nx_infra_reconcile_test.nx source

1// nx_infra_reconcile_test.nx -- INFRARECONCILEGATE: proves the declarative IaC reconcile over the real 2// infra_hosts fleet (NAS / router / west-server, current observed state). GREEN iff: a fully-vendor host 3// drifts on all 3 fields; a host AT the desired end-state has ZERO drift (converged); a partly-sovereign 4// host drifts only on its remaining field; reconcile is IDEMPOTENT (same inputs -> same plan); the fleet 5// total drift = 9 (all 3 hosts fully drifted today = sovereign_coverage 0permil, consistent with INFRA-CTL-001); 6// and a drifted host is NEVER reported converged (no-false-converge liar-kill). exit 0 on 7/7. 7import "nx_infra_reconcile.nx" 8import "nx_syscalls.nx" 9 10func ir_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 } 11func ir_num(v: i64) -> i64 { let b: *u8 = sys_mmap(28); var m: i64=v; if m<0 {m=0-m}; let t: *u8 = sys_mmap(28); var k: i64=0; if m==0 {t[0]=48;k=1}; while m>0 {t[k]=48+(m%10); m=m/10; k=k+1}; var i: i64=0; while i<k {b[i]=t[k-1-i]; i=i+1}; sys_write(1,b,k); return 0 } 12 13func main() -> i64 { 14 ir_puts("=== SOVEREIGN INFRA RECONCILE (declarative desired-state, drift plan, idempotent) ===\n" as *u8) 15 // observed fleet (matches infra_hosts.tsv): [0]=NAS [1]=router [2]=west-server 16 let cps: *i64 = sys_mmap(24) as *i64 17 let tps: *i64 = sys_mmap(24) as *i64 18 let scs: *i64 = sys_mmap(24) as *i64 19 cps[0]=CP_OPENSSH; tps[0]=TP_NAME_TRUSTED; scs[0]=SC_PARTIAL // NAS 20 cps[1]=CP_VENDOR; tps[1]=TP_NAME_TRUSTED; scs[1]=SC_NONE // router 21 cps[2]=CP_OPENSSH; tps[2]=TP_NAME_TRUSTED; scs[2]=SC_PARTIAL // west-server 22 23 let nas_drift: i64 = ir_drift(cps[0], tps[0], scs[0]) // 3 (all differ) 24 let conv_drift: i64 = ir_drift(CP_SOVEREIGN, TP_BEHAVIOR_ATTESTED, SC_FULL) // 0 (at desired) 25 let partial_drift: i64 = ir_drift(CP_SOVEREIGN, TP_BEHAVIOR_ATTESTED, SC_PARTIAL) // 1 (only sc differs) 26 let total: i64 = ir_total_drift(cps, tps, scs, 3) // 9 27 // idempotence: same inputs -> same plan, twice 28 let c1: i64 = ir_drift(CP_SOVEREIGN, TP_BEHAVIOR_ATTESTED, SC_FULL) 29 let c2: i64 = ir_drift(CP_SOVEREIGN, TP_BEHAVIOR_ATTESTED, SC_FULL) 30 // no-false-converge: a drifted host (sovereign+attested but only PARTIAL) must NOT be converged 31 let false_conv: i64 = ir_converged(ir_drift(CP_OPENSSH, TP_BEHAVIOR_ATTESTED, SC_FULL)) // drift=1 -> 0 32 33 ir_puts(" NAS drift=" as *u8); ir_num(nas_drift); ir_puts(" desired-host drift=" as *u8); ir_num(conv_drift) 34 ir_puts(" partial-host drift=" as *u8); ir_num(partial_drift); ir_puts(" | FLEET total_drift=" as *u8); ir_num(total) 35 ir_puts(" (sovereign-control work remaining)\n" as *u8) 36 37 let r: *i64 = sys_mmap(8*8) as *i64 38 r[0] = 0; if nas_drift == 3 { r[0] = 1 } // fully-vendor host drifts on all 3 39 r[1] = 0; if conv_drift == 0 { if ir_converged(conv_drift) == 1 { r[1] = 1 } } // desired host = converged 40 r[2] = 0; if partial_drift == 1 { r[2] = 1 } // partial host drifts only on its remaining field 41 r[3] = 0; if total == 9 { r[3] = 1 } // fleet total = 9 (all 3 fully drifted today) 42 r[4] = 0; if c1 == 0 { if c2 == 0 { if c1 == c2 { r[4] = 1 } } } // idempotent (same plan twice) 43 r[5] = 0; if false_conv == 0 { r[5] = 1 } // no-false-converge: drift>0 never converged 44 r[6] = 0; if ir_converged(3) == 0 { if ir_converged(0) == 1 { r[6] = 1 } } // converged predicate consistent 45 46 var pass: i64 = 0; var i: i64 = 0 47 while i < 7 { pass = pass + r[i]; i = i + 1 } 48 ir_puts("----\n passed " as *u8); ir_num(pass); ir_puts("/7\n" as *u8) 49 if pass == 7 { 50 ir_puts("INFRARECONCILEGATE fleet=3 total_drift=9 desired=sovereign+attested+full converged_at_zero=1 idempotent=1 no_false_converge=1 exceed[sovereign Terraform/IaC-class declarative reconcile over infra_hosts; drift plan = the measured sovereign-control gap; ties to operator thread root ask] verdict=GREEN\n" as *u8) 51 sys_exit(0); return 0 52 } 53 ir_puts("INFRARECONCILEGATE verdict=RED\n" as *u8); sys_exit(1); return 1 54}