code wiki / _hdl_build / nx_vault_census.nx
nx_vault_census.nx
buildroot/runtime/_hdl_build/nx_vault_census.nx
about
nx_vault_census.nx -- HONEST capability audit model: our sovereign Vault vs HashiCorp Vault (operator:
"audit our capabilities ... our own hashicorp nishi version of their vault"). Pure logic over the DATA
census (knowledge/registry/vault_capability_census.tsv). A feature may be credited HAVE/HAVE-GATED ONLY
with cited evidence -- a HAVE claim with NO evidence is the false-have LIAR-KILL (the system refuses to
credit itself a capability it can't show). NO fabricated coverage; GAP/FLAGGED/BLOCKED are honest.
license_tier: ORIGINAL Composes the infra-control custody (the vault holds the NAS/router/west-server creds).
dependencies 1 imports · 1 importers
imports: nx_syscalls.nx
imported by: nx_vault_census_test.nx
structs
| none |
consts
| 10 | const VS_GAP: i64 = 0 // absent |
| 11 | const VS_PARTIAL: i64 = 1 // registered / partial |
| 12 | const VS_HAVE: i64 = 2 // built, evidence |
| 13 | const VS_HAVE_GATED: i64 = 3 // built + re-runnable gate GREEN |
| 14 | const VS_FLAGGED: i64 = 4 // honestly named; needs hardware (not a software gap) |
| 15 | const VS_BLOCKED: i64 = 5 // attempted; on a filed defect |
functions
| 18 | func vc_is_have(status: i64) -> i64 { if status == VS_HAVE { return 1 } if status == VS_HAVE_GATED { return 1 } return 0 } |
| 21 | func vc_is_gap(status: i64) -> i64 { if status == VS_GAP { return 1 } return 0 } called by 1: main |
| 24 | func vc_false_have(status: i64, has_evidence: i64) -> i64 { if vc_is_have(status) == 1 { if has_evidence == 0 { return 1 } } return 0 } |
| 27 | func vc_clean(status: i64, has_evidence: i64) -> i64 { if vc_false_have(status, has_evidence) == 1 { return 0 } return 1 } calls 1: vc_false_have |
| 30 | func vc_coverage_permil(have: i64, total: i64) -> i64 { if total == 0 { return 0 } return (have * 1000) / total } called by 1: main |