code wiki / _hdl_build / _galx_serve_gate_prod.nx
`_galx_serve_gate_prod.nx` source

↩ module page · 374 lines · 21043 B
1import "nx_gate_gn.nx"
2import "nx_connect.nx"   // bounded connect: a raw sys_connect hangs ~127s on a black-holed host
3// _galx_serve_gate_prod.nx -- NO-FAKE-GREEN gate for the PRODUCTION gallery daemon at FULL CORPUS SCALE.
4// Asserts against the REAL corpus served from knowledge/store/galx-prod- (target ~5722 images), NOT a 256 sample:
5//   (1) BIND       -- the long-lived production daemon (started detached) is LISTENing on 18090.
6//   (2) SCALE      -- GET / -> 200 AND browse_count (distinct cell anchors '<a class="cell" href="/img/')
7//                     is in the THOUSANDS (>= GATE_MIN_BROWSE). Proves the 256 cap is GONE -- the full
8//                     manifest is read via ss_manifest_cap, not ss_manifest.
9//   (3) UPPER-CID  -- the sampled CID is read off-band from knowledge/status/galx_sample_cid.txt; it was
10//                     sampled from an UPPER row (>= 4000) of the sidecar (proof its row >= 4000 is in
11//                     knowledge/status/galx_sample_row.txt). GET / MUST list it -- proves NO 256-truncation:
12//                     a CID this deep would be invisible under the old cap.
13//   (4) IMG-BYTES  -- GET /img/<sampledCID> -> 200 image/png AND the served body is byte-identical (memcmp
14//                     full) to the on-disk source PNG (path read off-band from galx_sample_path.txt).
15//   (5) RATE       -- snapshot eval_lanes.log linecount; POST /rate (same-origin) score=861 -> EXACTLY one
16//                     new line == "EVAL img=<sampledCID> lane=O score=861".
17//   (6) SAME-ORIG  -- POST /rate with a FOREIGN Origin -> 403 AND linecount UNCHANGED (no write).
18//   (7) TAMPER-RED -- re-author the daemon spec with tamper=1 (the /img route literal flipped), rewrite its
19//                     bind port to 18091, recompile (sovereign cc + gcc-as-assembler), spawn it; GET /
20//                     still 200 (alive) but GET /img/<CID> MUST 404 -- the route is SYNTHESIZED from the
21//                     spec, not baked. If a spec tamper does NOT change behavior, this arm goes RED.
22// Reads the running prod daemon (does NOT take it down -- persistence is the deliverable). The tamper
23// daemon is a SEPARATE throwaway on 18091.
24// Sovereign (nx_cc/sovereign cc; gcc off-band assembler). license_tier: ORIGINAL
25import "nx_syscalls.nx"
26
27func gp(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
28func gfp(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 }
29func gfn(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m; sys_write(fd,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48;k=1}; while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 }
30
31func g_run(prog: *u8, a1: *u8, a2: *u8, a3: *u8) -> i64 {
  let pid: i64 = sys_fork()
  if pid == 0 {
      let dn: i64 = sys_openat_wr("/dev/null" as *u8, 0x1a4)
      if dn >= 0 { sys_dup3(dn, 1, 0) }
      if dn >= 0 { sys_dup3(dn, 2, 0) }
      let argv: *i64 = sys_mmap(64) as *i64
      argv[0] = prog as i64
      var k: i64 = 1
      if a1 != (0 as *u8) { argv[k] = a1 as i64; k = k + 1 }
      if a2 != (0 as *u8) { argv[k] = a2 as i64; k = k + 1 }
      if a3 != (0 as *u8) { argv[k] = a3 as i64; k = k + 1 }
      argv[k] = 0
      let envp: *i64 = sys_mmap(16) as *i64
      envp[0] = "PATH=/usr/bin:/bin" as *u8 as i64; envp[1] = 0
      sys_execve(prog, argv, envp)
      sys_exit(127)
  }
  let st: *i64 = sys_mmap(16) as *i64
  sys_wait4(pid, st, 0)
  return (st[0] >> 8) & 0xff
52}
53
54func g_spawn(prog: *u8) -> i64 {
  let pid: i64 = sys_fork()
  if pid == 0 {
      let dn: i64 = sys_openat_wr("/dev/null" as *u8, 0x1a4)
      if dn >= 0 { sys_dup3(dn, 1, 0) }
      let argv: *i64 = sys_mmap(32) as *i64
      argv[0] = prog as i64; argv[1] = 0
      let envp: *i64 = sys_mmap(16) as *i64
      envp[0] = "PATH=/usr/bin:/bin" as *u8 as i64; envp[1] = 0
      sys_execve(prog, argv, envp)
      sys_exit(127)
  }
  return pid
67}
68
69func g_kill(pid: i64, sig: i64) -> i64 { nx_kill(pid, sig); return 0 }
70
71func g_addr(port: i64) -> *u8 {
  let addr: *u8 = sys_mmap(16)
  addr[0] = 2 as u8
  addr[1] = 0 as u8
  addr[2] = ((port >> 8) & 0xff) as u8
  addr[3] = (port & 0xff) as u8
  addr[4] = 127 as u8
  addr[5] = 0 as u8
  addr[6] = 0 as u8
  addr[7] = 1 as u8
  addr[8] = 0 as u8
  addr[9] = 0 as u8
  addr[10] = 0 as u8
  addr[11] = 0 as u8
  addr[12] = 0 as u8
  addr[13] = 0 as u8
  addr[14] = 0 as u8
  addr[15] = 0 as u8
  return addr
90}
91
92func g_connect(port: i64) -> i64 {
  let fd: i64 = sys_socket(2, 1, 0)
  if fd < 0 { return 0 - 1 }
  let addr: *u8 = g_addr(port)
  let rc: i64 = nx_connect_bounded(fd, addr, 16, NX_CONN_DEFAULT_MS)
  if rc < 0 { sys_close(fd); return 0 - 1 }
  return fd
99}
100
101func g_wait_listen(port: i64) -> i64 {
  var tries: i64 = 0
  while tries < 50 {
      let fd: i64 = g_connect(port)
      if fd >= 0 { sys_close(fd); return 1 }
      sys_sleep_ms(100)
      tries = tries + 1
  }
  return 0
110}
111
112func g_http(port: i64, req: *u8, reqlen: i64, out: *u8, cap: i64) -> i64 {
  let fd: i64 = g_connect(port)
  if fd < 0 { return 0 - 1 }
  sys_write(fd, req, reqlen)
  var n: i64 = 0
  var go: i64 = 1
  while go == 1 {
      let r: i64 = sys_read(fd, (out as i64 + n) as *u8, cap - 1 - n)
      if r <= 0 { go = 0 } else { n = n + r }
      if n >= cap - 1 { go = 0 }
  }
  sys_close(fd)
  return n
125}
126
127func g_find(buf: *u8, n: i64, pat: *u8, plen: i64) -> i64 {
  var i: i64 = 0
  while i + plen <= n {
      var j: i64 = 0
      var ok: i64 = 1
      while j < plen { if buf[i+j] != pat[j] { ok = 0 } j = j + 1 }
      if ok == 1 { return 1 }
      i = i + 1
  }
  return 0
137}
138
139// count non-overlapping occurrences of pat in buf
140func g_count(buf: *u8, n: i64, pat: *u8, plen: i64) -> i64 {
  var cnt: i64 = 0
  var i: i64 = 0
  while i + plen <= n {
      var j: i64 = 0
      var ok: i64 = 1
      while j < plen { if buf[i+j] != pat[j] { ok = 0 } j = j + 1 }
      if ok == 1 { cnt = cnt + 1; i = i + plen } else { i = i + 1 }
  }
  return cnt
150}
151
152func g_strlen(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} return n }
153
154func g_linecount(path: *u8) -> i64 {
  let szp: *i64 = sys_mmap(16) as *i64
  let b: *u8 = sys_read_file(path, szp)
  let sz: i64 = szp[0]
  if (b as i64) == 0 { return 0 }
  var c: i64 = 0
  var i: i64 = 0
  while i < sz { if b[i] == (10 as u8) { c = c + 1 } i = i + 1 }
  return c
163}
164
165// read a one-line oracle file, strip trailing newline, null-terminate into out; return length.
166func g_readline_file(path: *u8, out: *u8, cap: i64) -> i64 {
  let szp: *i64 = sys_mmap(16) as *i64
  let b: *u8 = sys_read_file(path, szp)
  let sz: i64 = szp[0]
  if (b as i64) == 0 { out[0] = 0 as u8; return 0 }
  var L: i64 = sz
  var i: i64 = 0
  var found: i64 = 0
  while i < sz { if found == 0 { if b[i] == (10 as u8) { L = i; found = 1 } } i = i + 1 }
  var n: i64 = 0
  while n < L { if n < cap - 1 { out[n] = b[n] } n = n + 1 }
  out[L] = 0 as u8
  return L
179}
180
181func g_atoi(s: *u8) -> i64 {
  var v: i64 = 0
  var i: i64 = 0
  while s[i] != (0 as u8) { if s[i] >= (48 as u8) { if s[i] <= (57 as u8) { v = v * 10 + ((s[i] as i64) - 48) } } i = i + 1 }
  return v
186}
187
188func main() -> i64 {
  let CAP: i64 = 8388608
  // data-driven minimum browse_count: the gate FAILS if the grid is still the 256 sample.
  let GATE_MIN_BROWSE: i64 = 4000
  let GATE_MIN_ROW: i64 = 4000
  gp("=== gallery-serve PRODUCTION gate @ FULL CORPUS (live daemon @ knowledge/store/galx-prod-) ===\n" as *u8)
  let lfd: i64 = sys_openat_append("knowledge/status/galx_serve.log" as *u8, 0x1a4)
195
  // off-band oracle: the sampled UPPER-ROW production CID + its on-disk path + its sidecar row.
  let cidA: *u8 = sys_mmap(128)
  let cidlen: i64 = g_readline_file("knowledge/status/galx_sample_cid.txt" as *u8, cidA, 128)
  let pathA: *u8 = sys_mmap(1024)
  let pathlen: i64 = g_readline_file("knowledge/status/galx_sample_path.txt" as *u8, pathA, 1024)
  let rowbuf: *u8 = sys_mmap(64)
  let rowlen: i64 = g_readline_file("knowledge/status/galx_sample_row.txt" as *u8, rowbuf, 64)
  let samplerow: i64 = g_atoi(rowbuf)
  if cidlen != 69 { gp("GALXPROD RED: sample CID oracle not 69 bytes (got "); gn(cidlen); gp(")\n" as *u8); sys_exit(1); return 1 }
  if pathlen < 8 { gp("GALXPROD RED: sample path oracle empty\n" as *u8); sys_exit(1); return 1 }
  if samplerow < GATE_MIN_ROW { gp("GALXPROD RED: sample row "); gn(samplerow); gp(" < "); gn(GATE_MIN_ROW); gp(" -- not an UPPER-row CID, cannot prove no-256-truncation\n" as *u8); sys_exit(1); return 1 }
207
  // ---- ARM 1: BIND -- the live production daemon must be LISTENing on 18090 ----
  let up: i64 = g_wait_listen(18090)
  if up != 1 { gp("GALXPROD RED: production daemon not LISTENing on 127.0.0.1:18090\n" as *u8); sys_exit(1); return 1 }
  gp("GATE ROW bind: GREEN -- live production daemon LISTEN 127.0.0.1:18090\n" as *u8)
212
  let resp: *u8 = sys_mmap(CAP)
214
  // ---- ARM 2: SCALE -- GET / 200 and browse_count in the THOUSANDS ----
  let getroot: *u8 = "GET / HTTP/1.1\r\nHost: 127.0.0.1:18090\r\nConnection: close\r\n\r\n" as *u8
  let rn2: i64 = g_http(18090, getroot, g_strlen(getroot), resp, CAP)
  var ok200: i64 = g_find(resp, rn2, "HTTP/1.1 200" as *u8, 12)
  if ok200 != 1 { gp("GALXPROD RED: GET / not 200\n" as *u8); sys_exit(1); return 1 }
  let browse_count: i64 = g_count(resp, rn2, "<a class=\"cell\" href=\"/img/" as *u8, 27)
  if browse_count < GATE_MIN_BROWSE { gp("GALXPROD RED: browse_count "); gn(browse_count); gp(" < "); gn(GATE_MIN_BROWSE); gp(" -- grid still capped near 256 (ss_manifest_cap NOT in effect)\n" as *u8); sys_exit(1); return 1 }
  gp("GATE ROW scale: GREEN -- GET / 200 and browse_count = "); gn(browse_count); gp(" (thousands; 256 cap GONE)\n" as *u8)
223
  // also confirm lazy-load attribute is present (does not fetch all PNGs at once)
  var haslazy: i64 = g_find(resp, rn2, "<img loading=lazy src=\"/img/" as *u8, 28)
  if haslazy != 1 { gp("GALXPROD RED: grid img tags missing loading=lazy\n" as *u8); sys_exit(1); return 1 }
  gp("GATE ROW lazy: GREEN -- grid img tags carry loading=lazy\n" as *u8)
228
  // ---- ARM 3: BROWSE lists the UPPER-ROW sampled CID (no 256-truncation) ----
  var hasA: i64 = g_find(resp, rn2, cidA, 69)
  if hasA != 1 { gp("GALXPROD RED: GET / grid missing the UPPER-row sampled CID (row "); gn(samplerow); gp(") -- TRUNCATED\n" as *u8); sys_exit(1); return 1 }
  gp("GATE ROW upper-cid: GREEN -- GET / lists the row-"); gn(samplerow); gp(" CID (proves full manifest read, no 256-truncation)\n" as *u8)
233
  // ---- ARM 4: IMG byte-identical to on-disk PNG ----
  let getimg: *u8 = sys_mmap(512)
  var gio: i64 = g_strlen("GET /img/")
  var w: i64 = 0
  let p1: *u8 = "GET /img/" as *u8
  while w < gio { getimg[w] = p1[w]; w = w + 1 }
  var c: i64 = 0
  while c < 69 { getimg[gio + c] = cidA[c]; c = c + 1 }
  let p2: *u8 = " HTTP/1.1\r\nHost: 127.0.0.1:18090\r\nConnection: close\r\n\r\n" as *u8
  var p2l: i64 = g_strlen(p2)
  var w2: i64 = 0
  while w2 < p2l { getimg[gio + 69 + w2] = p2[w2]; w2 = w2 + 1 }
  let imgreqlen: i64 = gio + 69 + p2l
  let rn3: i64 = g_http(18090, getimg, imgreqlen, resp, CAP)
  var imgok: i64 = g_find(resp, rn3, "HTTP/1.1 200" as *u8, 12)
  var imgct: i64 = g_find(resp, rn3, "Content-Type: image/png" as *u8, 23)
  if imgok != 1 { gp("GALXPROD RED: GET /img/<A> not 200\n" as *u8); sys_exit(1); return 1 }
  if imgct != 1 { gp("GALXPROD RED: GET /img/<A> missing image/png content-type\n" as *u8); sys_exit(1); return 1 }
  var bi: i64 = 0
  var bodyat: i64 = 0 - 1
  while bi + 4 <= rn3 {
      var okb: i64 = 1
      if resp[bi] != (13 as u8) { okb = 0 }
      if resp[bi+1] != (10 as u8) { okb = 0 }
      if resp[bi+2] != (13 as u8) { okb = 0 }
      if resp[bi+3] != (10 as u8) { okb = 0 }
      if okb == 1 { if bodyat < 0 { bodyat = bi + 4 } }
      bi = bi + 1
  }
  if bodyat < 0 { gp("GALXPROD RED: GET /img/<A> no body delimiter\n" as *u8); sys_exit(1); return 1 }
  let szp: *i64 = sys_mmap(16) as *i64
  let disk: *u8 = sys_read_file(pathA, szp)
  let dlen: i64 = szp[0]
  let servedlen: i64 = rn3 - bodyat
  if servedlen != dlen { gp("GALXPROD RED: served PNG length != on-disk ("); gn(servedlen); gp(" vs "); gn(dlen); gp(")\n" as *u8); sys_exit(1); return 1 }
  var bc: i64 = 0
  var bmatch: i64 = 1
  while bc < dlen { if resp[bodyat + bc] != disk[bc] { bmatch = 0 } bc = bc + 1 }
  if bmatch != 1 { gp("GALXPROD RED: served PNG bytes != on-disk source\n" as *u8); sys_exit(1); return 1 }
  gp("GATE ROW img-bytes: GREEN -- GET /img/<A> 200 image/png byte-identical to on-disk source ("); gn(dlen); gp(" bytes)\n" as *u8)
274
  // ---- ARM 5: RATE writes EXACTLY one EVAL O-line ----
  let before: i64 = g_linecount("knowledge/status/eval_lanes.log" as *u8)
  let body4: *u8 = sys_mmap(256)
  var b4: i64 = 0
  let bp1: *u8 = "img=" as *u8
  var t1: i64 = 0; while bp1[t1]!=(0 as u8){body4[b4]=bp1[t1]; b4=b4+1; t1=t1+1}
  c = 0; while c < 69 { body4[b4] = cidA[c]; b4 = b4 + 1; c = c + 1 }
  let bp2: *u8 = "&score=861" as *u8
  var t2: i64 = 0; while bp2[t2]!=(0 as u8){body4[b4]=bp2[t2]; b4=b4+1; t2=t2+1}
  let post: *u8 = sys_mmap(1024)
  var po: i64 = 0
  let hp: *u8 = "POST /rate HTTP/1.1\r\nHost: 127.0.0.1:18090\r\nOrigin: http://127.0.0.1:18090\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: " as *u8
  var th: i64 = 0; while hp[th]!=(0 as u8){post[po]=hp[th]; po=po+1; th=th+1}
  let clbuf: *u8 = sys_mmap(28); var clm: i64 = b4; var clk: i64 = 0; if clm==0{clbuf[0]=48;clk=1}; let clt: *u8=sys_mmap(28); while clm>0{clt[clk]=(48+(clm%10)) as u8;clm=clm/10;clk=clk+1}; var cli: i64=0; while cli<clk{post[po]=clt[clk-1-cli];po=po+1;cli=cli+1}
  let hp2: *u8 = "\r\nConnection: close\r\n\r\n" as *u8
  var th2: i64 = 0; while hp2[th2]!=(0 as u8){post[po]=hp2[th2]; po=po+1; th2=th2+1}
  var bb4: i64 = 0; while bb4 < b4 { post[po] = body4[bb4]; po = po + 1; bb4 = bb4 + 1 }
  let rn4: i64 = g_http(18090, post, po, resp, CAP)
  var rateok: i64 = g_find(resp, rn4, "HTTP/1.1 200" as *u8, 12)
  if rateok != 1 { gp("GALXPROD RED: POST /rate (same-origin) not 200\n" as *u8); sys_exit(1); return 1 }
  let after: i64 = g_linecount("knowledge/status/eval_lanes.log" as *u8)
  if after != before + 1 { gp("GALXPROD RED: POST /rate did not append EXACTLY one line ("); gn(before); gp(" -> "); gn(after); gp(")\n" as *u8); sys_exit(1); return 1 }
  let lszp: *i64 = sys_mmap(16) as *i64
  let lb: *u8 = sys_read_file("knowledge/status/eval_lanes.log" as *u8, lszp)
  let lsz: i64 = lszp[0]
  let exp: *u8 = sys_mmap(256)
  var eo: i64 = 0
  let e1: *u8 = "EVAL img=" as *u8
  var te1: i64=0; while e1[te1]!=(0 as u8){exp[eo]=e1[te1];eo=eo+1;te1=te1+1}
  c = 0; while c < 69 { exp[eo] = cidA[c]; eo = eo + 1; c = c + 1 }
  let e2: *u8 = " lane=O score=861\n" as *u8
  var te2: i64=0; while e2[te2]!=(0 as u8){exp[eo]=e2[te2];eo=eo+1;te2=te2+1}
  var tailmatch: i64 = 1
  if lsz < eo { tailmatch = 0 }
  if tailmatch == 1 {
      var em: i64 = 0
      while em < eo { if lb[lsz - eo + em] != exp[em] { tailmatch = 0 } em = em + 1 }
  }
  if tailmatch != 1 { gp("GALXPROD RED: appended line != 'EVAL img=<A> lane=O score=861'\n" as *u8); sys_exit(1); return 1 }
  gp("GATE ROW rate: GREEN -- POST /rate (same-origin) appended EXACTLY one line == 'EVAL img=<A> lane=O score=861'\n" as *u8)
315
  // ---- ARM 6: SAME-ORIGIN -- foreign Origin -> 403 AND no write ----
  let before6: i64 = g_linecount("knowledge/status/eval_lanes.log" as *u8)
  let post6: *u8 = sys_mmap(1024)
  var po6: i64 = 0
  let fp: *u8 = "POST /rate HTTP/1.1\r\nHost: 127.0.0.1:18090\r\nOrigin: http://evil.example.com\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: " as *u8
  var tf: i64 = 0; while fp[tf]!=(0 as u8){post6[po6]=fp[tf]; po6=po6+1; tf=tf+1}
  var cli6: i64=0; while cli6<clk{post6[po6]=clt[clk-1-cli6];po6=po6+1;cli6=cli6+1}
  var tf2: i64 = 0; while hp2[tf2]!=(0 as u8){post6[po6]=hp2[tf2]; po6=po6+1; tf2=tf2+1}
  var bb6: i64 = 0; while bb6 < b4 { post6[po6] = body4[bb6]; po6 = po6 + 1; bb6 = bb6 + 1 }
  let rn6: i64 = g_http(18090, post6, po6, resp, CAP)
  var forbidden: i64 = g_find(resp, rn6, "HTTP/1.1 403" as *u8, 12)
  let after6: i64 = g_linecount("knowledge/status/eval_lanes.log" as *u8)
  if forbidden != 1 { gp("GALXPROD RED: cross-origin POST /rate not 403\n" as *u8); sys_exit(1); return 1 }
  if after6 != before6 { gp("GALXPROD RED: cross-origin POST /rate WROTE to the log ("); gn(before6); gp(" -> "); gn(after6); gp(")\n" as *u8); sys_exit(1); return 1 }
  gp("GATE ROW same-origin: GREEN -- cross-origin POST /rate -> 403 and eval_lanes.log unchanged (no write)\n" as *u8)
331
  // ---- ARM 7: TAMPER-RED -- flip the /img route spec field -> GET /img 404 (route synthesized) ----
  // Author a tamper variant (tamper=1 flips the rl_img route literal), rewrite its bind port to 18091,
  // recompile sovereignly, spawn it; GET / on 18091 still 200 (alive) but GET /img/<A> MUST 404.
  let at: i64 = g_run("/tmp/nx_eg.sov.elf" as *u8, "2" as *u8, "nx_gallery_serve_tamper" as *u8, "1" as *u8)
  if at != 0 { gp("GALXPROD RED: tamper author failed rc="); gn(at); gp("\n" as *u8); sys_exit(1); return 1 }
  // rewrite "let port: i64 = 18090" -> 18091 in the throwaway tamper source so it binds a free port
  let sr: i64 = g_run("/bin/sed" as *u8, "-i" as *u8, "s/let port: i64 = 18090/let port: i64 = 18091/" as *u8, "runtime/_hdl_build/nx_gallery_serve_tamper.nx" as *u8)
  if sr != 0 { gp("GALXPROD RED: tamper port rewrite failed rc="); gn(sr); gp("\n" as *u8); sys_exit(1); return 1 }
  let bt: i64 = g_run("runtime/_hdl_build/_galx_build_one.sh" as *u8, "nx_gallery_serve_tamper" as *u8, 0 as *u8, 0 as *u8)
  if bt != 0 { gp("GALXPROD RED: tamper compile failed rc="); gn(bt); gp("\n" as *u8); sys_exit(1); return 1 }
  let tpid: i64 = g_spawn("/tmp/nx_gallery_serve_tamper.elf" as *u8)
  let tup: i64 = g_wait_listen(18091)
  if tup != 1 { gp("GALXPROD RED: tamper daemon never bound 18091\n" as *u8); nx_kill(tpid, 9); sys_exit(1); return 1 }
  // tamper daemon is alive: GET / must still be 200
  let getroot2: *u8 = "GET / HTTP/1.1\r\nHost: 127.0.0.1:18091\r\nConnection: close\r\n\r\n" as *u8
  let rnT0: i64 = g_http(18091, getroot2, g_strlen(getroot2), resp, CAP)
  var tamperalive: i64 = g_find(resp, rnT0, "HTTP/1.1 200" as *u8, 12)
  if tamperalive != 1 { gp("GALXPROD RED: tamper daemon GET / not 200 (cannot isolate the route flip)\n" as *u8); nx_kill(tpid, 9); sys_exit(1); return 1 }
  // GET /img/<A> on the tamper daemon MUST 404 -- the route was synthesized from the (flipped) spec
  let getimgT: *u8 = sys_mmap(512)
  var gioT: i64 = g_strlen("GET /img/")
  var wT: i64 = 0
  let p1T: *u8 = "GET /img/" as *u8
  while wT < gioT { getimgT[wT] = p1T[wT]; wT = wT + 1 }
  var cT: i64 = 0
  while cT < 69 { getimgT[gioT + cT] = cidA[cT]; cT = cT + 1 }
  let p2T: *u8 = " HTTP/1.1\r\nHost: 127.0.0.1:18091\r\nConnection: close\r\n\r\n" as *u8
  var p2lT: i64 = g_strlen(p2T)
  var w2T: i64 = 0
  while w2T < p2lT { getimgT[gioT + 69 + w2T] = p2T[w2T]; w2T = w2T + 1 }
  let rnT: i64 = g_http(18091, getimgT, gioT + 69 + p2lT, resp, CAP)
  var tamper404: i64 = g_find(resp, rnT, "HTTP/1.1 404" as *u8, 12)
  var tamper200: i64 = g_find(resp, rnT, "HTTP/1.1 200" as *u8, 12)
  nx_kill(tpid, 9)
  if tamper200 == 1 { gp("GALXPROD RED: TAMPER -- GET /img/<A> still 200 after /img route flip (route is BAKED, not synthesized)\n" as *u8); sys_exit(1); return 1 }
  if tamper404 != 1 { gp("GALXPROD RED: TAMPER -- GET /img/<A> not 404 after /img route flip\n" as *u8); sys_exit(1); return 1 }
  gp("GATE ROW tamper-red: GREEN -- flipping the /img route spec field -> GET /img/<A> now 404 (route synthesized from spec, not baked)\n" as *u8)
369
  gp("GALXPROD 7/7 GREEN -- FULL-corpus production daemon: binds 18090, browse_count="); gn(browse_count); gp(" (thousands), lists row-"); gn(samplerow); gp(" CID, /img byte-identical PNG, /rate one O-line (same-origin enforced, cross-origin 403 no-write), tamper-of-/img-route -> behavioral RED\n" as *u8)
  if lfd >= 0 { gfp(lfd, "GALXPROD verdict=GREEN scale=FULL daemon=nx_gallery_serve namespace=knowledge/store/galx-prod- port=18090 browse_count=" as *u8); gfn(lfd, browse_count); gfp(lfd, " sample_row=" as *u8); gfn(lfd, samplerow); gfp(lfd, " img_byte_identical=1 rate_one_oline=1 same_origin_enforced=1 tamper_red=1 epoch=" as *u8); gfn(lfd, sys_now_realtime_sec()); gfp(lfd, "\n" as *u8); sys_close(lfd) }
  sys_exit(0)
  return 0
374}
_galx_serve_gate_prod.nx source

`_galx_serve_gate_prod.nx` source
