nx_vizsla_budget.nx

nx_vizsla_budget.nx -- NISHI VIZSLA V1: the family budget ledger. Fills finance/EDITOR (reconcile) and feeds finance/ARCHITECT (plan) from the V0 gap profile. Storage = the INFOMGMT seg_store substrate (append-only immutable segments, rename(2) commit point, fsync power-loss closure) with nx_canon_cid content addressing -- NO SQL, additive law: money history is never destroyed. Commands (argv[1]): load <txnfile> <prefix> [segid] parse TXN rows -> canonical records -> CID keys "txn:nxc1-..."; a record whose CID already exists in the store is a DUP not a rewrite = IDEMPOTENT RE-LOAD (law 10) by construction. segid defaults to sys_now_us(); the gate passes explicit ids for determinism. report <prefix> <envfile> [asof] per-category sums vs ENV envelopes. asof = max segment id to read (0 or absent = ALL) = TIME-TRAVEL: the ledger exactly as it stood at that commit, reconstructed from history. verify <prefix> recompute every record's CID and compare to its key = TAMPER-EVIDENCE. Any flipped byte names its segment. (no args) report on the durable family store knowledge/vizsla/ledger- with knowledge/vizsla/envelopes.txt. File formats (line records, # comments): TXN <date> <amount_cents> <category> <desc> (amount: digits only -- V1 scope is the expense ledger; credits/income = V1b, flagged not silent) ENV <category> <budget_cents> Determinism: stdout has no clocks; epoch header goes to "<prefix>budget.log" only (log path derived from the store prefix, so gate fixtures in /tmp can never pollute the family log). Loud-fail law: missing files, malformed TXN rows, non-digit amounts = exit 1 with a named reason. EXCEED vs consumer budget apps: additive history + as-of-commit time travel + content-address tamper evidence; none of Mint/YNAB-class tools prove any. spec: knowledge/specs/2026-06-10-nishi-vizsla-ladder.md license_tier: ORIGINAL