nx_meta_consumers.nx source

1// nx_meta_consumers.nx -- X-CAP-006 (META-consumers-uniform). The four downstream apps -- 2// companion(elder-ai) / apparel-store / writer-ingest / media-mining -- consume a captured-being 3// record THROUGH THE SAME meta-layer shape: each receives the same wire bytes, parses via the 4// SHARED ms_parse, and reads via the SHARED ms_get (nx_meta_schema, X-CAP-001). No per-consumer 5// parser, no parallel substrate -- the modality-agnostic record is the ONE interface (rule 15 DRY). 6// "Uniform shape" PROVEN: the four consumers' CORE identity views (modality|cid|consent|license) 7// are byte-identical; each still PROJECTS its own modality attr through the same accessor. A rogue 8// reader using a DIFFERENT field shape DIVERGES (negative control = the test discriminates), and the 9// consent hard line (X-CAP-005, anti-deepfake) is enforced UNIFORMLY at every consumer. Built 10// sovereignly (nx_cc->nxasm_x86, no gcc). license_tier: ORIGINAL 11import "nx_syscalls.nx" 12import "nx_meta_schema.nx" 13const K_MAGIC_16384: i64 = 16384 14 15func mc_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 } 16func mc_putn(v: i64) -> i64 { let bb: *u8 = sys_mmap(28); var m: i64=v; if m<0 {m=0-m}; let t: *u8 = sys_mmap(28); var k: i64=0; if m==0 {t[0]=48;k=1}; while m>0 {t[k]=48+(m%10); m=m/10; k=k+1}; var i: i64=0; while i<k {bb[i]=t[k-1-i]; i=i+1}; sys_write(1, bb, k); return 0 } 17 18// CORE identity view = the shared shape every consumer must agree on, built via the SHARED ms_get. 19func mc_core_view(keys: *i64, vals: *i64, n: i64, out: *u8) -> i64 { 20 var o: i64 = 0 21 o = ms_app(out, o, (ms_get(keys, vals, n, "modality" as *u8)) as *u8) 22 out[o] = 124 as u8; o = o + 1 23 o = ms_app(out, o, (ms_get(keys, vals, n, "cid" as *u8)) as *u8) 24 out[o] = 124 as u8; o = o + 1 25 o = ms_app(out, o, (ms_get(keys, vals, n, "consent" as *u8)) as *u8) 26 out[o] = 124 as u8; o = o + 1 27 o = ms_app(out, o, (ms_get(keys, vals, n, "license" as *u8)) as *u8) 28 out[o] = 0 as u8 29 return o 30} 31 32// NON-uniform reader: same fields, DIFFERENT shape (cid before modality) -> view must DIVERGE. 33func mc_rogue_view(keys: *i64, vals: *i64, n: i64, out: *u8) -> i64 { 34 var o: i64 = 0 35 o = ms_app(out, o, (ms_get(keys, vals, n, "cid" as *u8)) as *u8) 36 out[o] = 124 as u8; o = o + 1 37 o = ms_app(out, o, (ms_get(keys, vals, n, "modality" as *u8)) as *u8) 38 out[o] = 124 as u8; o = o + 1 39 o = ms_app(out, o, (ms_get(keys, vals, n, "consent" as *u8)) as *u8) 40 out[o] = 124 as u8; o = o + 1 41 o = ms_app(out, o, (ms_get(keys, vals, n, "license" as *u8)) as *u8) 42 out[o] = 0 as u8 43 return o 44} 45 46// A consumer: take the raw wire, make its OWN copy, parse via SHARED ms_parse, read core via SHARED 47// mc_core_view, and project ONE modality attr via SHARED ms_get. Returns the attr value ptr (0=absent). 48func consumer_read(wire: *u8, wlen: i64, attrkey: *u8, coreout: *u8) -> i64 { 49 let buf: *u8 = sys_mmap(K_MAGIC_16384) 50 var i: i64 = 0 51 while i < wlen { buf[i] = wire[i]; i = i + 1 } 52 let k: *i64 = sys_mmap(8 * 64) as *i64 53 let v: *i64 = sys_mmap(8 * 64) as *i64 54 let n: i64 = ms_parse(buf, wlen, k, v) 55 mc_core_view(k, v, n, coreout) 56 return ms_get(k, v, n, attrkey) 57} 58 59// A consumer's consent decision over its own parse of the wire (the hard line, applied per consumer). 60func consumer_valid(wire: *u8, wlen: i64) -> i64 { 61 let buf: *u8 = sys_mmap(K_MAGIC_16384) 62 var i: i64 = 0 63 while i < wlen { buf[i] = wire[i]; i = i + 1 } 64 let k: *i64 = sys_mmap(8 * 64) as *i64 65 let v: *i64 = sys_mmap(8 * 64) as *i64 66 let n: i64 = ms_parse(buf, wlen, k, v) 67 return ms_valid(k, v, n) 68} 69 70func main() -> i64 { 71 let keys: *i64 = sys_mmap(8 * 64) as *i64 72 let vals: *i64 = sys_mmap(8 * 64) as *i64 73 74 // captured-BEING record (X-CAP-001 BEING profile) -- the shared meta-layer datum 75 ms_set(keys, vals, 0, "modality" as *u8, "being" as *u8) 76 ms_set(keys, vals, 1, "cid" as *u8, "being-elara-001" as *u8) 77 ms_set(keys, vals, 2, "origin" as *u8, "ai-1p" as *u8) 78 ms_set(keys, vals, 3, "gen_modality" as *u8, "t2being" as *u8) 79 ms_set(keys, vals, 4, "source_model" as *u8, "sov-mpl-v1" as *u8) 80 ms_set(keys, vals, 5, "consent" as *u8, "fictional" as *u8) 81 ms_set(keys, vals, 6, "license" as *u8, "internal" as *u8) 82 ms_set(keys, vals, 7, "attr.outfit" as *u8, "red-dress" as *u8) 83 ms_set(keys, vals, 8, "attr.gait" as *u8, "graceful" as *u8) 84 ms_set(keys, vals, 9, "attr.voice" as *u8, "alto" as *u8) 85 86 let wire: *u8 = sys_mmap(K_MAGIC_16384) 87 let wlen: i64 = ms_emit(keys, vals, 10, wire) 88 89 // FOUR consumers each read the SAME wire through the SAME shape; each projects its own attr. 90 let c_comp: *u8 = sys_mmap(256) 91 let c_aprl: *u8 = sys_mmap(256) 92 let c_wrtr: *u8 = sys_mmap(256) 93 let c_mine: *u8 = sys_mmap(256) 94 let p_comp: i64 = consumer_read(wire, wlen, "attr.voice" as *u8, c_comp) 95 let p_aprl: i64 = consumer_read(wire, wlen, "attr.outfit" as *u8, c_aprl) 96 let p_wrtr: i64 = consumer_read(wire, wlen, "attr.gait" as *u8, c_wrtr) 97 let p_mine: i64 = consumer_read(wire, wlen, "origin" as *u8, c_mine) 98 99 // UNIFORM SHAPE: all four core identity views byte-identical (same accessor over same data). 100 var uniform_core: i64 = 1 101 if ms_streq(c_comp, c_aprl) != 1 { uniform_core = 0 } 102 if ms_streq(c_comp, c_wrtr) != 1 { uniform_core = 0 } 103 if ms_streq(c_comp, c_mine) != 1 { uniform_core = 0 } 104 105 // PROJECTION: each consumer's modality field is really present (not an ignored read). 106 var proj_ok: i64 = 0 107 if p_comp != 0 { proj_ok = proj_ok + 1 } 108 if p_aprl != 0 { proj_ok = proj_ok + 1 } 109 if p_wrtr != 0 { proj_ok = proj_ok + 1 } 110 if p_mine != 0 { proj_ok = proj_ok + 1 } 111 112 // NEGATIVE CONTROL: a non-uniform rogue reader DIVERGES -> uniformity check is discriminating. 113 let buf_r: *u8 = sys_mmap(K_MAGIC_16384) 114 var ri: i64 = 0 115 while ri < wlen { buf_r[ri] = wire[ri]; ri = ri + 1 } 116 let kr: *i64 = sys_mmap(8 * 64) as *i64 117 let vr: *i64 = sys_mmap(8 * 64) as *i64 118 let nr: i64 = ms_parse(buf_r, wlen, kr, vr) 119 let c_rogue: *u8 = sys_mmap(256) 120 mc_rogue_view(kr, vr, nr, c_rogue) 121 let discriminates: i64 = 1 - ms_streq(c_comp, c_rogue) 122 123 // CONSENT HARD LINE enforced UNIFORMLY: good record accepted by all 4, consent=NONE refused by all 4. 124 let sum_good: i64 = consumer_valid(wire, wlen) + consumer_valid(wire, wlen) + consumer_valid(wire, wlen) + consumer_valid(wire, wlen) 125 ms_set(keys, vals, 5, "consent" as *u8, "NONE" as *u8) 126 let wire_n: *u8 = sys_mmap(K_MAGIC_16384) 127 let wlen_n: i64 = ms_emit(keys, vals, 10, wire_n) 128 let sum_none: i64 = consumer_valid(wire_n, wlen_n) + consumer_valid(wire_n, wlen_n) + consumer_valid(wire_n, wlen_n) + consumer_valid(wire_n, wlen_n) 129 var consent_uniform: i64 = 0 130 if sum_good == 4 { if sum_none == 0 { consent_uniform = 1 } } 131 132 mc_puts("METACONSUMERS uniform_core=" as *u8); mc_putn(uniform_core) 133 mc_puts(" projections=" as *u8); mc_putn(proj_ok) 134 mc_puts(" discriminates=" as *u8); mc_putn(discriminates) 135 mc_puts(" consent_uniform=" as *u8); mc_putn(consent_uniform) 136 mc_puts(" core=" as *u8); mc_puts(c_comp) 137 138 var ok: i64 = 1 139 if uniform_core != 1 { ok = 0 } 140 if proj_ok != 4 { ok = 0 } 141 if discriminates != 1 { ok = 0 } 142 if consent_uniform != 1 { ok = 0 } 143 if ok == 1 { mc_puts(" verdict=GREEN\n" as *u8); return 0 } 144 mc_puts(" verdict=RED\n" as *u8) 145 return 1 146}