principled defense posture only (no escalation) |
| 16 | const CM_DETECT: i64 = 1 // multi-axis detection confirmed |
| 17 | const CM_DOCUMENT: i64 = 2 // capture bytes + parent_id chain |
| 18 | const CM_SOFT_REFUSE: i64 = 3 // fake-return + narrate to the attacker |
| 19 | const CM_ENTRAP: i64 = 4 // sandbox in a fishbowl, observe full intent |
| 20 | const CM_ATTRIBUTE: i64 = 5 // hex0-rooted signed attribution, held privately |
| 21 | const CM_SCORCH: i64 = 6 // counter-narrate: signed indictment via attacker's own channel |
functions
| 24 | func cm_axes_confirmed(behavior: i64, context: i64, provenance: i64) -> i64 called by 1: main |
| 31 | func cm_phase(confirmed: i64, attacker_continued: i64, attack_completed: i64, has_auth_token: i64) -> i64 called by 1: main |
| 40 | func cm_stayed_defensive(phase: i64) -> i64 { if phase == CM_SCORCH { return 0 } return 1 } called by 1: main |