code wiki / _hdl_build / nx_aw_stack_census.nx
nx_aw_stack_census.nx source
↩ module page · 159 lines · 9174 B
1// nx_aw_stack_census.nx -- DATA <> IO <> FUNCTIONAL census for the andelinwest client stack
2// (operator 2026-07-03: "get the data layer <> io <> functional to state of the art"). PROVE-NOT-ASSERT
3// (the nx_rung_eval doctrine): a row is PROVEN only when a REAL gate's status log carries verdict=GREEN
4// (the gate ran and its referee passed); a row whose organ exists but has no run-evidence is PARTIAL;
5// everything else is GAP. NO file-existence green-washing. LIAR-KILL: a bogus log row must grade GAP.
6//
7// The three layers, as built (each row names its evidence):
8// FUNCTIONAL = pure bytes-in/bytes-out routers + generators, gate-driven in-process (no sockets)
9// IO = daemons/edge (loopback HTTP behind the SNI router, Content-Length contract, TLS)
10// DATA = seg_store append-only + CID + tombstones; append-only auth/invite/mailmap stores;
11// versioned .site configs + .prev backups (rule 13: history is sacred)
12// license_tier: ORIGINAL expect_exit: 0
13import "nx_syscalls.nx"
14const K_MAGIC_4096: i64 = 4096
15
16func c_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
17func c_n(v: i64) -> i64 { let b: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)} let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var i: i64=0; while i<k{b[i]=t[k-1-i];i=i+1} sys_write(1,b,k); return 0 }
18func c_len(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} return n }
19func c_contains(hay: *u8, n: i64, needle: *u8) -> i64 {
20 let nn: i64 = c_len(needle); if nn==0 { return 0 }
21 var i: i64=0
22 while i+nn<=n { var m: i64=1; var j: i64=0; while j<nn { if (hay[i+j] as i64)!=(needle[j] as i64) { m=0; j=nn } else { j=j+1 } } if m==1 { return 1 } i=i+1 }
23 return 0
24}
25// PROVEN iff the status log exists AND contains marker AND verdict=GREEN on the SAME final chunk
26// (tail 4KB -- the latest append wins; a RED after a GREEN would appear later in the tail).
27func c_proven(logpath: *u8, marker: *u8) -> i64 {
28 let szp: *i64 = sys_mmap(16) as *i64
29 szp[0] = 0
30 let b: *u8 = sys_read_file(logpath, szp)
31 if (b as i64) == 0 { return 0 }
32 var off: i64 = 0
33 if szp[0] > K_MAGIC_4096 { off = szp[0] - K_MAGIC_4096 }
34 let tail: *u8 = ((b as i64) + off) as *u8
35 let tn: i64 = szp[0] - off
36 if c_contains(tail, tn, marker) == 0 { return 0 }
37 if c_contains(tail, tn, "verdict=GREEN" as *u8) == 0 { return 0 }
38 return 1
39}
40func c_src(path: *u8) -> i64 {
41 let fd: i64 = sys_openat_rd(path)
42 if fd < 0 { return 0 }
43 sys_close(fd)
44 return 1
45}
46// one census row: grade = 2 PROVEN (gate log GREEN) / 1 PARTIAL (organ present, no run-proof) / 0 GAP
47func c_row(name: *u8, logpath: *u8, marker: *u8, srcpath: *u8, note: *u8, score: *i64, tot: *i64) -> i64 {
48 var g: i64 = 0
49 if c_proven(logpath, marker) == 1 { g = 2 }
50 else { if c_src(srcpath) == 1 { g = 1 } }
51 c_w(" " as *u8); c_w(name)
52 if g == 2 { c_w(" PROVEN " as *u8) }
53 if g == 1 { c_w(" PARTIAL " as *u8) }
54 if g == 0 { c_w(" GAP " as *u8) }
55 c_w(note); c_w("\n" as *u8)
56 score[0] = score[0] + g
57 tot[0] = tot[0] + 2
58 return g
59}
60
61func main() -> i64 {
62 c_w("=== AW STACK CENSUS: data <> io <> functional (prove-not-assert; rows graded from REAL gate logs) ===\n" as *u8)
63 let sc: *i64 = sys_mmap(16) as *i64
64 let tt: *i64 = sys_mmap(16) as *i64
65 sc[0] = 0
66 tt[0] = 0
67
68 c_w("-- FUNCTIONAL (pure routers/generators, gated in-process) --\n" as *u8)
69 c_row("F1 doc-portal router (auth+upload+invites+search)" as *u8,
70 "knowledge/status/docportal_admin_daemon_gate.log" as *u8, "DOCPORTAL-ADMIN-DAEMON" as *u8,
71 "runtime/_hdl_build/nx_docportal_admin_daemon.nx" as *u8,
72 "dad_handle: Modern-Auth wall, invite register, upload, public /search+/doc" as *u8, sc, tt)
73 c_row("F2 email-portal router (mailboxes+isolation+escape)" as *u8,
74 "knowledge/status/email_portal_gate.log" as *u8, "EMAIL-PORTAL" as *u8,
75 "runtime/_hdl_build/nx_email_portal_daemon.nx" as *u8,
76 "epd_handle: session->mailbox by construction, XSS-escaped, honest ext queue" as *u8, sc, tt)
77 c_row("F3 site-editor router (save/preview/publish) " as *u8,
78 "knowledge/status/siteedit_gate.log" as *u8, "SITEEDIT" as *u8,
79 "runtime/_hdl_build/nx_siteedit_daemon.nx" as *u8,
80 "sed_handle: refuse-bad-config, preview-isolated, .prev revert" as *u8, sc, tt)
81 c_row("F4 whole-site generator (blueprint -> pages) " as *u8,
82 "knowledge/status/site_build.log" as *u8, "SITE-BUILD" as *u8,
83 "runtime/_hdl_build/nx_site_build.nx" as *u8,
84 "sb_build_site: nav+links+sitemap emission (gate 8/8 prints, log if wired)" as *u8, sc, tt)
85 c_row("F5 sovereign-browser core on the client pages " as *u8,
86 "knowledge/status/aw_browser_gate.log" as *u8, "AW-BROWSER" as *u8,
87 "runtime/_hdl_build/nx_aw_browser_gate.nx" as *u8,
88 "br_layout/br_hit_link on REAL emitted pages incl. container-anchor fix" as *u8, sc, tt)
89
90 c_w("-- IO (edge + daemons; every reply Content-Length-framed) --\n" as *u8)
91 c_row("I1 SNI routing policy (subdomain capability rows)" as *u8,
92 "knowledge/status/sni_route.log" as *u8, "SNI-ROUTE" as *u8,
93 "runtime/_hdl_build/nx_sni_route_gate.nx" as *u8,
94 "sni_backend 9/9 incl. spoof neg-control (gate prints; log if wired)" as *u8, sc, tt)
95 c_row("I2 per-SNI wildcard cert selection " as *u8,
96 "knowledge/status/sites_sni_cert.log" as *u8, "SNI-CERT" as *u8,
97 "runtime/nx_sni_cert_select.nx" as *u8,
98 "scs_pick 12+4 e2e (served leaf read off the wire; log if wired)" as *u8, sc, tt)
99 c_row("I3 live user flows (sovereign funcheck) " as *u8,
100 "knowledge/status/funcheck.log" as *u8, "FUNCHECK" as *u8,
101 "runtime/nx_funcheck.nx" as *u8,
102 "REAL flows over sovereign TLS; subdomain rows LAN-hairpin-limited (documented)" as *u8, sc, tt)
103
104 c_w("-- DATA (append-only; history is sacred, rule 13) --\n" as *u8)
105 c_row("D1 doc store: CID + never-delete + policy-at-rest" as *u8,
106 "knowledge/status/docportal_admin_daemon_gate.log" as *u8, "authed_upload=1" as *u8,
107 "runtime/nx_seg_store.nx" as *u8,
108 "seg_store: content-addressed segments, tombstones, per-domain prefixes" as *u8, sc, tt)
109 c_row("D2 mailboxes: atomic append + tombstone delete " as *u8,
110 "knowledge/status/email_portal_gate.log" as *u8, "tombstone_delete=1" as *u8,
111 "runtime/nx_email_mailbox.nx" as *u8,
112 "nx_mbox: one-segment commit (msg+count), soft-delete only" as *u8, sc, tt)
113 c_row("D3 site config: versioned saves + .prev homepage " as *u8,
114 "knowledge/status/siteedit_gate.log" as *u8, "publish_backup=1" as *u8,
115 "runtime/_hdl_build/nx_siteedit_daemon.nx" as *u8,
116 "sed: <config>.v<epoch> history + .prev-index.html before publish" as *u8, sc, tt)
117 c_row("D4 secrets: invites hashed at rest, single-use " as *u8,
118 "knowledge/status/email_portal_gate.log" as *u8, "invite_survives_refusal=1" as *u8,
119 "runtime/_hdl_build/nx_invite_token.nx" as *u8,
120 "store holds sha256(token) only; consume = superseding row, never a delete" as *u8, sc, tt)
121
122 // LIAR-KILL: a marker that is NOT in any log must grade GAP (c_proven cannot false-green)
123 c_w("-- liar-kill --\n" as *u8)
124 let lk_sc: *i64 = sys_mmap(16) as *i64
125 let lk_tt: *i64 = sys_mmap(16) as *i64
126 lk_sc[0] = 0
127 lk_tt[0] = 0
128 let lkg: i64 = c_row("LK bogus-marker row (MUST be GAP) " as *u8,
129 "knowledge/status/email_portal_gate.log" as *u8, "zzz_bogus_marker_never_written" as *u8,
130 "runtime/_hdl_build/zzz_no_such_organ.nx" as *u8,
131 "negative control: referee must refuse" as *u8, lk_sc, lk_tt)
132 if lkg != 0 { c_w("LIAR-KILL FAILED -- the referee green-washed a bogus row\nAW-STACK-CENSUS RED\n" as *u8); sys_exit(1); return 1 }
133
134 let permille: i64 = sc[0] * 1000 / tt[0]
135 c_w("----\nAW-STACK-CENSUS score=" as *u8); c_n(sc[0]); c_w("/" as *u8); c_n(tt[0])
136 c_w(" = " as *u8); c_n(permille); c_w(" permille (PROVEN=2 PARTIAL=1 GAP=0 per row; liar-kill fired-clean)\n" as *u8)
137 let lg: i64 = sys_openat_append("knowledge/status/aw_stack_census.log" as *u8, 0x1a4)
138 if lg >= 0 {
139 let row: *u8 = sys_mmap(256)
140 var o: i64 = 0
141 let p1: *u8 = "AW-STACK-CENSUS permille=" as *u8
142 var i: i64 = 0
143 while p1[i] != (0 as u8) { row[o]=p1[i]; o=o+1; i=i+1 }
144 var v: i64 = permille
145 let t: *u8 = sys_mmap(16)
146 var k: i64 = 0
147 if v == 0 { t[0]=48 as u8; k=1 }
148 while v > 0 { t[k]=(48+(v%10)) as u8; v=v/10; k=k+1 }
149 while k > 0 { k=k-1; row[o]=t[k]; o=o+1 }
150 let p2: *u8 = " liar_kill=fired-clean verdict=GREEN\n" as *u8
151 i = 0
152 while p2[i] != (0 as u8) { row[o]=p2[i]; o=o+1; i=i+1 }
153 sys_write(lg, row, o)
154 sys_close(lg)
155 }
156 c_w("AW-STACK-CENSUS GREEN\n" as *u8)
157 sys_exit(0)
158 return 0
159}