code wiki / _hdl_build / nx_hr_frontdesk_shell_gate.nx
`nx_hr_frontdesk_shell_gate.nx` source

1// nx_hr_frontdesk_shell_gate.nx -- referee for the Nishi-emitted behavioral front-end. PROVES the emitted snippet
2// carries the required elements (honeypot, interaction listeners, PoW solver via crypto.subtle, challenge fetch,
3// verify POST of the DERIVED signals) AND the PRIVACY properties: it does NOT read coordinates (no clientX) and
4// does NOT touch geolocation/IP. GREEN iff every row matches. Prints verdict=GREEN to STDOUT + returns exit code.
5// Durable -> knowledge/status/hr_frontdesk_shell_gate.log. license_tier: ORIGINAL
6import "nx_hr_frontdesk_shell.nx"
7import "nx_g_puts_lib.nx"
8import "nx_syscalls.nx"
9
10func g_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 }
11func g_w(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 }
12func g_wn(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 }
13func has(buf: *u8, n: i64, needle: *u8) -> i64 {
14    var nl: i64=0; while needle[nl]!=(0 as u8){nl=nl+1}; if nl<=0 { return 0 }
15    var i: i64=0; while i+nl<=n { var j: i64=0; var m: i64=1; while j<nl { if buf[i+j]!=needle[j] {m=0;j=nl} else {j=j+1} } if m==1 { return 1 } i=i+1 } return 0
16}
17func chk(got: i64, want: i64, label: *u8) -> i64 {
18    g_puts(" "); g_puts(label); g_puts(" got="); g_num(got); g_puts(" want="); g_num(want)
19    if got == want { g_puts("  PASS\n"); return 1 }
20    g_puts("  FAIL\n"); return 0
21}
22
23func main() -> i64 {
24    g_puts("=== NISHI HR FRONT-DESK SHELL GATE (privacy-preserving behavioral collector) ===\n" as *u8)
25    var pass: i64=0
26    var rows: i64=0
27    let buf: *u8 = sys_mmap(8192); let n: i64 = fd_emit(buf)
28
29    rows=rows+1; if n > 700 { pass=pass+1; g_puts(" emitted len>700 got="); g_num(n); g_puts("  PASS\n" as *u8) } else { g_puts(" emitted len>700 got="); g_num(n); g_puts("  FAIL\n" as *u8) }
30    rows=rows+1; pass=pass+chk(has(buf, n, "hp_website" as *u8), 1, "honeypot field present" as *u8)
31    rows=rows+1; pass=pass+chk(has(buf, n, "left:-9999px" as *u8), 1, "  -> honeypot hidden offscreen" as *u8)
32    rows=rows+1; pass=pass+chk(has(buf, n, "mousemove" as *u8), 1, "interaction listener (mousemove)" as *u8)
33    rows=rows+1; pass=pass+chk(has(buf, n, "crypto.subtle.digest" as *u8), 1, "PoW solver (SHA-256, matches nx_hr_pow)" as *u8)
34    rows=rows+1; pass=pass+chk(has(buf, n, "/hr/pow/challenge" as *u8), 1, "fetches the server PoW challenge" as *u8)
35    rows=rows+1; pass=pass+chk(has(buf, n, "/hr/verify" as *u8), 1, "posts to /hr/verify" as *u8)
36    rows=rows+1; pass=pass+chk(has(buf, n, "entropy:entropy()" as *u8), 1, "posts derived entropy score" as *u8)
37    rows=rows+1; pass=pass+chk(has(buf, n, "regularity:regularity()" as *u8), 1, "posts derived regularity score" as *u8)
38    rows=rows+1; pass=pass+chk(has(buf, n, "honeypot:hp" as *u8), 1, "posts honeypot flag" as *u8)
39    rows=rows+1; pass=pass+chk(has(buf, n, "solution:sol" as *u8), 1, "posts the PoW solution" as *u8)
40    // PRIVACY (by construction): no coordinates, no geolocation, no UA/IP sent.
41    rows=rows+1; pass=pass+chk(has(buf, n, "clientX" as *u8), 0, "PRIVACY: never reads coordinates (no clientX)" as *u8)
42    rows=rows+1; pass=pass+chk(has(buf, n, "geolocation" as *u8), 0, "PRIVACY: no geolocation" as *u8)
43    rows=rows+1; pass=pass+chk(has(buf, n, "userAgent" as *u8), 0, "PRIVACY: no userAgent collection" as *u8)
44
45    g_puts("----\nNISHI-HR-FRONTDESK-SHELL-GATE rows=" as *u8); g_num(rows); g_puts(" pass=" as *u8); g_num(pass)
46    if pass==rows { g_puts(" verdict=GREEN\n" as *u8) } else { g_puts(" verdict=RED\n" as *u8) }
47    let lg: i64=sys_openat_append("knowledge/status/hr_frontdesk_shell_gate.log" as *u8, 0x1a4)
48    if lg>=0 {
49        g_w(lg, "NISHI-HR-FRONTDESK-SHELL-GATE rows=" as *u8); g_wn(lg, rows); g_w(lg, " pass=" as *u8); g_wn(lg, pass)
50        if pass==rows { g_w(lg, " verdict=GREEN\n" as *u8) } else { g_w(lg, " verdict=RED\n" as *u8) }
51        sys_close(lg)
52    }
53    if pass==rows { sys_exit(0); return 0 }
54    sys_exit(1); return 1
55}
nx_hr_frontdesk_shell_gate.nx source

`nx_hr_frontdesk_shell_gate.nx` source
