nx_workstream_registry_gate.nx

nx_workstream_registry_gate.nx -- THE REFEREE for WMS-R1 (the workstream-registry SSOT). Structural twin of nx_recall_or_red_gate: just as that proves every SEEN failure is RECALLED, THIS proves the registry is a COMPLETE, content-addressed SSOT -- every enumerated workstream is retrievable, and a lost/never-committed segment is reported MISSING (never a silent gap). A regression that lets the audit silently pass over a missing stream turns this gate RED. HERMETIC: the gate seeds its OWN test store (knowledge/store/wsgate-) with controlled T-* fixtures (NOT production claims), so enumerate/audit run over MULTIPLE rows (a real DATA-driven walk, not one hardcoded branch). Assertions (flat pass-tally, avoids the LM-002 deep-nested-if landmine): T1 register-and-enumerate : ws_manifest(wsgate-) returns exactly 3 ids = T-WS1/T-WS2/T-WS3 T2 get-correctness : ws_get_p(ws:T-WS2) -> 1, empire field == E-GAME (round-trip) T3 audit-complete-clean : ws_audit_complete_p == 0 on a complete store (audit passes clean) T4 NEG-CONTROL : ws_get_p(ws:T-NEVER-REGISTERED) -> WS_UNKNOWN(-1), honest UNKNOWN (no false hit -- twin of recall-gate T4 no-rubber-stamp) T5 TAMPER (lost segment) : append id T-WS4 to ws:ids WITHOUT committing ws:T-WS4 (a removed/ torn/lost segment) -> audit returns >=1 AND T-WS4 in missing_out (the gap is reported LOUDLY -- the durability proof) T6 PRODUCTION audit : against the live ws- prefix, ws_audit_complete()==0 and ws_manifest() count >= 12 (RED if the production seed is dropped) GREEN only if T1 .. T6 all hold. Evidence -> knowledge/status/workstream_registry_gate.log. license_tier: ORIGINAL