nx_docportal_exceed_census.nx source

1// nx_docportal_exceed_census.nx -- the MEASURED s-class-exceed scorecard for the per-domain document portal 2// (operator: "make sure it is s class exceed using nishi researcher"). It does NOT self-score: it reads the REAL 3// gate logs in knowledge/status/ + the banked researcher corpus, and credits each exceed dimension of the 4// standard (knowledge/research/2026-06-28-legaldocs-portal-exceed-standard.md) ONLY when a specific field of a 5// GREEN gate proves it (liar-kill: a dimension with no passing gate is reported ABSENT, never claimed). The 6// verdict is the conjunction of the measured cells. Append-only log: knowledge/status/docportal_exceed_census.log. 7// license_tier: ORIGINAL 8import "nx_syscalls.nx" 9 10func c_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 } 11func c_w(fd: i64, s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(fd, s, n); return 0 } 12func c_slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n } 13 14// read a whole file; returns ptr (0 if absent) + len via lenout[0] 15func c_read(path: *u8, lenout: *i64) -> *u8 { 16 let szp: *i64 = sys_mmap(16) as *i64 17 let buf: *u8 = sys_read_file(path, szp) 18 if (buf as i64) == 0 { lenout[0] = 0; return 0 as *u8 } 19 lenout[0] = szp[0] 20 return buf 21} 22func c_contains(hay: *u8, n: i64, ndl: *u8) -> i64 { 23 let nl: i64 = c_slen(ndl) 24 if nl == 0 { return 0 } 25 var i: i64 = 0 26 while i + nl <= n { var j: i64 = 0; var hit: i64 = 1; while j < nl { if hay[i + j] != ndl[j] { hit = 0; j = nl } else { j = j + 1 } } if hit == 1 { return 1 } i = i + 1 } 27 return 0 28} 29func c_have(path: *u8) -> i64 { let fd: i64 = sys_openat_rd(path); if fd < 0 { return 0 } sys_close(fd); return 1 } 30 31// one scorecard row: print "<verdict> <dim> (<why>)" and return 1 if measured-green 32func c_row(ok: i64, dim: *u8, why: *u8) -> i64 { 33 if ok == 1 { c_puts(" [EXCEED] " as *u8) } else { c_puts(" [ABSENT] " as *u8) } 34 c_puts(dim); c_puts(" <- " as *u8); c_puts(why); c_puts("\n" as *u8) 35 return ok 36} 37 38func main() -> i64 { 39 c_puts("=== DOCPORTAL S-CLASS-EXCEED CENSUS (measured from real gate logs + researcher corpus; no self-score) ===\n" as *u8) 40 41 let il: *i64 = sys_mmap(16) as *i64; let ibuf: *u8 = c_read("knowledge/status/docportal_ingest_gate.log" as *u8, il); let iN: i64 = il[0] 42 let sl: *i64 = sys_mmap(16) as *i64; let sbuf: *u8 = c_read("knowledge/status/docportal_search_gate.log" as *u8, sl); let sN: i64 = sl[0] 43 let al: *i64 = sys_mmap(16) as *i64; let abuf: *u8 = c_read("knowledge/status/docportal_admin_gate.log" as *u8, al); let aN: i64 = al[0] 44 let yl: *i64 = sys_mmap(16) as *i64; let ybuf: *u8 = c_read("knowledge/status/docportal_policy_gate.log" as *u8, yl); let yN: i64 = yl[0] 45 46 let ig: i64 = c_contains(ibuf, iN, "verdict=GREEN" as *u8) 47 let sg: i64 = c_contains(sbuf, sN, "verdict=GREEN" as *u8) 48 let ag: i64 = c_contains(abuf, aN, "verdict=GREEN" as *u8) 49 50 // researcher grounding: the legal-doc-management corpus was banked over sovereign TLS (public + private axes) 51 let res_pub: i64 = c_have("knowledge/library/ldm_client_portal.txt" as *u8) 52 let res_gov: i64 = c_have("knowledge/library/ldm_records_mgmt.txt" as *u8) 53 let res_dms: i64 = c_have("knowledge/library/ldm_dms.txt" as *u8) 54 var researched: i64 = 0 55 if res_pub == 1 { if res_gov == 1 { if res_dms == 1 { researched = 1 } } } 56 57 var n: i64 = 0 58 // D1 sovereignty: all three capability gates built+passed sovereign (nx_cc->nxasm, no gcc) = on-box, zero-dep 59 n = n + c_row(ig & sg & ag, "D1 sovereignty / data-residency (on-box, zero third-party dep)" as *u8, "all 3 portal gates GREEN, sovereign-built" as *u8) 60 // D2 immutability + never-delete + integrity 61 n = n + c_row(c_contains(ibuf, iN, "byte_exact=1" as *u8), "D2 immutability + never-delete + byte-exact integrity" as *u8, "ingest_gate byte_exact=1 (seg_store append-only)" as *u8) 62 // D3 public/private isolation -- proven on the store, through search, and at the admin boundary 63 let d3: i64 = c_contains(ibuf, iN, "private_isolated=1" as *u8) & c_contains(sbuf, sN, "retainer_found=0" as *u8) & c_contains(abuf, aN, "private_routed=1" as *u8) 64 n = n + c_row(d3, "D3 public/private isolation (by construction)" as *u8, "ingest private_isolated=1 + search retainer_found=0 + admin private_routed=1" as *u8) 65 // D4 onsite full-text search of uploaded docs 66 n = n + c_row(sg, "D4 onsite full-text search of uploads (real BM25 engine)" as *u8, "search_gate GREEN (public found, private hidden)" as *u8) 67 // D5 RBAC deny-by-default 68 n = n + c_row(c_contains(abuf, aN, "anon_denied=1" as *u8), "D5 access control (RBAC deny-by-default)" as *u8, "admin_gate anon_denied=1" as *u8) 69 // D6 per-domain multi-tenancy 70 let d6: i64 = c_contains(ibuf, iN, "cross_domain_isolated=1" as *u8) & c_contains(abuf, aN, "per_domain_iso=1" as *u8) 71 n = n + c_row(d6, "D6 per-domain multi-tenancy (cross-domain read impossible)" as *u8, "ingest cross_domain_isolated=1 + admin per_domain_iso=1" as *u8) 72 // D8 deterministic content id 73 n = n + c_row(c_contains(ibuf, iN, "cid_deterministic=1" as *u8), "D8 deterministic content id (integrity/dedup)" as *u8, "ingest_gate cid_deterministic=1" as *u8) 74 // D9 owner usage-policy governance (consent-gated AI-blog publish + amendable + search-flag controls indexing) 75 let d9: i64 = c_contains(ybuf, yN, "blog_consent_only=1" as *u8) & c_contains(ybuf, yN, "withdrawal_live_doc_preserved=1" as *u8) & c_contains(ybuf, yN, "search_flag_controls=1" as *u8) 76 n = n + c_row(d9, "D9 owner usage-policy governance (AI-blog consent-gated, amendable, search-flagged)" as *u8, "policy_gate blog_consent_only=1 + withdrawal_live_doc_preserved=1 + search_flag_controls=1" as *u8) 77 // researcher grounding 78 n = n + c_row(researched, "R researcher-grounded benchmark (public + private legal-doc practice)" as *u8, "ldm_client_portal/records_mgmt/dms banked over sovereign TLS" as *u8) 79 80 let total: i64 = 9 81 c_puts("----\n HONEST BEHIND (not claimed): PDF/DOCX text extraction not wired into ingest; retention-schedule\n" as *u8) 82 c_puts(" automation + e-discovery export not built; maturity/scale vs iManage/NetDocuments not proven.\n" as *u8) 83 c_puts("DOCPORTAL-EXCEED dimensions_measured=" as *u8) 84 let dd: *u8 = sys_mmap(8); var v: i64 = n; var k: i64 = 0; if v == 0 { dd[0] = 48 as u8; k = 1 } else { while v > 0 { dd[k] = (48 + (v % 10)) as u8; v = v / 10; k = k + 1 } } 85 var x: i64 = 0; let rev: *u8 = sys_mmap(8); while x < k { rev[x] = dd[k - 1 - x]; x = x + 1 } sys_write(1, rev, k) 86 c_puts("/9\n" as *u8) 87 88 let lg: i64 = sys_openat_append("knowledge/status/docportal_exceed_census.log" as *u8, 0x1a4) 89 if lg >= 0 { 90 c_w(lg, "DOCPORTAL-EXCEED ingest_green=" as *u8); if ig == 1 { c_w(lg, "1" as *u8) } else { c_w(lg, "0" as *u8) } 91 c_w(lg, " search_green=" as *u8); if sg == 1 { c_w(lg, "1" as *u8) } else { c_w(lg, "0" as *u8) } 92 c_w(lg, " admin_green=" as *u8); if ag == 1 { c_w(lg, "1" as *u8) } else { c_w(lg, "0" as *u8) } 93 c_w(lg, " researched=" as *u8); if researched == 1 { c_w(lg, "1" as *u8) } else { c_w(lg, "0" as *u8) } 94 c_w(lg, " dimensions_measured=" as *u8); sys_write(lg, rev, k); c_w(lg, "/9" as *u8) 95 if n == total { c_w(lg, " verdict=GREEN\n" as *u8) } else { c_w(lg, " verdict=RED\n" as *u8) } 96 sys_close(lg) 97 } 98 if n == total { c_puts("DOCPORTAL-EXCEED GREEN (9/9 dimensions measured against the researched benchmark)\n" as *u8); sys_exit(0); return 0 } 99 c_puts("DOCPORTAL-EXCEED RED (a dimension lacks a passing gate -- build it, do not claim it)\n" as *u8); sys_exit(1); return 1 100}