nx_craft_private_water_fit_t31.nx source
↩ module page · 96 lines · 5776 B
1// ORIGINAL. Private generated-page observation; never calls either publishing main.
2import "nx_craft_support_emit_t31.nx"
3import "nx_estate_path.nx"
4import "nx_readcap_lib.nx"
5import "nx_wasm_memory_lib.nx"
6import "nx_gate_verdict.nx"
7const PFG_CANARY: i64 = 173 // Test poison, not a product threshold.
8func pfg_private(path: *u8) -> i64 {
9 let prefix: *u8 = "/tmp/" as *u8
10 var i: i64 = 0
11 while i<5 { if path[i]!=prefix[i] { return 0 };i=i+1 }
12 if path[i]==(0 as u8) { return 0 }
13 while path[i]!=(0 as u8) {
14 if path[i]==(47 as u8) { return 0 }
15 if path[i]==(46 as u8) { if path[i+1]==(46 as u8) { return 0 } }
16 i=i+1
17 }
18 return 1
19}
20func pfg_read(path: *u8,out: *u8,state: *i64) -> i64 {
21 let fd: i64=sys_openat_rd(path)
22 if fd<0 { return 0-1 }
23 let n: i64=rc_fill_file(fd,out,GPE_WASM_CAP,state)
24 let closed: i64=sys_close(fd)
25 if rc_complete(state)!=1||closed!=0 { return 0-1 }
26 return n
27}
28func main(argc: i64,argv: *i64) -> i64 {
29 if argc!=7 { gv_puts("usage: private-page-fit <plain.wasm> <shared.wasm-or-dash> <recipe-key> </tmp/new-basename.html> <plain-sha256> <shared-sha256-or-dash>\n" as *u8);return 3 }
30 if pfg_private(argv[4] as *u8)!=1 { return 3 }
31 if ep_anchor()<0 { return 3 }
32 let ctr: *i64=gv_ctr();gv_head("PRIVATE-GENERATED-PAGE-FIT" as *u8)
33 let selected: i64=gsb_select("6a63a26f84a4ba353da798e121a1690a89bf4cac3e59f1dd9e7babe948f33139" as *u8,1250264)
34 gv_check("declared staged shader producer selected" as *u8,selected==1,ctr)
35 if selected!=1 { return 3 }
36 gv_puts("shader_backend_sha256=6a63a26f84a4ba353da798e121a1690a89bf4cac3e59f1dd9e7babe948f33139 shader_backend_bytes=1250264 shader_scope=water-and-continuous-surface-shading source_closure=unattested\n" as *u8)
37 let wasm: *u8=sys_mmap(GPE_WASM_CAP)
38 let state: *i64=sys_mmap(3*__size_of(i64)) as *i64
39 let digest: *u8=sys_mmap(GPA_SHA_HEX+1)
40 let limits: *i64=sys_mmap(WM_FIELDS*__size_of(i64)) as *i64
41 let recipes: *i64=sys_mmap(GPR_MAXW*8*8) as *i64
42 let controls: *u8=sys_mmap(CE_EV_CAP)
43 // The second full output-capacity span observes contiguous overruns in this isolated gate.
44 // It is not a general capacity fix for production gpe_ap.
45 let out: *u8=sys_mmap(GPE_OUT_CAP+GPE_OUT_CAP)
46 if (wasm as i64)<=0||(state as i64)<=0||(digest as i64)<=0||(limits as i64)<=0||(recipes as i64)<=0||(controls as i64)<=0||(out as i64)<=0 { return 3 }
47 let wn: i64=pfg_read(argv[1] as *u8,wasm,state)
48 gv_check("whole plain artifact read" as *u8,wn>WM_HEADER,ctr)
49 if wn<=WM_HEADER { return 3 }
50 gpa_sha(wasm,wn,digest)
51 gv_check("plain identity equals requested SHA256" as *u8,fsx_seq(digest,argv[5] as *u8)==1,ctr)
52 if fsx_seq(digest,argv[5] as *u8)!=1 { return 3 }
53 gpe_mt_pages=0;gpe_mt_max=0
54 if fsx_seq(argv[2] as *u8,"-" as *u8)!=1 {
55 let twin: *u8=sys_mmap(GPE_WASM_CAP)
56 if (twin as i64)<=0 { return 3 }
57 let tn: i64=pfg_read(argv[2] as *u8,twin,state)
58 if tn<=WM_HEADER { return 3 }
59 gpa_sha(twin,tn,digest)
60 gv_check("shared identity equals requested SHA256" as *u8,fsx_seq(digest,argv[6] as *u8)==1,ctr)
61 if fsx_seq(digest,argv[6] as *u8)!=1 { return 3 }
62 let mr: i64=wmem_read(twin,tn,limits)
63 gv_check("actual shared descriptor admitted" as *u8,mr==0&&limits[2]==1&&limits[3]==1&&limits[0]>0&&limits[1]>=limits[0],ctr)
64 if mr!=0||limits[2]!=1||limits[3]!=1||limits[0]<1||limits[1]<limits[0] { return 3 }
65 gpe_mt_pages=limits[0];gpe_mt_max=limits[1]
66 sys_munmap(twin,GPE_WASM_CAP)
67 }
68 let nr: i64=gpe_recipes_load("knowledge/world_recipes.conf" as *u8,recipes)
69 if nr<1 { return 3 }
70 var row: i64=0-1;var i: i64=0;var matches: i64=0
71 while i<nr { if fsx_seq(recipes[i*8] as *u8,argv[3] as *u8)==1 { row=i*8;matches=matches+1 };i=i+1 }
72 gv_check("one actual recipe selected" as *u8,matches==1,ctr)
73 if matches!=1 { return 3 }
74 ce_evidence(recipes[row+5] as *u8,controls)
75 i=GPE_OUT_CAP
76 while i<GPE_OUT_CAP+GPE_OUT_CAP { out[i]=PFG_CANARY as u8;i=i+1 }
77 let n: i64=gpe_build_s(wasm,wn,ce_stamp(recipes[row+4] as *u8),CE_NATIVE,controls,recipes[row+1],recipes[row+2],recipes[row+6] as *u8,out)
78 var intact: i64=1;i=GPE_OUT_CAP
79 while i<GPE_OUT_CAP+GPE_OUT_CAP { if out[i]!=(PFG_CANARY as u8) { intact=0 };i=i+1 }
80 gv_check("full adjacent capacity span unchanged" as *u8,intact==1,ctr)
81 gv_check("actual returned page length fits production allocation" as *u8,n>0&&n<=GPE_OUT_CAP,ctr)
82 gv_check("shader capture owner reports success" as *u8,gsb_failed==0,ctr)
83 gv_values_head();gv_kv("page_bytes" as *u8,n);gv_kv("output_capacity" as *u8,GPE_OUT_CAP);gv_kv("headroom_bytes" as *u8,GPE_OUT_CAP-n)
84 gv_kv("twin_minimum_pages" as *u8,gpe_mt_pages);gv_kv("twin_maximum_pages" as *u8,gpe_mt_max)
85 if intact!=1||n<=0||n>GPE_OUT_CAP||gsb_failed!=0 { return gv_verdict("PRIVATE-PAGE-FIT" as *u8,ctr,"private output refused" as *u8) }
86 gpa_sha(out,n,digest);gv_puts("page_sha256=" as *u8);gv_puts(digest);gv_puts("\n" as *u8)
87 let wrote: i64=fxc_create(argv[4] as *u8,out,n)
88 gv_check("private output exclusively created" as *u8,wrote==n,ctr)
89 if wrote==n {
90 let box: *i64=sys_mmap(__size_of(i64)) as *i64
91 if (box as i64)<=0 { return 3 }
92 let actual: *u8=sys_read_file(argv[4] as *u8,box)
93 gv_check("private output readback equals generated bytes" as *u8,(actual as i64)>0&&gpa_same(out,n,actual,box[0])==1,ctr)
94 }
95 return gv_verdict("PRIVATE-PAGE-FIT" as *u8,ctr,"private fixture only; transfer actual bytes for JS syntax; browser and visual acceptance still open" as *u8)
96}