code wiki / _hdl_build / nx_ark_register.nx
nx_ark_register.nx source
↩ module page · 39 lines · 2761 B
1// nx_ark_register.nx -- records X-REP-005 (the ark). Engineer gate =
2// ARKGATE 8/8 re-run GREEN at register time. Librarian alloc + dual-write.
3// license_tier: ORIGINAL
4import "nx_cap_register.nx"
5import "nx_capreg_librarian.nx"
6import "nx_syscalls.nx"
7
8func akr_run(path: *u8) -> i64 {
9 let pid: i64 = sys_fork()
10 if pid == 0 {
11 let dn: i64 = sys_openat_wr("/dev/null" as *u8, 0x1a4)
12 if dn >= 0 { sys_dup3(dn, 1, 0); sys_dup3(dn, 2, 0) }
13 let argv: *i64 = sys_mmap(32) as *i64; argv[0] = path as i64; argv[1] = 0
14 let envp: *i64 = sys_mmap(16) as *i64; envp[0] = 0
15 sys_execve(path, argv, envp); sys_exit(127)
16 }
17 let st: *i64 = sys_mmap(16) as *i64
18 sys_wait4(pid, st, 0)
19 return st[0]
20}
21
22func main() -> i64 {
23 var allok: i64 = 1
24 if akr_run("/tmp/_ark_gate_authored.sov.elf" as *u8) != 0 { allok = 0 }
25 cr_w(1, "ENGINEER: ark 8-check gate re-run all-pass=" as *u8); cr_wn(1, allok); cr_w(1, "\n" as *u8)
26 let eng: i64 = ig_engineer(1, 1, 1, allok)
27 let dec: i64 = ig_decision(eng, ig_council(eng, 1, 1, 2), 1)
28 if dec != IG_INGEST { cr_w(1, "HELD\n" as *u8); sys_exit(1) }
29 if cr_can_register(5, 2, 6, dec) != 1 { cr_w(1, "REFUSED\n" as *u8); sys_exit(1) }
30 let lp: *u8 = "/tmp/nishi_cap_registry.log" as *u8
31 let jp: *u8 = "knowledge/status/cap_registry_durable.log" as *u8
32 let idx: i64 = cl_next_idx(lp, jp)
33 let ok: i64 = cl_register_dual(lp, jp, idx, 5,
34 2, "SELF THE-ARK (X-REP-005 / CALLOUT-002 REP-1, closed by reconcile on ARKGATE) -- nx_ark_snapshot: the survival set AS DATA (knowledge/registry/ark_set.tsv, 18 entries v1: queue + markers + sponsor surfaces + prefs/callouts + landmines + confs + rung_gates + debt ledger + store manifest + the four durable toolchain elfs incl THE LANE ITSELF) packed into ONE file knowledge/ark_pack.bin (NXARK1 format) + deterministic CID manifest; SKIP-UNCHANGED (manifest byte-compare -> beat cost = a read pass, resource law); atomic .new+renameat writes (the lane discipline); VERIFY mode walks pack vs manifest (count/path/size/recomputed-CID) -- an ark that cannot prove itself is hope, not backup. ARKGATE 8/8 first run: snap/skip/change-resnap/verify/TAMPER-RED(mid-byte xor)/restore-GREEN/LIVE-ark/LIVE-verify. Pulse step wired (every beat re-arks on change, verifies free on skip). LADDER NEXT: X-REP-006 nx_ark_rebuild + fault-injection drill (the unpack/germination executor), REP-4 off-box export (NAS/USB), X-REP-011 forest-shard restore. Growing the ark = adding a TSV row" as *u8)
35 if ok != 1 { cr_w(1, "DUAL-WRITE FAILED\n" as *u8); sys_exit(1) }
36 cr_w(1, "CAPREG idx=" as *u8); cr_wn(1, idx); cr_w(1, " REGISTERED -- the seed has its first organ\n" as *u8)
37 sys_exit(0)
38 return 0
39}