nx_uefi_fence_gate.nx

nx_uefi_fence_gate.nx -- F948 "never-brick FENCE gate for UEFI-on-metal" (os lane; deps F103c=D; 2026-07-21). THE CLAIM (rule 26, proven MECHANICALLY not asserted): the autonomous UEFI lane is FILE+EMULATOR-only. Every lane source in knowledge/uefi_lane_manifest.conf is scanned against the data-driven deny list knowledge/uefi_fence_deny.conf: build-class organs (F949 EFI app / F950 ESP builder / F951 boot-proof) may carry ZERO firmware/NVRAM/raw-device write primitives; metal-class organs (F952) must additionally declare NX-OPERATOR-CONFIRM + NX-REMOVABLE-ONLY and still carry ZERO firmware-write primitives -- the only device class they may name is the operator-confirmed removable target. Scanner completeness is proven against a poison fixture that trips EVERY all-class pattern (C09), marker falsifiability against the same (C10), fail-closed on missing files (C03/C11), deterministic (C12), non-vacuous (C13). D001: emits the nx_gate_verdict contract. REFUTATION: argv[1]=negctl injects the poison fixture into the BUILD-class scan set -> the fence tooth (C04) MUST go RED alone; registered sibling nx_uefi_fence_negtest pins that arg. license_tier: ORIGINAL expect_exit: 0 No hw writes (Rule 26): this gate only READS files.