nx_workstream_registry_neg.nx

nx_workstream_registry_neg.nx -- NEGATIVE-CONTROL PROOF for WMS-R1 (companion to the gate). Proves the gate's audit/neg-control machinery can ACTUALLY detect failure -- a GREEN with no working neg-control is INVALID (no-false-green law). It exercises ws_audit_complete + ws_get on two CONTRASTING hermetic stores and asserts they give DIFFERENT, correct answers: N1 complete-store-audits-0 : a store whose ws:ids ids ALL have committed segments -> audit==0. (If the audit were a constant non-zero, this FAILS -> proves the gate's T3/T5 contrast is real, not a rigged constant.) N2 missing-store-audits-1 : the SAME store + one id appended to ws:ids with NO segment -> audit==1 and that id is reported. (If the audit were a constant 0, this FAILS -> proves a lost segment is genuinely caught.) N3 false-hit-would-fail : ws_get of a never-registered id returns WS_UNKNOWN, and a committed id returns WS_FOUND -> the two are DISTINGUISHED (a ws_get that always returned 1 would collapse them). GREEN only if N1 .. N3 hold: audit returns DIFFERENT answers for complete vs missing, and get distinguishes present vs absent. Evidence -> knowledge/status/workstream_registry_gate.log. license_tier: ORIGINAL