nx_wall_triage.nx
buildroot/runtime/nx_wall_triage.nx
about
nx_wall_triage.nx -- the WALL ROOT-CAUSE organ (Doctor verb: DIAGNOSE).
module: nishi-core.search.wall_triage
depends: nx_guarded_run.nx, /tmp/_wt_probe_one.sov.elf
capability: DIAGNOSTIC + EVIDENCE
WHY (2026-06-10 census finding): rumble.com + archive.ph refused our fetch
with a flat rc=2 -- which stage refused us was INVISIBLE, so "TLS
fingerprint?" stayed a guess. This organ stages the probe per host and
NAMES the wall from the child's exit code:
HTTP-REACHED(status) the wall (if any) is HTTP-level -- status recorded
CONNECT-REFUSED DNS/TCP layer -- host gone, blocked IP, or filter
TLS-REFUSED handshake rejected = ClientHello-fingerprint
suspect -> a BROWSER-lane defect (our CH shape),
auto-filed as a finding row
FETCH-FAIL TLS up, HTTP send/read failed
TIMEOUT-REAPED hang (named, reaped, never a wedge)
Re-runnable on ANY host list; durable rows -> knowledge/status/wall_triage.log.
Controls included (example.com must be HTTP-REACHED for the run to be
trusted -- a red control means OUR stack/egress is sick, not the target).
dependencies 3 imports · 0 importers
imports: nx_str.nxnx_syscalls.nxnx_guarded_run.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| 26 | const NX_WT_HOSTS: i64 = 4 |
| 27 | const NX_WT_DEADLINE: i64 = 15000 |
functions
| 29 | func wtp(s: *u8) -> i64 { sys_write(1, s, nx_str_len(s)); return 0 } |
| 30 | func wtn(v: i64) -> i64 |
| 38 | func wtf(fd: i64, s: *u8) -> i64 { sys_write(fd, s, nx_str_len(s)); return 0 } |
| 39 | func wtfn(fd: i64, v: i64) -> i64 |
| 51 | func wt_url(e: i64) -> *u8 called by 1: main |
| 58 | func wt_out(e: i64) -> *u8 |
| 66 | func wt_read_head(path: *u8, buf: *u8, cap: i64) -> i64 |
| 76 | func wt_status_line(fd: i64, b: *u8, n: i64) -> i64 |
| 92 | func main() -> i64 |