nx_image_access_gate.nx source
↩ module page · 58 lines · 3529 B
1// nx_image_access_gate.nx -- referee for the search-by-image OPERATOR-ONLY access policy.
2// PROVES "only my access, not internet or others" as a deny-by-default / fail-closed decision matrix:
3// required level == OWNER (3)
4// level 0 (anonymous internet) -> DENY level 1 (family) -> DENY level 2 -> DENY
5// level -5 (garbage) -> DENY (fail-closed)
6// level 3 (OWNER / operator) -> ALLOW <-- the ONLY level that gets in
7// GREEN iff every below-OWNER level is denied AND owner is allowed (liar-kill: a single below-owner ALLOW
8// = a public LEAK = RED). Durable verdict -> knowledge/status/image_access_gate.log. license_tier: ORIGINAL
9import "nx_image_access.nx"
10
11func g_puts(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
12func g_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 }
13func g_w(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 }
14func g_wn(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 }
15
16func main() -> i64 {
17 g_puts("=== IMAGE ACCESS GATE (search-by-image = OPERATOR-ONLY realm, deny-by-default / fail-closed) ===\n" as *u8)
18 var pass: i64=0
19 var rows: i64=0
20
21 // required level must be OWNER (3)
22 rows=rows+1
23 let reqL: i64=nx_imgsearch_required_level()
24 g_puts(" required level = " as *u8); g_num(reqL)
25 if reqL==3 { pass=pass+1; g_puts(" PASS (OWNER)\n" as *u8) } else { g_puts(" FAIL\n" as *u8) }
26
27 // every level below OWNER must DENY (anonymous internet 0, family 1, 2)
28 var lvl: i64=0
29 while lvl<3 {
30 rows=rows+1
31 let d: i64=nx_imgsearch_access(lvl)
32 g_puts(" viewer level " as *u8); g_num(lvl); g_puts(" -> " as *u8)
33 if d==0 { pass=pass+1; g_puts("DENY PASS\n" as *u8) } else { g_puts("ALLOW FAIL (PUBLIC LEAK!)\n" as *u8) }
34 lvl=lvl+1
35 }
36
37 // negative/garbage level must DENY (fail-closed)
38 rows=rows+1
39 let dg: i64=nx_imgsearch_access(0-5)
40 g_puts(" viewer level -5 (junk) -> " as *u8)
41 if dg==0 { pass=pass+1; g_puts("DENY PASS (fail-closed)\n" as *u8) } else { g_puts("ALLOW FAIL\n" as *u8) }
42
43 // OWNER must ALLOW (the only level that gets in)
44 rows=rows+1
45 let a3: i64=nx_imgsearch_access(3)
46 g_puts(" viewer level 3 (OWNER) -> " as *u8)
47 if a3==1 { pass=pass+1; g_puts("ALLOW PASS (only my access)\n" as *u8) } else { g_puts("DENY FAIL\n" as *u8) }
48
49 g_puts("----\nIMAGE-ACCESS-GATE rows=" as *u8); g_num(rows); g_puts(" pass=" as *u8); g_num(pass); g_puts("\n" as *u8)
50 let lg: i64=sys_openat_append("knowledge/status/image_access_gate.log" as *u8, 0x1a4)
51 if lg>=0 {
52 g_w(lg, "IMAGE-ACCESS-GATE rows=" as *u8); g_wn(lg, rows); g_w(lg, " pass=" as *u8); g_wn(lg, pass)
53 if pass==rows { g_w(lg, " verdict=GREEN\n" as *u8) } else { g_w(lg, " verdict=RED\n" as *u8) }
54 sys_close(lg)
55 }
56 if pass==rows { g_puts("IMAGE-ACCESS-GATE GREEN\n" as *u8); sys_exit(0); return 0 }
57 g_puts("IMAGE-ACCESS-GATE RED\n" as *u8); sys_exit(1); return 1
58}