nx_wd_core.nx

nx_wd_core.nx -- DISPATCH-ACT CORE (mainless): the Warden's attempt loop over the assignment queue (X-Q-003 rung 1; spec 2026-06-11-sclass-exceed- backlog.md ADDENDUM Q3). RACI: Warden verb = ATTEMPT/route. This core owns NO priority (PM's w column), NO sequencing policy (an_pick is the Conductor's, imported), NO done-judging (nx_reconcile owns DONE flips on MARK evidence -- this core RUNS reconcile and READS the queue back). THE BEAT (wd_beat), bounded to <=1 raise + <=1 attempt per call: pick = an_pick (highest-w runnable TODO) pick has ||EXEC=<organ> recipe -> ATTEMPT: lane-build+run the organ (deadline-guarded, hang-proof), run nx_reconcile, re-read the queue; row DONE -> ASSIGNRESULT verdict=GREEN row !DONE -> flip row RED (fail-loud, no livelock) + verdict=RED pick has no recipe -> RAISE: flip row TODO->NOVEL (tutor batch picks it up -- "a RAISED-HAND row instead of a silent stall") AND still attempt the best EXEC-covered runnable row so the beat does work. Rung 2 (filed as its own queue row): covered-SHAPE routing via the warden pattern classifier -> emitter lanes; this rung covers the EXEC-recipe class (the X-EX-001 convention) only, and ASSIGNRESULT route= says which. Trust boundary (defensive at boundary law): EXEC basenames come from a hand-curated TSV but are validated anyway -- [a-z0-9_] only, 1..63 chars, so a recipe can never path-escape the lane's source resolution. Queue rewrites change line length (TODO->NOVEL grows, TODO->RED shrinks); sys_openat_wr has no O_TRUNC, so shrink pads trailing '\n' bytes -- an_load and the line-walkers all skip empty lines (verified against their parsers). license_tier: ORIGINAL