nx_kanon_gate.nx source

1// nx_kanon_gate.nx -- GATE (runnable) proving the k-anonymity floor primitive (nx_kanon). The 2// foundation under ADS-018 + W-AN-CHARTER-002 / W-CLI-C6. K is read FROM THE SOVEREIGN STORE 3// (adcfg:kanon_k -- pure Nishi, no conf file). Controls are parametrized by the configured K, and 4// the load-bearing control proves the VIOLATION DETECTOR fires (anti-false-green): 5// 6// release: count==K and count>K and count==0 are releasable; count==K-1 and count==1 suppressed 7// apply : over [K, K-1, 0, K+5] exactly ONE cell (K-1) is suppressed; released set has 0 leaks 8// DETECT : a wrongly-"released" set containing K-1 makes kn_count_below FIRE (==1) -> proves the 9// checker catches a leak; stuck-at-0 would RED-fail this control. 10// 11// Evidence -> knowledge/status/kanon_gate.log (KANON authored=organ cells_below_k=0 ... verdict=GREEN). 12// license_tier: ORIGINAL 13import "nx_ad_store.nx" 14import "nx_kanon.nx" 15import "nx_syscalls.nx" 16 17const KG_LOG: *u8 = "knowledge/status/kanon_gate.log" 18 19func kg_w(fd: i64, s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(fd, s, n); return 0 } 20func kg_wn(fd: i64, v: i64) -> i64 { let bb: *u8 = sys_mmap(28); var m: i64=v; if m<0 {m=0-m; sys_write(fd,"-" as *u8,1)}; let t: *u8 = sys_mmap(28); var k: i64=0; if m==0 {t[0]=48;k=1}; while m>0 {t[k]=(48+(m%10)) as u8; m=m/10; k=k+1}; var i: i64=0; while i<k {bb[i]=t[k-1-i]; i=i+1}; sys_write(fd, bb, k); return 0 } 21 22func kg_emit(fd: i64, k: i64, sup: i64, below: i64, fired: i64, ok: i64) -> i64 { 23 kg_w(fd, "KANON authored=organ source=store k=" as *u8); kg_wn(fd, k) 24 kg_w(fd, " apply_suppressed=" as *u8); kg_wn(fd, sup) 25 kg_w(fd, " cells_below_k=" as *u8); kg_wn(fd, below) 26 kg_w(fd, " detector_fired=" as *u8); kg_wn(fd, fired) 27 if ok == 1 { kg_w(fd, " verdict=GREEN\n" as *u8) } else { kg_w(fd, " verdict=RED\n" as *u8) } 28 return 0 29} 30 31func main() -> i64 { 32 let k: i64 = ads_kanon_k() 33 34 let r_at: i64 = kn_release(k, k) 35 let r_above: i64 = kn_release(k + 5, k) 36 let r_zero: i64 = kn_release(0, k) 37 let s_below: i64 = kn_release(k - 1, k) 38 let s_one: i64 = kn_release(1, k) 39 40 let raw: *i64 = sys_mmap(64) as *i64 41 let out: *i64 = sys_mmap(64) as *i64 42 raw[0] = k; raw[1] = k - 1; raw[2] = 0; raw[3] = k + 5 43 let sup: i64 = kn_apply(raw, 4, k, out) 44 let below: i64 = kn_count_below(out, 4, k) 45 46 let leak: *i64 = sys_mmap(32) as *i64 47 leak[0] = k + 1; leak[1] = k - 1 48 let fired: i64 = kn_count_below(leak, 2, k) 49 50 var ok: i64 = 1 51 if k < 2 { ok = 0 } 52 if r_at != 1 { ok = 0 } 53 if r_above != 1 { ok = 0 } 54 if r_zero != 1 { ok = 0 } 55 if s_below != 0 { ok = 0 } 56 if s_one != 0 { ok = 0 } 57 if sup != 1 { ok = 0 } 58 if below != 0 { ok = 0 } 59 if fired != 1 { ok = 0 } 60 61 kg_emit(1, k, sup, below, fired, ok) 62 let lf: i64 = sys_openat_append(KG_LOG, 420) 63 if lf >= 0 { kg_emit(lf, k, sup, below, fired, ok); sys_close(lf) } 64 65 if ok == 1 { return 0 } 66 return 1 67}