`nx_coa_gate.nx` source

↩ module page · 163 lines · 7605 B
1// nx_coa_gate.nx -- F982 INDEPENDENT GATE: chart of accounts + period close.
2// Proves the sign convention actually inverts per account KIND, that the type->side map is genuinely
3// data-driven (a NEW kind invented at runtime works with no code change), that unknown types
4// FAIL CLOSED instead of guessing a side, and that a closed period refuses postings.
5// license_tier: ORIGINAL   No hw writes (Rule 26).   expect_exit: 0
6
7import "nx_coa_lib.nx"
8
9func cg_puts(s: *u8) -> i64 {
  var n: i64 = 0
  while s[n] != (0 as u8) { n = n + 1 }
  sys_write(1, s, n)
  return 0
14}
15func cg_putn(v: i64) -> i64 {
  let t: *u8 = sys_mmap(32)
  var o: i64 = 0
  var m: i64 = v
  if m < 0 { t[o] = 45 as u8; o = o + 1; m = 0 - m }
  let d: *u8 = sys_mmap(32)
  var k: i64 = 0
  if m == 0 { d[0] = 48 as u8; k = 1 }
  while m > 0 { d[k] = (48 + (m % 10)) as u8; m = m / 10; k = k + 1 }
  var i: i64 = 0
  while i < k { t[o] = d[k - 1 - i]; o = o + 1; i = i + 1 }
  sys_write(1, t, o)
  return 0
28}
29func cg_ck(cnt: *i64, name: *u8, got: i64, want: i64) -> i64 {
  if got == want {
      cnt[0] = cnt[0] + 1
      cg_puts("  PASS " as *u8); cg_puts(name); cg_puts(" = " as *u8); cg_putn(got); cg_puts("\n" as *u8)
      return 1
  }
  cnt[1] = cnt[1] + 1
  cg_puts("  FAIL " as *u8); cg_puts(name); cg_puts(" got " as *u8); cg_putn(got)
  cg_puts(" want " as *u8); cg_putn(want); cg_puts("\n" as *u8)
  return 0
39}
40func cg_id(tag: *u8, nonce: i64, out: *u8) -> i64 {
  var o: i64 = mt_catcopy(out, 0, tag)
  o = mt_catn(out, o, nonce)
  out[o] = 0 as u8
  return o
45}
46
47func main(argc: i64, argv: *i64) -> i64 {
  // FIXTURE MOVED OUT OF THE SWEPT STORE (2026-08-07). knowledge/store/ is walked every 600s by
  // the nx_segguard beat; this gate's fixture is one of TEN measured as actually folded by it. A
  // fold landing mid-run rewrites the manifest under the code being measured, so a RED could not
  // be attributed. Proven on the sibling defect: the SAME code went RED on a knowledge/store
  // fixture and GREEN 24/24 on a /tmp one -- the RED tracked the FIXTURE, not the code.
  // Created at SETUP, not teardown: a teardown does not run when a run crashes.
  sys_mkdir("/tmp/coagate\x00" as *u8, 0x1ed)
  let lp: *u8 = "/tmp/coagate/coagate-led-" as *u8
  let cp: *u8 = "/tmp/coagate/coagate-coa-" as *u8
  let nonce: i64 = sys_now_us()
  let cnt: *i64 = sys_mmap(16) as *i64
  cnt[0] = 0
  cnt[1] = 0
61
  let cash: *u8 = sys_mmap(64)
  let loan: *u8 = sys_mmap(64)
  let ghost: *u8 = sys_mmap(64)
  let weird: *u8 = sys_mmap(64)
  // ★NONCE THE KIND TOO (2026-07-31). Every ACCOUNT here is nonced per run, but the KIND was the
  // hardcoded literal "unobtainium" -- and C6 REGISTERS a side for it in a PERSISTENT plane
  // (the coagate-coa- plane). So C5, which requires that kind to have NO registered side,
  // passed only on a virgin store and failed on every run afterwards: the gate poisoned its own
  // fixture and violated rule 10 (safe to run twice). Nonce it and the C5->C6 pair stays intact
  // and idempotent, with no fixture deletion needed.
  let wkind: *u8 = sys_mmap(64)
  cg_id("cash_" as *u8, nonce, cash)
  cg_id("loan_" as *u8, nonce, loan)
  cg_id("ghost_" as *u8, nonce, ghost)
  cg_id("weird_" as *u8, nonce, weird)
  cg_id("unobtainium_" as *u8, nonce, wkind)
78
  let x1: *u8 = sys_mmap(64)
  let x2: *u8 = sys_mmap(64)
  cg_id("cx1_" as *u8, nonce, x1)
  cg_id("cx2_" as *u8, nonce, x2)
83
  let per: *u8 = sys_mmap(64)
  let per2: *u8 = sys_mmap(64)
  cg_id("2026-07_" as *u8, nonce, per)
  cg_id("2026-08_" as *u8, nonce, per2)
88
  let out: *i64 = sys_mmap(16) as *i64
90
  cg_puts("NISHI-COA-GATE (F982 chart of accounts + period close)\n" as *u8)
92
  // data-driven side map
  coa_type_put(cp, "asset" as *u8, "debit" as *u8)
  coa_type_put(cp, "liability" as *u8, "credit" as *u8)
  coa_put(cp, cash, "asset" as *u8)
  coa_put(cp, loan, "liability" as *u8)
98
  // fund cash $1000.00 from the loan: debits cash, credits loan
  led_xfer(lp, x1, cash, loan, 100000, "posted" as *u8)
101
  // ---- C1: the RAW ledger balance is credits-debits, so cash reads NEGATIVE ----
  cg_ck(cnt, "C1 raw led_balance(cash) is credits-debits" as *u8, led_balance(lp, cash), 0 - 100000)
104
  // ---- C2: the CHART inverts it -- an asset reads its natural POSITIVE balance ----
  cg_ck(cnt, "C2 coa_natural(cash) resolved (1=ok)" as *u8, coa_natural(lp, cp, cash, out), 1)
  cg_ck(cnt, "C2a asset natural balance is POSITIVE $1000.00" as *u8, out[0], 100000)
108
  // ---- C3: a liability is credit-normal, so it also reads positive ----
  cg_ck(cnt, "C3 coa_natural(loan) resolved" as *u8, coa_natural(lp, cp, loan, out), 1)
  cg_ck(cnt, "C3a liability natural balance is POSITIVE $1000.00" as *u8, out[0], 100000)
112
  // ---- C4: FAIL-CLOSED -- an account with no registered type must NOT guess a side ----
  out[0] = 424242
  cg_ck(cnt, "C4 unregistered account FAILS CLOSED (0)" as *u8, coa_natural(lp, cp, ghost, out), 0)
  cg_ck(cnt, "C4a fail-closed wrote NOTHING to out" as *u8, out[0], 424242)
117
  // ---- C5: FAIL-CLOSED -- a known account whose KIND has no registered side ----
  coa_put(cp, weird, wkind)
  out[0] = 777777
  cg_ck(cnt, "C5 unknown account KIND FAILS CLOSED (0)" as *u8, coa_natural(lp, cp, weird, out), 0)
  cg_ck(cnt, "C5a fail-closed wrote NOTHING to out" as *u8, out[0], 777777)
123
  // ---- C6: DATA-DRIVEN PROOF -- register the new kind's side at RUNTIME, no code change ----
  coa_type_put(cp, wkind, "credit" as *u8)
  cg_ck(cnt, "C6 new account KIND works after a DATA write alone" as *u8,
        coa_natural(lp, cp, weird, out), 1)
  cg_ck(cnt, "C6a and it resolves to a real balance" as *u8, out[0], 0)
129
  // ---- C7/C8: period close is a fail-closed posting guard ----
  cg_ck(cnt, "C7 open period ALLOWS posting" as *u8, coa_post_ok(cp, per), 1)
  // C7a: the gate must PROVE its own setup landed. reg_put returns <0 on failure and
  // coa_period_close returns it verbatim; discarding it made a FAILED CLOSE indistinguishable
  // from a successful one, so the flake surfaced as whichever assertion read the store next
  // (C8 in some runs, C2 in others -- a MOVING tooth is the signature of unchecked setup).
  let cl1: i64 = coa_period_close(cp, per)
  var cl1ok: i64 = 0
  if cl1 >= 0 { cl1ok = 1 }
  cg_ck(cnt, "C7a period close SUCCEEDS (setup proven, never assumed)" as *u8, cl1ok, 1)
  cg_ck(cnt, "C8 closed period REFUSES posting" as *u8, coa_post_ok(cp, per), 0)
  cg_ck(cnt, "C8a and reports itself closed" as *u8, coa_period_closed(cp, per), 1)
142
  // ---- C9: closing is IDEMPOTENT (rule 10) ----
  let cl2: i64 = coa_period_close(cp, per)
  var cl2ok: i64 = 0
  if cl2 >= 0 { cl2ok = 1 }
  cg_ck(cnt, "C9a re-close also SUCCEEDS (idempotent path is a write too)" as *u8, cl2ok, 1)
  cg_ck(cnt, "C9 re-closing is idempotent, still closed" as *u8, coa_period_closed(cp, per), 1)
149
  // ---- C10: closing ONE period must not lock the next ----
  cg_ck(cnt, "C10 the NEXT period is still open" as *u8, coa_post_ok(cp, per2), 1)
152
  cg_puts("nx_coa_gate: pass=" as *u8); cg_putn(cnt[0])
  cg_puts(" fail=" as *u8); cg_putn(cnt[1]); cg_puts("\n" as *u8)
  if cnt[1] == 0 {
      cg_puts("F982 nx_coa: VERDICT=GREEN (sign per kind, data-driven side map, fail-closed on unknown, period lock)\n" as *u8)
      sys_exit(0)
      return 0
  }
  cg_puts("F982 nx_coa: VERDICT=RED\n" as *u8)
  sys_exit(1)
  return 1
163}
nx_coa_gate.nx source

`nx_coa_gate.nx` source
