nx_wpt_ingest_gate.nx

nx_wpt_ingest_gate.nx -- IN-PROCESS gate for BR21 (nx_wpt_acquire_lib, carried by nx_wpt_ingest). THE ANTI-VACUITY TOOTH IS THE WHOLE POINT AND IT IS NAMED. The defect BR21 closes is that the hand acquisition path re-emitted every body through a TEXT TOOL ARGUMENT -- a NUL-terminated C string -- and html/syntax/parsing-html-fragments is the ENCODING-DETECTION suite, whose fixtures are UTF-16LE with a BOM and therefore carry a NUL as their FOURTH BYTE. An ASCII fixture round-trips perfectly through the broken path, so an ASCII fixture is a test the defect cannot fail. Every byte-exactness tooth below runs on a UTF-16LE-with-BOM body built at RUNTIME, and the fixture is first asserted to actually contain the NUL before any outcome is read: assert the fixture reached the condition BEFORE asserting the outcome. THE HASH ANCHOR COMES FROM OUTSIDE THE ESTATE. wa_verify_blob compares against the git blob object name GitHub declares. One tooth pins that arithmetic to f2ba8f84ab5c1bce84a7b441cb1959cfc7093b7f, which is git hash-object of the three bytes abc under git 2.49.0 -- a value this estate did not choose and cannot influence. Without it, computing a digest with swhid and then checking it with swhid would prove plumbing and call it correctness. SCOPE, STATED: this gate is OFFLINE by construction. It proves the manifest parser, the dual verification, the raw write, the read-back compare, the pin rule, the name allowlist, the completeness conjunction and the manifest/marker emit. It does NOT prove the transport -- that is nx_https_fetch_follow's subject, and the end-to-end proof is the live re-ingest reproducing corpus_sha16 54e90b086e0c6530 and 1819a1dcd3030f03, recorded on browser.plan, not here. license_tier: ORIGINAL