nx_wasmpage_census.nx

nx_wasmpage_census.nx -- EVERY SHIPPED PAGE THAT CARRIES A WASM MODULE, VERIFIED. NO SAMPLING. WHY IT EXISTS. On 2026-08-14 /craft shipped black twice because its framebuffer had outgrown the module's own declared linear memory, and nothing in the pipeline could see it: size floors and magic bytes cannot tell a module that RUNS from one that TRAPS. The fit guard now lives in the shared emitter, so no NEW page can ship with that defect -- but every page emitted BEFORE the guard existed is still out there unmeasured, and I could not enumerate them: a grep across the docroot's 79,966 files times out. ★"TOO SLOW TO MEASURE" IS A TOOLING GAP, NEVER A LICENCE TO SAMPLE. This is the tool. WHAT IT DOES: walks the docroot, and for every .html that carries an embedded module (the emitter writes it as const B="<base64>") forks nx_wasm_vm_verify on that page and classifies the verdict. ★IT COMPOSES THE RULER RATHER THAN RE-IMPLEMENTING IT. The decode, the parse, the declared-memory read and the fit arithmetic all live in nx_wasm_vm_verify; duplicating any of that here would give the estate two answers to one question and no way to tell which had rotted. The partition is printed and RECONCILED against the file count -- a census whose parts do not sum is a leak, and every OVERSIZE page is NAMED, because a count without a worklist is not actionable. license_tier: ORIGINAL expect_exit: 0