code wiki / _hdl_build / nx_ark_register.nx

nx_ark_register.nx source

↩ module page · 39 lines · 2761 B

1// nx_ark_register.nx -- records X-REP-005 (the ark). Engineer gate = 2// ARKGATE 8/8 re-run GREEN at register time. Librarian alloc + dual-write. 3// license_tier: ORIGINAL 4import "nx_cap_register.nx" 5import "nx_capreg_librarian.nx" 6import "nx_syscalls.nx" 7 8func akr_run(path: *u8) -> i64 { 9 let pid: i64 = sys_fork() 10 if pid == 0 { 11 let dn: i64 = sys_openat_wr("/dev/null" as *u8, 0x1a4) 12 if dn >= 0 { sys_dup3(dn, 1, 0); sys_dup3(dn, 2, 0) } 13 let argv: *i64 = sys_mmap(32) as *i64; argv[0] = path as i64; argv[1] = 0 14 let envp: *i64 = sys_mmap(16) as *i64; envp[0] = 0 15 sys_execve(path, argv, envp); sys_exit(127) 16 } 17 let st: *i64 = sys_mmap(16) as *i64 18 sys_wait4(pid, st, 0) 19 return st[0] 20} 21 22func main() -> i64 { 23 var allok: i64 = 1 24 if akr_run("/tmp/_ark_gate_authored.sov.elf" as *u8) != 0 { allok = 0 } 25 cr_w(1, "ENGINEER: ark 8-check gate re-run all-pass=" as *u8); cr_wn(1, allok); cr_w(1, "\n" as *u8) 26 let eng: i64 = ig_engineer(1, 1, 1, allok) 27 let dec: i64 = ig_decision(eng, ig_council(eng, 1, 1, 2), 1) 28 if dec != IG_INGEST { cr_w(1, "HELD\n" as *u8); sys_exit(1) } 29 if cr_can_register(5, 2, 6, dec) != 1 { cr_w(1, "REFUSED\n" as *u8); sys_exit(1) } 30 let lp: *u8 = "/tmp/nishi_cap_registry.log" as *u8 31 let jp: *u8 = "knowledge/status/cap_registry_durable.log" as *u8 32 let idx: i64 = cl_next_idx(lp, jp) 33 let ok: i64 = cl_register_dual(lp, jp, idx, 5, 34 2, "SELF THE-ARK (X-REP-005 / CALLOUT-002 REP-1, closed by reconcile on ARKGATE) -- nx_ark_snapshot: the survival set AS DATA (knowledge/registry/ark_set.tsv, 18 entries v1: queue + markers + sponsor surfaces + prefs/callouts + landmines + confs + rung_gates + debt ledger + store manifest + the four durable toolchain elfs incl THE LANE ITSELF) packed into ONE file knowledge/ark_pack.bin (NXARK1 format) + deterministic CID manifest; SKIP-UNCHANGED (manifest byte-compare -> beat cost = a read pass, resource law); atomic .new+renameat writes (the lane discipline); VERIFY mode walks pack vs manifest (count/path/size/recomputed-CID) -- an ark that cannot prove itself is hope, not backup. ARKGATE 8/8 first run: snap/skip/change-resnap/verify/TAMPER-RED(mid-byte xor)/restore-GREEN/LIVE-ark/LIVE-verify. Pulse step wired (every beat re-arks on change, verifies free on skip). LADDER NEXT: X-REP-006 nx_ark_rebuild + fault-injection drill (the unpack/germination executor), REP-4 off-box export (NAS/USB), X-REP-011 forest-shard restore. Growing the ark = adding a TSV row" as *u8) 35 if ok != 1 { cr_w(1, "DUAL-WRITE FAILED\n" as *u8); sys_exit(1) } 36 cr_w(1, "CAPREG idx=" as *u8); cr_wn(1, idx); cr_w(1, " REGISTERED -- the seed has its first organ\n" as *u8) 37 sys_exit(0) 38 return 0 39}