nx_vizsla_serve_gate.nx

nx_vizsla_serve_gate.nx -- VIZSLA serve gate: the HTTP transport routes a first-party browser request to the right handler. Uses the daemon's `handle <base> <reqfile>` mode (router over a request read from a file = gateable without socket timing). Proves: GET /<tid> -> the sovereign page; POST /v/submit -> mutation + 303 redirect; invalid tid blocked. 100% sovereign: writes the tenant + synthetic HTTP requests, runs the daemon in handle mode, greps the response + the mutated tenant files. Rows: 1 get-200 GET /srv -> "HTTP/1.1 200 OK" 2 get-page response carries the rendered page ("Nishi Vizsla") 3 get-form response carries the in-page form ("Add someone") 4 post-303 POST /v/submit (add-contact) -> "303 See Other" + "Location: /srv" 5 post-mutated after the POST, srv.contacts.txt has CONTACT webby Web-Person inner 08-08 6 neg-invalid-tid POST with tid=".." -> NOT mutated into srv (no "Evil") Evidence: VIZSLA-SERVE-GATE -> stdout + knowledge/status/vizsla_gate.log; exit 0 iff 6/6. license_tier: ORIGINAL