nx_world_telemetry.nx

nx_world_telemetry.nx -- THE WORLD TELEMETRY SINK (gameengine GE33 wt_telemetry_sink, 2026-09-02): the loopback daemon behind nishifamily.com/world/__telemetry that turns a visitor's frame-budget beacon into DURABLE evidence IN THE SOVEREIGN STORE PLANE -- never a file beside it. WHAT ARRIVES: the served world pages (nx_game_page_emit, GE32 HUD) read every frame statistic from an engine door (nx_perf_lib inside the wasm) and beacon the window on pagehide and on a slow beat: POST /world/__telemetry?w=<world> body = JSON {budget_ms,n,total,p50,p95,p99,worst,worst_ever,spikes,over, frames:[ms,ms,...]} (one PF_N-frame window, ~1.5 KB) WHAT IS WRITTEN: ONE ROW appended to the plane knowledge/store/frametrace- (nx_frame_pacing_lib fpc_plane_append -> nx_store_seed_lib's locked append, the same write every board uses; the first beacon bootstraps the plane): id=<world>_<ts> | world | ts | budget(ms:src) | n | total | page p50/p95/p99 | sink p50/p95/p99 | worst | worst_ever | spikes | over | verdict:why | twins | frames_csv The plane is append-only, so it IS the time spine: the latest row for a world is the current window the pacing gate (GE15) judges, and every earlier row is history -- readable by any seat, AI or human, through `nx_store_put knowledge/store/frametrace- load`, and served here at GET /world/__telemetry/spine for a browser. TWO RULERS, ONE ARITHMETIC: the wasm engine and this daemon both compute the percentiles with nx_perf_lib. If the page's numbers and the sink's disagree on the same window, the wasm/native twins have drifted, and every row says so in its `twins` column -- a consistency check nobody has to remember to run. BOUNDS, NAMED: WT_REQ_CAP is the one legitimate cap (a network body's size is unknowable in advance); a body past it is REFUSED with the cap named, never silently cut. The world name is [a-z0-9_]{1,32} because it keys a plane row. HARDENING inherited from nx_http_server_listen by construction: FD_CLOEXEC on the listener, SIGPIPE ignored, SO_REUSEADDR; this daemon binds 127.0.0.1 only (the edge reaches it through the sites proxy), never forks, allocates every buffer once before the accept loop (flat footprint), and answers GET /world/__telemetry/health for the deploy probe. license_tier: ORIGINAL No hw writes (Rule 26).