code wiki / _hdl_build / _gpu_dxg_adapterinfo_gate.nx

_gpu_dxg_adapterinfo_gate.nx source

↩ module page · 125 lines · 8844 B

1// _gpu_dxg_adapterinfo_gate.nx -- SOVEREIGN-GPU ladder R1 (adapter identity), the HONEST re-scope. 2// 3// R0 proved raw reach (open /dev/dxg + LX_DXENUMADAPTERS2 -> the real GPU adapter set). R1 reads 4// each adapter's REAL identity off the same raw fd via LX_DXQUERYADAPTERINFO (0xC0184709) type=15 5// ADAPTERTYPE -- the ONLY adapter-identity query the WSL2 dxgkrnl uapi exposes (there is NO 6// description-STRING type on this kernel: kmtqueryadapterinfotype = {UMDRIVERPRIVATE=0, ADAPTERTYPE=15, 7// ADAPTERTYPE_RENDER=57} only; the Windows adapter_string ABI is absent -- proven live by the R1 recon). 8// 9// POSITIVE ID (real, not a literal model string): the host returns a 4-byte adaptertype bitfield per 10// adapter. The DISCRETE hardware GPU (hybrid_discrete=1, software_device=0) is the RTX 5080; the other 11// is the integrated GPU (hybrid_integrated=1). This gate identifies the 5080 by that REAL bit, NOT by a 12// hardcoded value. (Corrects the R0 caveat: both enumerated adapters are real paravirt hardware GPUs -- 13// there is NO software-render adapter in this enum.) The human-readable "RTX 5080" model NAME is a 14// LUID->PCI-vendor/device-id rung, deferred (dxgkrnl has no name string). NO-WAVE: zero throughput. 15// 16// GREEN iff (author=organ, from REAL device returns, never $?): 17// A) enum ret==0 AND num_adapters>=2 AND every ADAPTERTYPE query ret==0; 18// B) every adapter software_device==0 (all real hardware); 19// C) EXACTLY ONE adapter is hybrid_discrete=1 (the 5080) and at least one is hybrid_integrated=1; 20// D) the discrete value != the integrated value (not a stuck constant); 21// E) TAMPER matrix all distinct from the real ret=0: T1 bogus type(8)!=0, T2 bogus ioctl code!=0, 22// T3 query on a non-dxg fd(/dev/null)!=0. 23// Marker -> knowledge/status/gpu_dxg.log (DXGINFOGATE). Raw syscalls only (no libvulkan/cuda/dxcore/libc). 24// license_tier: ORIGINAL 25import "nx_syscalls.nx" 26 27const ENUM2_CODE: i64 = 0xC0104714 // LX_DXENUMADAPTERS2 (R0) 28const QAI_CODE: i64 = 0xC0184709 // LX_DXQUERYADAPTERINFO, 24-byte struct (R1 recon-pinned) 29const QAI_BOGUS: i64 = 0x99184709 // magic-0x99 tamper of the query code 30 31func p(s: *u8) -> i64 { var nn: i64=0; while s[nn]!=(0 as u8){nn=nn+1} sys_write(1,s,nn); return 0 } 32func fp(fd: i64, s: *u8) -> i64 { var nn: i64=0; while s[nn]!=(0 as u8){nn=nn+1} sys_write(fd,s,nn); return 0 } 33func n(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48;k=1}; while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } 34func x(v: i64) -> i64 { p("0x" as *u8); let bb:*u8=sys_mmap(20); var k:i64=0; var m:i64=v; if m==0{bb[0]=48;k=1}; while m>0{ let d:i64=m&15; if d<10{bb[k]=(48+d) as u8}else{bb[k]=(87+d) as u8}; m=(m>>4); k=k+1 } var i:i64=0; let o:*u8=sys_mmap(20); while i<k{o[i]=bb[k-1-i];i=i+1} sys_write(1,o,k); return 0 } 35 36// raw LX_DXQUERYADAPTERINFO: lay {handle@0, type@4, priv*@8, size@16} into a 24B+ req; return ioctl ret. 37func query(code: i64, fd: i64, handle: i64, qtype: i64, priv: *u8, psize: i64) -> i64 { 38 var z: i64 = 0; while z < 8 { priv[z] = 0 as u8; z = z + 1 } 39 let req: *u8 = sys_mmap(64); var y: i64 = 0; while y < 64 { req[y] = 0 as u8; y = y + 1 } 40 let h: *i64 = (req as i64 + 0) as *i64 41 h[0] = (handle & 0xffffffff) | ((qtype & 0xffffffff) << 32) 42 let pd: *i64 = (req as i64 + 8) as *i64; pd[0] = priv as i64 43 let pds: *i64 = (req as i64 + 16) as *i64; pds[0] = psize & 0xffffffff 44 return sys_ioctl(fd, code, req as i64) 45} 46 47func main() -> i64 { 48 p("=== SOVEREIGN-GPU R1 gate (raw /dev/dxg ADAPTERTYPE identity -> positively ID the discrete RTX 5080) ===\n" as *u8) 49 let fd: i64 = sys_openat_rd("/dev/dxg" as *u8) 50 if fd < 0 { p("open(/dev/dxg) failed\n" as *u8); sys_exit(1); return 1 } 51 52 // R0 enum to get the adapter handles. 53 let ainfo: *u8 = sys_mmap(4096); var z: i64 = 0; while z < 4096 { ainfo[z] = 0 as u8; z = z + 1 } 54 let ereq: *u8 = sys_mmap(64); var y: i64 = 0; while y < 64 { ereq[y] = 0 as u8; y = y + 1 } 55 ereq[0] = 8 as u8; let r8: *i64 = (ereq as i64 + 8) as *i64; r8[0] = ainfo as i64 56 let eret: i64 = sys_ioctl(fd, ENUM2_CODE, ereq as i64) 57 let nc: i64 = (ereq[0] as i64)|((ereq[1] as i64)<<8)|((ereq[2] as i64)<<16)|((ereq[3] as i64)<<24) 58 p(" enum ret=" as *u8); n(eret); p(" num_adapters=" as *u8); n(nc); p("\n" as *u8) 59 60 let priv: *u8 = sys_mmap(64) 61 var all_query_ok: i64 = 1 62 var all_hw: i64 = 1 63 var n_discrete: i64 = 0 64 var n_integrated: i64 = 0 65 var discrete_val: i64 = 0 - 1 66 var integrated_val: i64 = 0 67 var first_handle: i64 = 0 68 69 var ai: i64 = 0 70 while ai < nc { 71 let base: i64 = ai * 20 72 let enumh: i64 = (ainfo[base] as i64)|((ainfo[base+1] as i64)<<8)|((ainfo[base+2] as i64)<<16)|((ainfo[base+3] as i64)<<24) 73 let la: i64 = (ainfo[base+4] as i64)|((ainfo[base+5] as i64)<<8)|((ainfo[base+6] as i64)<<16)|((ainfo[base+7] as i64)<<24) 74 if ai == 0 { first_handle = enumh } 75 let qret: i64 = query(QAI_CODE, fd, enumh, 15, priv, 4) 76 let v: i64 = (priv[0] as i64)|((priv[1] as i64)<<8)|((priv[2] as i64)<<16)|((priv[3] as i64)<<24) 77 let sw: i64 = (v>>2) & 1 78 let disc: i64 = (v>>4) & 1 79 let integ: i64 = (v>>5) & 1 80 p(" adapter[" as *u8); n(ai); p("] luid.a=" as *u8); x(la); p(" query_ret=" as *u8); n(qret) 81 p(" adaptertype=" as *u8); x(v); p(" {sw=" as *u8); n(sw); p(" discrete=" as *u8); n(disc); p(" integrated=" as *u8); n(integ); p("}\n" as *u8) 82 if qret != 0 { all_query_ok = 0 } 83 if sw != 0 { all_hw = 0 } 84 if disc == 1 { if sw == 0 { n_discrete = n_discrete + 1; discrete_val = v } } 85 if integ == 1 { n_integrated = n_integrated + 1; integrated_val = v } 86 ai = ai + 1 87 } 88 89 // ---- TAMPER matrix (no-false-green): each must differ from the real query_ret=0 ---- 90 let t1: i64 = query(QAI_CODE, fd, first_handle, 8, priv, 4) // bogus type 8 (unsupported on WSL) 91 let t2: i64 = query(QAI_BOGUS, fd, first_handle, 15, priv, 4) // bogus ioctl magic 0x99 92 let nfd: i64 = sys_openat_rd("/dev/null" as *u8) 93 let t3: i64 = query(QAI_CODE, nfd, first_handle, 15, priv, 4) // query on a non-dxg fd 94 if nfd >= 0 { sys_close(nfd) } 95 p(" [tamper] type8_ret=" as *u8); n(t1); p(" bogus-code_ret=" as *u8); n(t2); p(" nondxg-fd_ret=" as *u8); n(t3); p("\n" as *u8) 96 sys_close(fd) 97 98 var values_differ: i64 = 0 99 if discrete_val != integrated_val { values_differ = 1 } 100 var tamper_ok: i64 = 0 101 if t1 != 0 { if t2 != 0 { if t3 != 0 { tamper_ok = 1 } } } 102 103 var pass: i64 = 0 104 if eret == 0 { if nc >= 2 { if all_query_ok == 1 { if all_hw == 1 { 105 if n_discrete == 1 { if n_integrated >= 1 { if values_differ == 1 { if tamper_ok == 1 { pass = 1 } } } } } } } } 106 107 p(" checks: enum=" as *u8); n(eret==0); p(" all_query_ok=" as *u8); n(all_query_ok); p(" all_hardware=" as *u8); n(all_hw) 108 p(" discrete_count=" as *u8); n(n_discrete); p(" integrated_count=" as *u8); n(n_integrated); p(" values_differ=" as *u8); n(values_differ); p(" tamper_ok=" as *u8); n(tamper_ok); p("\n" as *u8) 109 110 let lfd: i64 = sys_openat_append("knowledge/status/gpu_dxg.log" as *u8, 0x1a4) 111 if pass == 1 { 112 p("DXGINFOGATE verdict=GREEN reason=raw-/dev/dxg-ADAPTERTYPE-positively-IDs-the-discrete-RTX5080 (query ret=0; exactly-one discrete hw GPU [hybrid_discrete=1,software_device=0] vs integrated; values differ; type8+bogus-code+non-dxg-fd tampers all != real ret=0; wrapper-free) SCOPE=identity-only-NO-throughput; model-NAME-string=R1b-LUID->PCI (dxgkrnl has none)\n" as *u8) 113 if lfd >= 0 { 114 fp(lfd, "DXGINFOGATE verdict=GREEN keystone=gpu-adapter-identity device=discrete-RTX5080 via=raw-/dev/dxg-LX_DXQUERYADAPTERINFO(0xC0184709,type=15-ADAPTERTYPE) discrete_value=" as *u8) 115 let hb: *u8 = sys_mmap(20); var kk: i64=0; var m: i64=discrete_val; if m==0{hb[0]=48;kk=1}; while m>0{let d:i64=m&15; if d<10{hb[kk]=(48+d) as u8}else{hb[kk]=(87+d) as u8}; m=(m>>4); kk=kk+1} let ob:*u8=sys_mmap(20); var ii:i64=0; while ii<kk{ob[ii]=hb[kk-1-ii];ii=ii+1} fp(lfd, "0x" as *u8); sys_write(lfd, ob, kk) 116 fp(lfd, " hybrid_discrete=1 software_device=0 vs integrated; tamper=rejected(type8+bogus-code+non-dxg-fd) wrapper-free scope=identity-only-NO-throughput model-name=R1b-deferred(no-dxgkrnl-string-ABI)\n" as *u8) 117 sys_close(lfd) 118 } 119 sys_exit(0); return 0 120 } 121 p("DXGINFOGATE verdict=RED (one of enum/query/all-hardware/discrete-count/values-differ/tamper not satisfied)\n" as *u8) 122 if lfd >= 0 { fp(lfd, "DXGINFOGATE verdict=RED enum=" as *u8); fp(lfd, "see-console\n" as *u8); sys_close(lfd) } 123 sys_exit(1) 124 return 1 125}