nx_gated_edit_gate.nx source

1// nx_gated_edit_gate.nx -- GATE for nx_gated_edit (gated source-edit applier). 5 teeth incl 1 neg-control 2// (never-live-edit) + restore-verify. PREREQ (staged by build): ./nx_gated_edit.elf + ./nx_ge_mockcat.elf. 3// mock verify = cat(argv1): CONSOLIDATED when verify targets a file the edit doesn't touch; REFUSED when it 4// targets the edited file itself (output changes -> restore). Run from nxc2. Verdict exit 0 iff 5/5. 5// license_tier: ORIGINAL No hw writes (Rule 26). 6import "nx_seat_drive_lib.nx" 7import "nx_seg_store.nx" 8import "nx_deploy_lib.nx" 9import "nx_syscalls.nx" 10import "nx_ag_lib.nx" 11 12// ag_atoi/ag_itoa/ag_len/ag_read now shared via nx_ag_lib.nx (rule-15 extraction, behaviour-preserving) 13 14func gg_run(src: *u8, oldf: *u8, newf: *u8, velf: *u8, varg: *u8, outp: *u8) -> i64 { 15 let av: *i64 = sys_mmap(64) as *i64 16 av[0] = src as i64 17 av[1] = oldf as i64 18 av[2] = newf as i64 19 av[3] = velf as i64 20 av[4] = varg as i64 21 return dep_run_capture("./nx_gated_edit.elf" as *u8, av, 5, outp) 22} 23 24func main(argc: i64, argv: *i64) -> i64 { 25 var stage: i64 = 1 26 var pass: i64 = 0 27 if argc >= 2 { let ss1: *u8 = argv[1] as *u8; stage = ag_atoi(ss1) } 28 if argc >= 3 { let ps: *u8 = argv[2] as *u8; pass = ag_atoi(ps) } 29 if stage < 1 { stage = 1 } 30 31 ss_writefile("/tmp/ge_old" as *u8, "AAA" as *u8, ag_len("AAA" as *u8)) 32 ss_writefile("/tmp/ge_new" as *u8, "BBB" as *u8, ag_len("BBB" as *u8)) 33 ss_writefile("/tmp/ge_fixed" as *u8, "constant\n" as *u8, ag_len("constant\n" as *u8)) 34 35 if stage == 1 { 36 ss_writefile("/tmp/ge_src1" as *u8, "hello AAA world\n" as *u8, ag_len("hello AAA world\n" as *u8)) 37 let rc: i64 = gg_run("/tmp/ge_src1" as *u8, "/tmp/ge_old" as *u8, "/tmp/ge_new" as *u8, "./nx_ge_mockcat.elf" as *u8, "/tmp/ge_fixed" as *u8, "/tmp/gg_t1.out" as *u8) 38 let sb: *u8 = sys_mmap(4096) 39 let m: i64 = ag_read("/tmp/ge_src1" as *u8, sb, 4096) 40 var ok: i64 = 0 41 if rc == 0 { if sd_count(sb, m, "BBB" as *u8) == 1 { if sd_count(sb, m, "AAA" as *u8) == 0 { ok = 1 } } } 42 if ok == 1 { sd_w("T1 consolidated-applied PASS\n" as *u8); pass = pass + 1 } else { sd_w("T1 consolidated-applied FAIL\n" as *u8) } 43 } 44 if stage == 2 { 45 ss_writefile("/tmp/ge_src2" as *u8, "hello AAA world\n" as *u8, ag_len("hello AAA world\n" as *u8)) 46 let rc: i64 = gg_run("/tmp/ge_src2" as *u8, "/tmp/ge_old" as *u8, "/tmp/ge_new" as *u8, "./nx_ge_mockcat.elf" as *u8, "/tmp/ge_src2" as *u8, "/tmp/gg_t2.out" as *u8) 47 let ob: *u8 = sys_mmap(4096) 48 let n: i64 = dp_read("/tmp/gg_t2.out" as *u8, ob, 4096) 49 let sb: *u8 = sys_mmap(4096) 50 let m: i64 = ag_read("/tmp/ge_src2" as *u8, sb, 4096) 51 var ok: i64 = 0 52 if rc == 1 { if sd_count(ob, n, "verdict=REFUSED" as *u8) == 1 { if sd_count(sb, m, "AAA" as *u8) == 1 { if sd_count(sb, m, "BBB" as *u8) == 0 { ok = 1 } } } } 53 if ok == 1 { sd_w("T2 neg-live-edit-refused PASS\n" as *u8); pass = pass + 1 } else { sd_w("T2 neg-live-edit-refused FAIL\n" as *u8) } 54 } 55 if stage == 3 { 56 let sb: *u8 = sys_mmap(4096) 57 let m: i64 = ag_read("/tmp/ge_src2" as *u8, sb, 4096) 58 let orig: *u8 = "hello AAA world\n" as *u8 59 var ok: i64 = 0 60 if m == ag_len(orig) { 61 var same: i64 = 1 62 var i: i64 = 0 63 while i < m { if sb[i] != orig[i] { same = 0; i = m } else { i = i + 1 } } 64 if same == 1 { ok = 1 } 65 } 66 if ok == 1 { sd_w("T3 restore-byte-exact PASS\n" as *u8); pass = pass + 1 } else { sd_w("T3 restore-byte-exact FAIL\n" as *u8) } 67 } 68 if stage == 4 { 69 ss_writefile("/tmp/ge_src4" as *u8, "hello world\n" as *u8, ag_len("hello world\n" as *u8)) 70 ss_writefile("/tmp/ge_old4" as *u8, "ZZZ" as *u8, ag_len("ZZZ" as *u8)) 71 let rc: i64 = gg_run("/tmp/ge_src4" as *u8, "/tmp/ge_old4" as *u8, "/tmp/ge_new" as *u8, "./nx_ge_mockcat.elf" as *u8, "/tmp/ge_fixed" as *u8, "/tmp/gg_t4.out" as *u8) 72 let sb: *u8 = sys_mmap(4096) 73 let m: i64 = ag_read("/tmp/ge_src4" as *u8, sb, 4096) 74 var ok: i64 = 0 75 if rc == 2 { if sd_count(sb, m, "hello world" as *u8) == 1 { ok = 1 } } 76 if ok == 1 { sd_w("T4 nomatch-untouched PASS\n" as *u8); pass = pass + 1 } else { sd_w("T4 nomatch-untouched FAIL\n" as *u8) } 77 } 78 if stage == 5 { 79 ss_writefile("/tmp/ge_src5" as *u8, "AAA and AAA\n" as *u8, ag_len("AAA and AAA\n" as *u8)) 80 let rc: i64 = gg_run("/tmp/ge_src5" as *u8, "/tmp/ge_old" as *u8, "/tmp/ge_new" as *u8, "./nx_ge_mockcat.elf" as *u8, "/tmp/ge_fixed" as *u8, "/tmp/gg_t5.out" as *u8) 81 let sb: *u8 = sys_mmap(4096) 82 let m: i64 = ag_read("/tmp/ge_src5" as *u8, sb, 4096) 83 var ok: i64 = 0 84 if rc == 2 { if sd_count(sb, m, "BBB" as *u8) == 0 { if sd_count(sb, m, "AAA" as *u8) == 2 { ok = 1 } } } 85 if ok == 1 { sd_w("T5 ambiguous-untouched PASS\n" as *u8); pass = pass + 1 } else { sd_w("T5 ambiguous-untouched FAIL\n" as *u8) } 86 } 87 88 if stage >= 5 { 89 sd_w("NX-GATED-EDIT-GATE pass=" as *u8) 90 let pb: *u8 = sys_mmap(8) 91 pb[0] = (48 + pass) as u8 92 pb[1] = 0 as u8 93 sd_w(pb) 94 if pass == 5 { sd_w("/5 verdict=GREEN\n" as *u8); sys_exit(0); return 0 } 95 sd_w("/5 verdict=RED\n" as *u8) 96 sys_exit(1) 97 return 1 98 } 99 100 let self: *u8 = argv[0] as *u8 101 let sb2: *u8 = sys_mmap(24) 102 ag_itoa(sb2, stage + 1) 103 let pb2: *u8 = sys_mmap(24) 104 ag_itoa(pb2, pass) 105 let nav: *i64 = sys_mmap(40) as *i64 106 nav[0] = self as i64 107 nav[1] = sb2 as i64 108 nav[2] = pb2 as i64 109 nav[3] = 0 110 let envp: *i64 = sys_mmap(16) as *i64 111 envp[0] = 0 112 sys_execve(self, nav, envp) 113 sd_w("GG-EXEC-FAIL\n" as *u8) 114 sys_exit(1) 115 return 1 116}