nx_dr_restore_verify.nx source

1// nx_dr_restore_verify.nx -- CAP-DR-RESTORE-VERIFY (sovereign-format): PROVE the archive is restorable + intact by 2// re-hashing each archived file against the SOVEREIGN receipt (nx_seg_store .docs/.keys -- NOT TSV). Walks the archive 3// dir (getdents), and for each file looks up its receipted sha256 via ss_get (binary-search .keys), re-hashes the file, 4// compares. Meta files (receipt.docs/.keys/manifest) are not receipt keys -> skipped. Detects bit-rot / tamper that a 5// naive copy never would. argv: [1]=archive-dir. GREEN iff every receipted file re-hashes to its recorded digest. 6// license_tier: ORIGINAL 7import "nx_syscalls.nx" 8import "nx_sha256.nx" 9import "nx_seg_store.nx" 10const RV_MAGIC_1536: i64 = 1536 11const RV_MAGIC_131072: i64 = 131072 12 13const RV_CAP: i64 = 67108864 14 15func rv_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } 16func rv_wn(v: i64) -> i64 { var t: i64=v; if t<0{sys_write(1,"-" as *u8,1);t=0-t} let tm:*u8=sys_mmap(24); var k:i64=0; if t==0{tm[0]=48 as u8;k=1} while t>0{tm[k]=(48+(t%10)) as u8;t=t/10;k=k+1} let b:*u8=sys_mmap(24); var j:i64=0; while j<k{b[j]=tm[k-1-j];j=j+1} sys_write(1,b,k); return 0 } 17func rv_read(path: *u8, out: *u8, cap: i64) -> i64 { 18 let fd: i64 = sys_openat_rd(path); if fd < 0 { return 0 - 1 } 19 var total: i64 = 0; var go: i64 = 1 20 while go == 1 { let nr: i64 = sys_read(fd, (out as i64 + total) as *u8, cap - total); if nr <= 0 { go = 0 } if nr > 0 { total = total + nr } if total >= cap { go = 0 } } 21 sys_close(fd); return total 22} 23func rv_join(out: *u8, dir: *u8, name: *u8) -> i64 { var o: i64=0; var i: i64=0; while dir[i]!=(0 as u8){out[o]=dir[i];o=o+1;i=i+1} out[o]=47 as u8; o=o+1; i=0; while name[i]!=(0 as u8){out[o]=name[i];o=o+1;i=i+1} out[o]=0 as u8; return o } 24func rv_isdotdot(nm: *u8) -> i64 { if nm[0]==(46 as u8) { if nm[1]==(0 as u8) { return 1 } if nm[1]==(46 as u8) { if nm[2]==(0 as u8) { return 1 } } } return 0 } 25// re-hash file at `path`; compare to expected 64-hex at exp[0..64]. 1 OK, 0 CORRUPT, -1 unreadable. 26func rv_check(path: *u8, exp: *u8, fbuf: *u8, cap: i64) -> i64 { 27 let n: i64 = rv_read(path, fbuf, cap); if n < 0 { return 0 - 1 } 28 let dig: *u8 = sys_mmap(64); sha256_digest(fbuf, n, dig) 29 let hx: *u8 = "0123456789abcdef" as *u8; let hexb: *u8 = sys_mmap(80) 30 var h: i64=0; while h<32 { let by: i64=(dig[h] as i64)&0xff; hexb[h*2]=hx[(by>>4)&15]; hexb[h*2+1]=hx[by&15]; h=h+1 } 31 var i: i64=0; while i<64 { if hexb[i]!=exp[i] { return 0 } i=i+1 } 32 return 1 33} 34 35func main(argc: i64, argv: *i64) -> i64 { 36 if argc < 2 { rv_w("usage: nx_dr_restore_verify <archive-dir>\n" as *u8); sys_exit(2); return 2 } 37 let adir: *u8 = argv[1] as *u8 38 rv_w("=== nx_dr_restore_verify: scrub archive vs SOVEREIGN receipt (nx_seg_store .docs/.keys, no TSV) ===\n" as *u8) 39 rv_w(" archive dir: " as *u8); rv_w(adir); rv_w("\n" as *u8) 40 let rprefix: *u8 = sys_mmap(RV_MAGIC_1536); rv_join(rprefix, adir, "receipt" as *u8) 41 42 let fd: i64 = sys_openat_rd(adir); if fd < 0 { rv_w(" FATAL: cannot open archive dir\n" as *u8); sys_exit(3); return 3 } 43 let dbuf: *u8 = sys_mmap(RV_MAGIC_131072) 44 let fbuf: *u8 = sys_mmap(RV_CAP); let path: *u8 = sys_mmap(RV_MAGIC_1536) 45 let pq: *i64 = sys_mmap(16) as *i64; let lq: *i64 = sys_mmap(16) as *i64 46 var ok: i64=0; var corrupt: i64=0; var missing: i64=0 47 var go: i64 = 1 48 while go == 1 { 49 let nr: i64 = sys_getdents64(fd, dbuf, RV_MAGIC_131072) 50 if nr <= 0 { go = 0 } else { 51 var off: i64 = 0 52 while off < nr { 53 let rec: *u8 = (dbuf as i64 + off) as *u8 54 let nm: *u8 = dirent_name(rec) 55 if rv_isdotdot(nm) == 0 { 56 let r: i64 = ss_get(rprefix, nm, pq, lq) 57 if r == 1 { // a receipted data file 58 let exp: *u8 = pq[0] as *u8 59 rv_join(path, adir, nm) 60 let c: i64 = rv_check(path, exp, fbuf, RV_CAP) 61 if c == 1 { ok=ok+1; rv_w(" OK " as *u8); rv_w(nm); rv_w("\n" as *u8) } 62 else { if c == 0 { corrupt=corrupt+1; rv_w(" CORRUPT " as *u8); rv_w(nm); rv_w(" (re-hash != receipt!)\n" as *u8) } 63 else { missing=missing+1; rv_w(" MISSING " as *u8); rv_w(nm); rv_w("\n" as *u8) } } 64 } 65 } 66 off = off + dirent_reclen(rec) 67 } 68 } 69 } 70 sys_close(fd) 71 rv_w(" ---- verified=" as *u8); rv_wn(ok); rv_w(" corrupt=" as *u8); rv_wn(corrupt); rv_w(" missing=" as *u8); rv_wn(missing); rv_w("\n" as *u8) 72 if corrupt == 0 { if missing == 0 { if ok > 0 { rv_w("=== RESTORE-VERIFY OK (every receipted file re-hashes exactly -- sovereign receipt, restorable) ===\n" as *u8); sys_exit(0); return 0 } } } 73 rv_w("=== RESTORE-VERIFY FAILED (corruption/loss detected, or empty receipt) ===\n" as *u8); sys_exit(1); return 1 74}