nx_xenocell.nx

nx_xenocell.nx -- hostile foreign-agent virtual cell. Biological analogue: a xenobiotic is a substance foreign to the organism with NO cooperative function (vs symbiote which is non- self but mutualistic). Nishi xenocell wraps adversarial-by-default foreign agents: - Intel ME (ring -3 management engine running MINIX) - AMD PSP (Platform Security Processor) - Qualcomm modem baseband (direct-memory access on phones) - Vendor BMC (server management; out-of-band network access) - Vendor anti-cheat kernel drivers (EAC / BattlEye / Vanguard) - UEFI rootkit-class persistence Distinct from nx_symbiote: a symbiote can be PARTNERED with via nx_treaty (Steam-NMS cooperatively sharing VRAM). A xenocell CANNOT be partnered with -- it does not consent to anything; its presence is imposed by the hardware vendor or by capture. The substrate's job is OBSERVE + RECORD + CONTAIN, never NEGOTIATE. THE JUDO: every observation written into nx_evict_journal becomes signed forensic evidence. Vendor's covert action -> user's court-admissible record. Per [[feedback-captain-moroni-doctrine]] + [[feedback-cell-immune-system-ransomware-judo-ddos-by-bit]] + [[feedback-reclamation-doctrine-captain-moroni]]: the judo is of INFORMATION not retaliation. We never attack back. We make every adversarial action visible + recorded. Composes: nx_evict_journal -- where signed observations land nx_organism -- xenocell registered alongside native cells; organism aggregates xeno consumption into host pressure (so ME's RAM use is counted) nx_attest_silicon -- declares WHICH xenocells the host has and their known threat surfaces nx_homeostasis -- fires INTRUSION signal not MIGRATE when xeno activity exceeds threshold nx_budget -- the xeno's observed_* fields drive the host_budget pressure calculation nx_brane -- capability-token refusal at IO boundaries for any payload tagged xeno-touched