nx_account_admin_census.nx source

1// nx_account_admin_census.nx -- the honest, ORGAN-COMPUTED scorecard for the HR-driven account-admin capability 2// (the ecosystem's census doctrine: measured, never self-scored). It grades each capability by READING that 3// capability's GATE LOG and checking the LATEST verdict is GREEN -- PRESENT iff its gate is green, the exceed cell 4// EXCEEDS iff the measured exceed gate is green, ABSENT otherwise. A cell can NOT be marked PRESENT without a green 5// gate behind it. LIAR-KILL negative control: a cell pointing at a non-existent log MUST grade ABSENT, proving the 6// census doesn't rubber-stamp. Run the gates first (or the sweep); this reflects their last results. license_tier: ORIGINAL 7import "nx_sovjson_lib.nx" 8import "nx_syscalls.nx" 9 10func g_w(s: *u8) -> i64 { return sj_puts(s) } 11func g_n(v: i64) -> i64 { var m: i64=v; if m<0{g_w("-" as *u8);m=0-m} let t:*u8=sys_mmap(24); var k:i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var i:i64=0; let o:*u8=sys_mmap(24); while i<k{o[i]=t[k-1-i];i=i+1} sys_write(1,o,k); return 0 } 12func gw(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 } 13 14// last byte-index of `needle` in buf[0..n) (-1 if absent). 15func aac_last(buf: *u8, n: i64, needle: *u8) -> i64 { 16 var nl: i64=0; while needle[nl]!=(0 as u8){nl=nl+1} 17 if nl==0 { return 0-1 } 18 var last: i64=0-1; var i: i64=0 19 while i+nl<=n { var j: i64=0; var ok: i64=1; while j<nl { if buf[i+j]!=needle[j]{ok=0;j=nl} else {j=j+1} } if ok==1 {last=i; i=i+nl} else {i=i+1} } 20 return last 21} 22// 1 iff the gate log's LATEST verdict is GREEN (a later GREEN than any RED). Missing log -> 0 (ABSENT). 23func aac_log_green(path: *u8) -> i64 { 24 let lp: *i64 = sys_mmap(8) as *i64; lp[0]=0 25 let d: *u8 = sys_read_file(path, lp) 26 if (d as i64)==0 { return 0 } 27 let g: i64 = aac_last(d, lp[0], "verdict=GREEN" as *u8) 28 if g < 0 { return 0 } 29 let r: i64 = aac_last(d, lp[0], "verdict=RED" as *u8) 30 if g > r { return 1 } 31 return 0 32} 33// grade one cell from its gate log; print + tally. is_exceed=1 -> EXCEEDS instead of PRESENT. 34func aac_cell(name: *u8, path: *u8, is_exceed: i64, pres: *i64, exc: *i64, absent: *i64) -> i64 { 35 let green: i64 = aac_log_green(path) 36 g_w(" [" as *u8) 37 if green==1 { if is_exceed==1 { g_w("EXCEEDS" as *u8); exc[0]=exc[0]+1 } else { g_w("PRESENT" as *u8); pres[0]=pres[0]+1 } } 38 else { g_w("ABSENT " as *u8); absent[0]=absent[0]+1 } 39 g_w("] " as *u8); g_w(name); g_w("\n" as *u8) 40 return green 41} 42 43func main() -> i64 { 44 g_w("=== ACCOUNT-ADMIN CAPABILITY CENSUS (organ-graded from real gate logs; never self-scored) ===\n" as *u8) 45 let pres: *i64 = sys_mmap(8) as *i64; pres[0]=0 46 let exc: *i64 = sys_mmap(8) as *i64; exc[0]=0 47 let absent: *i64 = sys_mmap(8) as *i64; absent[0]=0 48 49 aac_cell("HR-driven admin (invite/claim/suspend/superadmin/roster, realm-isolated)" as *u8, "knowledge/status/hr_admin_gate.log" as *u8, 0, pres, exc, absent) 50 aac_cell("superuser-by-construction entitlements (owner -> everything, no drift)" as *u8, "knowledge/status/hr_entitle_gate.log" as *u8, 0, pres, exc, absent) 51 aac_cell("signup only on LAN + only invited (by construction)" as *u8, "knowledge/status/lan_signup_gate.log" as *u8, 0, pres, exc, absent) 52 aac_cell("owner-gated /hr roster console (zero 3rd-party JS, no self-lockout)" as *u8, "knowledge/status/hr_admin_page_gate.log" as *u8, 0, pres, exc, absent) 53 aac_cell("realm-parameterized (1 daemon, many properties; cross-realm isolation)" as *u8, "knowledge/status/realm_multi_gate.log" as *u8, 0, pres, exc, absent) 54 aac_cell("forgot-passphrase recovery (mnemonic rotates, no replay)" as *u8, "knowledge/status/recover_gate.log" as *u8, 0, pres, exc, absent) 55 aac_cell("access SSOT adapter (session -> HR level; auth != authz)" as *u8, "knowledge/status/hr_access_gate.log" as *u8, 0, pres, exc, absent) 56 aac_cell("/hr/audit trail (append-only history, ts + actor)" as *u8, "knowledge/status/hr_audit_gate.log" as *u8, 0, pres, exc, absent) 57 aac_cell("end-to-end socket proof (real lsd_route: register+claim+/hr)" as *u8, "knowledge/status/lan_signup_socket_gate.log" as *u8, 0, pres, exc, absent) 58 aac_cell("sovereign deploy submission via the Publisher (idempotent)" as *u8, "knowledge/status/publish_account_admin.log" as *u8, 0, pres, exc, absent) 59 aac_cell("MEASURED S-class exceed (4 axes, liar-killed, executed baselines)" as *u8, "knowledge/status/account_admin_exceed_gate.log" as *u8, 1, pres, exc, absent) 60 // LIAR-KILL negative control: a capability with NO gate behind it MUST grade ABSENT 61 let neg: i64 = aac_cell("[neg-control] fabricated capability (no gate log)" as *u8, "knowledge/status/__census_negctrl_nonexistent__.log" as *u8, 0, pres, exc, absent) 62 63 g_w("----\n PRESENT=" as *u8); g_n(pres[0]); g_w(" EXCEEDS=" as *u8); g_n(exc[0]); g_w(" ABSENT=" as *u8); g_n(absent[0]) 64 g_w(" liar_kill_fired=" as *u8); if neg==0 { g_n(0) } else { g_n(1) }; g_w("\n" as *u8) 65 // GREEN iff exactly the 10 standard cells PRESENT, the exceed cell EXCEEDS, and the ONLY absent is the neg-control. 66 var green: i64 = 0 67 if pres[0]==10 { if exc[0]==1 { if absent[0]==1 { if neg==0 { green=1 } } } } 68 if green==1 { g_w("ACCOUNT-ADMIN-CENSUS verdict=GREEN (10 PRESENT + 1 EXCEEDS; neg-control ABSENT; no rubber-stamp)\n" as *u8) } 69 else { g_w("ACCOUNT-ADMIN-CENSUS verdict=RED\n" as *u8) } 70 let lg: i64=sys_openat_append("knowledge/status/account_admin_census.log" as *u8, 0x1a4) 71 if lg>=0 { 72 gw(lg, "ACCOUNT-ADMIN-CENSUS PRESENT=" as *u8); let bb:*u8=sys_mmap(8); var m:i64=pres[0]; var k:i64=0; if m==0{bb[0]=48 as u8;k=1} while m>0{bb[k]=(48+(m%10)) as u8;m=m/10;k=k+1} sys_write(lg,bb,k) 73 if green==1 { gw(lg, " verdict=GREEN\n" as *u8) } else { gw(lg, " verdict=RED\n" as *u8) } 74 sys_close(lg) 75 } 76 if green==1 { sys_exit(0); return 0 } 77 sys_exit(1); return 1 78}