nx_ws_ledger_gate.nx

nx_ws_ledger_gate.nx -- the REFEREE for WMS-R2 (workstream transition ledger). Proves the nx_ws_ledger reflog (a) survives concurrent writers with ZERO torn entries AND ledger_replay reconstructs the correct final state, (b) FLAGS a corrupted entry instead of silently skipping it, and (c) that the detector can actually SEE failure (the mandatory negative control: the OLD multi-write path tears). No-false-green: GREEN requires all lanes. GOOD lane: NWORKERS fork concurrently; worker w writes NTRANS transitions for ws-id=w via ledger_append (the R0 single-write primitive). The terminal transition sets new = TERMINAL(w) deterministically. Expect: total_lines == NWORKERS*NTRANS, flagged == 0, and state[w] == TERMINAL(w) for every w (replay rebuilt final state). TAMPER: a log of K good records PLUS one deliberately-broken raw record (missing the " END" sentinel) -> ledger_replay MUST flag it (flagged >= 1). flagged == 0 => corruption silently swallowed => RED. NEG-CTRL: same concurrency as GOOD, but each transition emitted the OLD way -- a SEQUENCE of separate sys_write() calls -> interleaving -> torn entries. ledger_replay MUST flag > 0. flagged == 0 => the detector is worthless => RED. BOUND: an oversized record (rec_len+1 > cap) must be REJECTED with -2. Output: rows -> stdout + knowledge/status/ws_ledger_gate.log, then a verdict. Exit 0 GREEN, 1 RED. Sovereign: only nx_syscalls + nx_ws_ledger. license_tier: ORIGINAL