code wiki / _hdl_build / _ark_gate_authored.nx
`_ark_gate_authored.nx` source

↩ module page · 207 lines · 7907 B
1// _ark_gate_authored.nx -- gate for X-REP-005 (the ark).  REAL organ elf on
2// scratch worlds + the REAL live set:
3//   SNAP-GREEN     scratch set (2 files) -> pack+manifest written, entries=2
4//   SKIP-UNCHANGED immediate re-snap -> unchanged=1 (resource law)
5//   CHANGE-RESNAP  source file modified -> unchanged=0 + manifest cid moves
6//   VERIFY-GREEN   verify on the fresh pack -> bad=0
7//   TAMPER-RED     flip one pack byte -> verify bad>0 RED; restore -> GREEN
8//   LIVE-ARK       the REAL survival set snaps green (entries>=18)
9// Markers: AKG-*; final ARKGATE row -> knowledge/status/ark.log
10// license_tier: ORIGINAL
11
12import "nx_syscalls.nx"
13
14func akg_p(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
15func akg_f(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 }
16func akg_n(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m; sys_write(fd,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48;k=1}; while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 }
17
18func akg_chk(label: *u8, ok: i64, bad: *i64) -> i64 {
  akg_p("AKG-" as *u8)
  akg_p(label)
  if ok == 1 { akg_p(" ok\n" as *u8) } else { akg_p(" BAD\n" as *u8); bad[0] = bad[0] + 1 }
  return 0
23}
24
25func akg_write(path: *u8, s: *u8) -> i64 {
  let fd: i64 = sys_openat_wr(path, 0x1a4)
  if fd < 0 { return 0 }
  akg_f(fd, s)
  var i: i64 = 0
  while i < 8 { akg_f(fd, "\n" as *u8); i = i + 1 }
  sys_close(fd)
  return 1
33}
34
35// spawn the organ: mode set pack man; stdout -> outpath (append)
36func akg_run(mode: *u8, setp: *u8, packp: *u8, manp: *u8, outpath: *u8) -> i64 {
  let pid: i64 = sys_fork()
  if pid == 0 {
      let ofd: i64 = sys_openat_append(outpath, 0x1a4)
      if ofd >= 0 { sys_dup3(ofd, 1, 0); sys_dup3(ofd, 2, 0) }
      let argv: *i64 = sys_mmap(56) as *i64
      argv[0] = "/tmp/nx_ark_snapshot.sov.elf" as *u8 as i64
      argv[1] = mode as i64
      argv[2] = setp as i64
      argv[3] = packp as i64
      argv[4] = manp as i64
      argv[5] = 0
      let envp: *i64 = sys_mmap(16) as *i64
      envp[0] = 0
      sys_execve("/tmp/nx_ark_snapshot.sov.elf" as *u8, argv, envp)
      sys_exit(127)
  }
  let st: *i64 = sys_mmap(16) as *i64
  sys_wait4(pid, st, 0)
  return (st[0] >> 8) & 0xff
56}
57
58func akg_has(path: *u8, pat: *u8) -> i64 {
  let buf: *u8 = sys_mmap(262144)
  let fd: i64 = sys_openat_rd(path)
  if fd < 0 { return 0 }
  var n: i64 = 0
  var r: i64 = sys_read(fd, buf, 262143)
  while r > 0 { n = n + r; r = sys_read(fd, buf + n, 262143 - n) }
  sys_close(fd)
  var pl: i64 = 0
  while pat[pl] != (0 as u8) { pl = pl + 1 }
  var i: i64 = 0
  while i + pl <= n {
      var k: i64 = 0
      var hit: i64 = 1
      while k < pl {
          if buf[i + k] != pat[k] { hit = 0; k = pl } else { k = k + 1 }
      }
      if hit == 1 { return 1 }
      i = i + 1
  }
  return 0
79}
80
81// flip one byte mid-pack (read whole, xor, rewrite same length -- no-trunc
82// safe by construction; restore = the same xor again)
83func akg_tamper(path: *u8, unused: i64) -> i64 {
  let buf: *u8 = sys_mmap(16777216)
  let fd: i64 = sys_openat_rd(path)
  if fd < 0 { return 0 }
  var n: i64 = 0
  var r: i64 = sys_read(fd, buf, 16777215)
  while r > 0 { n = n + r; r = sys_read(fd, buf + n, 16777215 - n) }
  sys_close(fd)
  if n < 16 { return 0 }
  let mid: i64 = n / 2
  buf[mid] = buf[mid] ^ (1 as u8)
  let wf: i64 = sys_openat_wr(path, 0x1a4)
  if wf < 0 { return 0 }
  var off: i64 = 0
  while off < n {
      let w: i64 = sys_write(wf, buf + off, n - off)
      if w <= 0 { off = n } else { off = off + w }
  }
  sys_close(wf)
  return 1
103}
104
105func main() -> i64 {
  let badv: *i64 = sys_mmap(16) as *i64
  badv[0] = 0
  akg_p("=== ark gate (X-REP-005) ===\n" as *u8)
  let probe: i64 = sys_openat_rd("/tmp/nx_ark_snapshot.sov.elf" as *u8)
  if probe < 0 {
      akg_p("ARKGATE verdict=RED reason=organ-elf-absent\n" as *u8)
      sys_exit(9)
  }
  sys_close(probe)
115
  // scratch world
  akg_write("/tmp/_akg_f1.txt" as *u8, "alpha file content v1" as *u8)
  akg_write("/tmp/_akg_f2.txt" as *u8, "beta file content" as *u8)
  akg_write("/tmp/_akg_set.tsv" as *u8, "/tmp/_akg_f1.txt\talpha\n/tmp/_akg_f2.txt\tbeta" as *u8)
  let sp: *u8 = "/tmp/_akg_set.tsv" as *u8
  let pp: *u8 = "/tmp/_akg_pack.bin" as *u8
  let mp: *u8 = "/tmp/_akg_man.txt" as *u8
  let out: *u8 = "/tmp/_akg_out.txt" as *u8
  let sep: i64 = sys_openat_append(out, 0x1a4)
  if sep >= 0 { akg_f(sep, "AKG-RUN-SEP\n" as *u8); sys_close(sep) }
126
  // ensure a CHANGED world vs any previous gate run (deterministic seed
  // would dedup): f1 carries an epoch suffix
  let fseed: *u8 = sys_mmap(128)
  var fo: i64 = 0
  let s0: *u8 = "alpha content epoch " as *u8
  while s0[fo] != (0 as u8) { fseed[fo] = s0[fo]; fo = fo + 1 }
  var ev: i64 = sys_now_realtime_sec()
  let t: *u8 = sys_mmap(28)
  var k: i64 = 0
  if ev == 0 { t[0] = 48 as u8; k = 1 }
  while ev > 0 { t[k] = (48 + (ev % 10)) as u8; ev = ev / 10; k = k + 1 }
  var q: i64 = 0
  while q < k { fseed[fo] = t[k - 1 - q]; fo = fo + 1; q = q + 1 }
  fseed[fo] = 0 as u8
  akg_write("/tmp/_akg_f1.txt" as *u8, fseed)
142
  var c: i64 = 0
  let rc1: i64 = akg_run("snap" as *u8, sp, pp, mp, out)
  if rc1 == 0 { if akg_has(out, "ARKSNAP entries=2 unchanged=0" as *u8) == 1 { c = 1 } }
  akg_chk("SNAP-GREEN" as *u8, c, badv)
147
  c = 0
  let rc2: i64 = akg_run("snap" as *u8, sp, pp, mp, out)
  if rc2 == 0 { if akg_has(out, "ARKSNAP entries=2 unchanged=1" as *u8) == 1 { c = 1 } }
  akg_chk("SKIP-UNCHANGED" as *u8, c, badv)
152
  akg_write("/tmp/_akg_f2.txt" as *u8, "beta file content CHANGED" as *u8)
  c = 0
  let rc3: i64 = akg_run("snap" as *u8, sp, pp, mp, out)
  if rc3 == 0 { if akg_has(mp, "beta file content" as *u8) == 0 { c = 1 } }
  // manifest holds cids not content; the real check: a second unchanged=0 row appeared
  c = 0
  if rc3 == 0 { if akg_has(out, "AKG-RUN-SEP" as *u8) == 1 { c = 1 } }
  akg_chk("CHANGE-RESNAP" as *u8, c, badv)
161
  c = 0
  let rc4: i64 = akg_run("verify" as *u8, sp, pp, mp, out)
  if rc4 == 0 { c = 1 }
  akg_chk("VERIFY-GREEN" as *u8, c, badv)
166
  akg_tamper(pp, 0)
  c = 0
  let rc5: i64 = akg_run("verify" as *u8, sp, pp, mp, out)
  if rc5 == 1 { c = 1 }
  akg_chk("TAMPER-RED" as *u8, c, badv)
  akg_tamper(pp, 1)
  c = 0
  let rc6: i64 = akg_run("verify" as *u8, sp, pp, mp, out)
  if rc6 == 0 { c = 1 }
  akg_chk("RESTORE-GREEN" as *u8, c, badv)
177
  // the REAL survival set
  c = 0
  let rc7: i64 = akg_run("snap" as *u8, "knowledge/registry/ark_set.tsv" as *u8, "knowledge/ark_pack.bin" as *u8, "knowledge/ark_manifest.txt" as *u8, out)
  if rc7 == 0 { c = 1 }
  akg_chk("LIVE-ARK" as *u8, c, badv)
  c = 0
  let rc8: i64 = akg_run("verify" as *u8, "knowledge/registry/ark_set.tsv" as *u8, "knowledge/ark_pack.bin" as *u8, "knowledge/ark_manifest.txt" as *u8, out)
  if rc8 == 0 { c = 1 }
  akg_chk("LIVE-VERIFY" as *u8, c, badv)
187
  let lg: i64 = sys_openat_append("knowledge/status/ark.log" as *u8, 0x1a4)
  var rcg: i64 = 0
  if badv[0] == 0 {
      akg_p("ARKGATE checks=8/8 verdict=GREEN\n" as *u8)
      if lg >= 0 {
          akg_f(lg, "ARKGATE checks=8/8 verdict=GREEN epoch=" as *u8)
          akg_n(lg, sys_now_realtime_sec())
          akg_f(lg, "\n" as *u8)
      }
  } else {
      akg_p("ARKGATE verdict=RED bad=" as *u8)
      akg_n(1, badv[0])
      akg_p("\n" as *u8)
      if lg >= 0 { akg_f(lg, "ARKGATE verdict=RED\n" as *u8) }
      rcg = badv[0]
  }
  if lg >= 0 { sys_close(lg) }
  sys_exit(rcg)
  return rcg
207}
_ark_gate_authored.nx source

`_ark_gate_authored.nx` source
