nx_wiki_publish_guard.nx

nx_wiki_publish_guard.nx -- THE PRE-PUBLISH GUARD (the wiki's "liar-kill"): a fail-closed POLICY DECISION POINT that REFUSES to publish a wiki page unless it passes every integrity check. Mirrors the access-wall PDP discipline (nx_access_wall): DENY-BY-DEFAULT + FAIL-CLOSED -- a page is ALLOWed only when ALL checks pass; if a check cannot even be EVALUATED, the verdict is REJECT (never a silent pass). It is PURE, DETERMINISTIC and READ-ONLY: it only INSPECTS the page bytes (and the content-addressed archive, to test whether a citation RESOLVES); it does NOT push anything. THE CHECKS (ALL must pass to ALLOW; first failure wins, with a machine-readable reason code so the publisher/audit logs WHY a page was refused): PG_REJECT_NO_FRESHNESS the page has no freshness/epoch stamp in its footer (un-stamped page = we cannot prove it is fresh -> fail-closed REJECT). PG_REJECT_DANGLING_CITE a [[cite:<cid>]] token's cid does NOT resolve in the content-addressed archive (war_get_by_cid <= 0). The cite would render "(archiving pending)" -- a dangling source -> REJECT. (This REUSES the exact cite resolution mechanism nx_wiki_cite_render uses: war_get_by_cid.) PG_REJECT_DEAD_LINK an internal href to /wiki/<x>.html targets a slug NOT in the provided corpus set -> a broken on-site link -> REJECT. PG_REJECT_PLACEHOLDER the body is empty, or contains an obvious placeholder marker (TODO / PLACEHOLDER / lorem) -> not publish-ready -> REJECT. Conservative. PG_ALLOW every check passed. WHY THE CORPUS IS A SET PASSED IN (not the archive): a dead on-site link is about what pages WILL be PUBLISHED together (the live corpus), which the publisher knows; the archive is the cite substrate. corpus = parallel arrays (slug ptr[], slug len[], count) -- the same array idiom nx_access_wall_gate uses for policy (and NishiLang caps a call's arg count, so a set is passed as arrays). IMPORTS: nx_wiki_archive.nx (war_get_by_cid + WAR_PREFIX; transitively nx_seg_store + nx_canon_cid, each spliced ONCE by module-identity dedup) and nx_syscalls.nx. Pure NishiLang, NO SQL, no .sh/.py/.js, no new .tsv/.conf. license_tier: ORIGINAL