code wiki / _hdl_build / nx_url_truth_gate.nx

nx_url_truth_gate.nx

buildroot/runtime/_hdl_build/nx_url_truth_gate.nx

6476 B91 linesdepth 21pulls 128 transitivereach 0 importersview sourcekind gate/prooftopic url
docsdependenciesstructsconstsfunctions

about

nx_url_truth_gate.nx -- ADVERSARIAL reproducibility gate (operator doctrine: a "live" claim must AGREE with the system at the EXACT user-facing URL, or it isn't proven; when researcher-claim and served-reality disagree, that disagreement is the finding). The old verify checked /library.html (our DEPLOY target) and only that a marker STRING appeared -- so it went GREEN while a browser at /library saw a placeholder. This gate instead: (1) GETs the BARE path a user types (/library), (2) compares the served body against the bytes we SHIPPED (web_assets/library.html) -- size within tolerance + our unique content present, (3) tries to REFUTE: the launch-placeholder signature and a foreign-SPA signature must be ABSENT. GREEN only if the user genuinely sees our shipped page. RED (honestly) names which check caught the lie. license_tier: ORIGINAL

dependencies 10 imports · 0 importers

nx_syscalls.nx nx_x509_trust_store.nx nx_trust_store_load_from_certdata. nx_tls13_client_validate_certifica nx_tls13_client_session_run.nx nx_https_url_for_fetch.nx nx_https_url_connect.nx nx_https_get.nx nx_https_get_complete.nx nx_http_response_parse.nx nx_url_truth_gate.nx

imports: nx_syscalls.nxnx_x509_trust_store.nxnx_trust_store_load_from_certdata.nxnx_tls13_client_validate_certificate.nxnx_tls13_client_session_run.nxnx_https_url_for_fetch.nxnx_https_url_connect.nxnx_https_get.nxnx_https_get_complete.nxnx_http_response_parse.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main vg_w sys_write sys_mmap tg_readfile sys_openat_rd sys_read sys_close vg_num sys_mmap ↻ sys_write ↻ nx_trust_store_load_from_c sys_mmap ↻ sys_read_file sys_openat_rd ↻ sys_lseek sys_mmap ↻ sys_read ↻ sys_close ↻ nx_nss_certdata_parse sys_mmap ↻ _pat_class_cert _pat_value_octal _pat_end _find_newline _starts_with _parse_octal_line sys_mmap ↻ _is_space _decode_octal_escape _is_octal trust_store_alloc sys_mmap ↻ nx_x509_trust_store_load sys_mmap ↻ x509_parse sys_mmap ↻ asn1_cursor_init asn1_expect_tag sys_mmap ↻

structs

none

consts

none

functions

20func vg_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
called by 2: vg_rowmain calls 1: sys_write
21func vg_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 }
called by 2: vg_rowmain calls 2: sys_mmapsys_write
22func vg_strlen(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} return n }
called by 1: vg_contains
23func vg_iabs(x: i64) -> i64 { if x<0 { return 0-x } return x }
24func vg_contains(buf: *u8, lo: i64, hi: i64, needle: *u8) -> i64
calls 1: vg_strlen
30func vg_row(id: i64, ok: i64, what: *u8) -> i64
calls 2: vg_wvg_num
35func tg_readfile(path: *u8, buf: *u8, cap: i64) -> i64
called by 1: main calls 3: sys_openat_rdsys_readsys_close
42func main() -> i64
calls 6: vg_wsys_mmaptg_readfilevg_numnx_trust_store_load_from_certdatasys_exit