`nx_nif_gate.nx` source

↩ module page · 349 lines · 17835 B
1// nx_nif_gate.nx -- BITE-PROOF for the NIF structural probe + geometry leg, both directions.
2//
3// IT DRIVES THE SHIPPING CODE: every tooth calls nx_nif_lib directly -- the same nif_probe,
4// nif_types and nif_geom the CLI calls. FIXTURES ARE ASSEMBLED AT RUNTIME under /tmp/<gate>/ by a
5// byte builder (binary format; no literal fixture bytes exist in this source). Idempotent.
6//
7// FIXTURE HONESTY, DECLARED: the good fixtures are SYNTHETIC minimal modern-layout NIFs derived
8// from the mirrored nif.xml and the hex-measured real SE + FO76 files; the REAL corpus (nifly test
9// nifs, hex-verified 2026-08-30) rides the CLI smoke and the banked-mirror watch row.
10//
11// license_tier: ORIGINAL  expect_exit: 0
12import "nx_syscalls.nx"
13import "nx_gate_verdict.nx"
14import "nx_nif_lib.nx"
15
16const NG_DIR: *u8 = "/tmp/nx_nif_gate" as *u8
17const NG_F_GOOD: *u8 = "/tmp/nx_nif_gate/good.nif" as *u8
18const NG_F_BS155: *u8 = "/tmp/nx_nif_gate/bs155.nif" as *u8
19const NG_F_OOB: *u8 = "/tmp/nx_nif_gate/oob.nif" as *u8
20const NG_F_JUNK: *u8 = "/tmp/nx_nif_gate/junk.bin" as *u8
21const NG_F_OLDVER: *u8 = "/tmp/nx_nif_gate/oldver.nif" as *u8
22const NG_F_ABSURD: *u8 = "/tmp/nx_nif_gate/absurd.nif" as *u8
23const NG_F_EMPTY: *u8 = "/tmp/nx_nif_gate/empty.nif" as *u8
24const NG_BUFCAP: i64 = 8192
25const NG_VER_OLD: i64 = 335544323    // 0x14000003 = 20.0.0.3 -- recognized magic, unsupported layout
26// the geometry block: desc low nibble 5 dwords/vert, 2 verts, 1 tri -> datasize 5*2*4 + 1*6 = 46
27const NG_GEO_DESCLO: i64 = 5
28const NG_GEO_VERTS: i64 = 2
29const NG_GEO_TRIS: i64 = 1
30const NG_GEO_DSIZE: i64 = 46
31const NG_GEO_BLOCK: i64 = 162        // 100 prefix (0 extras) + 8 desc + 2 tri + 2 vert + 4 dsize + 46 data
32const NG_F32_ONE: i64 = 1065353216   // 1.0f  -- vertex 0 x
33const NG_F32_ONEP5: i64 = 1069547520 // 1.5f  -- vertex 1 y
34const NG_F32_TWO: i64 = 1073741824   // 2.0f  -- the good NiBound radius (covers both verts)
35const NG_F32_HALF: i64 = 1056964608  // 0.5f  -- the out-of-bound radius (covers neither)
36const NG_BLOCKBYTES: i64 = 212       // 20 (NiNode) + 162 (real BSTriShape) + 30 (undersized BSTriShape)
37
38func ng_u8(dst: *u8, at: i64, v: i64) -> i64 { dst[at] = v as u8; return at + 1 }
39func ng_u16(dst: *u8, at: i64, v: i64) -> i64 { dst[at] = (v & 0xff) as u8; dst[at + 1] = ((v >> 8) & 0xff) as u8; return at + 2 }
40func ng_u32(dst: *u8, at: i64, v: i64) -> i64 {
  dst[at] = (v & 0xff) as u8
  dst[at + 1] = ((v >> 8) & 0xff) as u8
  dst[at + 2] = ((v >> 16) & 0xff) as u8
  dst[at + 3] = ((v >> 24) & 0xff) as u8
  return at + 4
46}
47func ng_slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n }
48func ng_raw(dst: *u8, at: i64, s: *u8) -> i64 {
  var i: i64 = 0
  var o: i64 = at
  while s[i] != (0 as u8) { dst[o] = s[i]; o = o + 1; i = i + 1 }
  return o
53}
54func ng_sized(dst: *u8, at: i64, s: *u8) -> i64 {
  var o: i64 = ng_u32(dst, at, ng_slen(s))
  return ng_raw(dst, o, s)
57}
58// export string as observed on the real SE file: length byte counts the terminating nul
59func ng_export_empty(dst: *u8, at: i64) -> i64 {
  var o: i64 = ng_u8(dst, at, 1)
  return ng_u8(dst, o, 0)
62}
63func ng_zeros(dst: *u8, at: i64, count: i64) -> i64 {
  var i: i64 = 0
  var o: i64 = at
  while i < count { dst[o] = 0 as u8; o = o + 1; i = i + 1 }
  return o
68}
69func ng_write(path: *u8, body: *u8, n: i64) -> i64 {
  sys_unlinkat(path)
  let fd: i64 = sys_openat_wr(path, MODE_0644)
  if fd < 0 { return 0 - 1 }
  if n > 0 { sys_write(fd, body, n) }
  sys_close(fd)
  return n
76}
77
78// minimal modern NIF: 3 blocks over 2 types (NiNode, BSTriShape x2), 1 string, 0 groups.
79// Block 1 carries a REAL BSTriShape tuple satisfying the nif.xml datasize formula; block 2 is an
80// undersized BSTriShape that the geometry leg must count UNVERIFIED.
81func ng_build_good(dst: *u8, ver: i64, rbits: i64) -> i64 {
  var o: i64 = ng_raw(dst, 0, "Gamebryo File Format, Version 20.2.0.7" as *u8)
  o = ng_u8(dst, o, NF_CH_NL)
  o = ng_u32(dst, o, ver)
  o = ng_u8(dst, o, 1)          // little endian
  o = ng_u32(dst, o, 12)        // user version
  o = ng_u32(dst, o, 3)         // num blocks
  o = ng_u32(dst, o, 100)       // BS version (SSE): Author + ProcessScript + ExportScript, no MaxFilepath
  o = ng_export_empty(dst, o)
  o = ng_export_empty(dst, o)
  o = ng_export_empty(dst, o)
  o = ng_u16(dst, o, 2)         // num block types
  o = ng_sized(dst, o, "NiNode" as *u8)
  o = ng_sized(dst, o, "BSTriShape" as *u8)
  o = ng_u16(dst, o, 0)         // block 0 -> NiNode
  o = ng_u16(dst, o, 1)         // block 1 -> BSTriShape (real tuple)
  o = ng_u16(dst, o, 1)         // block 2 -> BSTriShape (undersized)
  o = ng_u32(dst, o, 20)
  o = ng_u32(dst, o, NG_GEO_BLOCK)
  o = ng_u32(dst, o, 30)
  o = ng_u32(dst, o, 1)         // num strings
  o = ng_u32(dst, o, 5)         // max string length
  o = ng_sized(dst, o, "hello" as *u8)
  o = ng_u32(dst, o, 0)         // num groups
  // block 0: NiNode, 20 opaque bytes
  o = ng_zeros(dst, o, 20)
  // block 1: BSTriShape -- 72-byte NiAVObject fixed part (num extras at +4 stays 0), then the
  // block's OWN NiBound oracle (center 0,0,0 + the caller's radius), refs, tuple, and REAL
  // vertex records: v0 at (1, 0, 0), v1 at (0, 1.5, 0), stride 5 dwords, then the triangle.
  o = ng_zeros(dst, o, NF_BOUND_OFF)
  o = ng_u32(dst, o, 0)               // bound center x
  o = ng_u32(dst, o, 0)               // bound center y
  o = ng_u32(dst, o, 0)               // bound center z
  o = ng_u32(dst, o, rbits)           // bound radius
  o = ng_zeros(dst, o, 12)            // skin + shader + alpha refs
  o = ng_u32(dst, o, NG_GEO_DESCLO)   // desc low dword (low nibble = dwords per vertex)
  o = ng_u32(dst, o, 0)               // desc high dword
  o = ng_u16(dst, o, NG_GEO_TRIS)
  o = ng_u16(dst, o, NG_GEO_VERTS)
  o = ng_u32(dst, o, NG_GEO_DSIZE)
  o = ng_u32(dst, o, NG_F32_ONE)      // v0 x = 1.0
  o = ng_u32(dst, o, 0)               // v0 y
  o = ng_u32(dst, o, 0)               // v0 z
  o = ng_zeros(dst, o, 8)             // v0 tail of the 5-dword record
  o = ng_u32(dst, o, 0)               // v1 x
  o = ng_u32(dst, o, NG_F32_ONEP5)    // v1 y = 1.5
  o = ng_u32(dst, o, 0)               // v1 z
  o = ng_zeros(dst, o, 8)             // v1 tail
  o = ng_zeros(dst, o, 6)             // the triangle
  // block 2: BSTriShape but only 30 bytes -- the tuple cannot fit past the prefix
  o = ng_zeros(dst, o, 30)
  return o
133}
134// bsver-155 minimal header (FO76 layout: Author + extra u32 + ExportScript + MaxFilepath), 1 block
135func ng_build_bs155(dst: *u8) -> i64 {
  var o: i64 = ng_raw(dst, 0, "Gamebryo File Format, Version 20.2.0.7" as *u8)
  o = ng_u8(dst, o, NF_CH_NL)
  o = ng_u32(dst, o, NF_VER_SSE)
  o = ng_u8(dst, o, 1)
  o = ng_u32(dst, o, 12)
  o = ng_u32(dst, o, 1)         // num blocks
  o = ng_u32(dst, o, 155)       // BS version (FO76)
  o = ng_export_empty(dst, o)   // Author
  o = ng_u32(dst, o, 0)         // the extra u32 (BS > 130)
  o = ng_export_empty(dst, o)   // Export Script (no Process Script at BS >= 131)
  o = ng_export_empty(dst, o)   // Max Filepath (BS >= 103)
  o = ng_u16(dst, o, 1)
  o = ng_sized(dst, o, "NiNode" as *u8)
  o = ng_u16(dst, o, 0)
  o = ng_u32(dst, o, 20)
  o = ng_u32(dst, o, 0)         // num strings
  o = ng_u32(dst, o, 0)         // max string length
  o = ng_u32(dst, o, 0)         // num groups
  o = ng_zeros(dst, o, 20)
  return o
156}
157// absurd type-table count spliced in: bounds must refuse, never misparse
158func ng_build_absurd(dst: *u8) -> i64 {
  var o: i64 = ng_raw(dst, 0, "Gamebryo File Format, Version 20.2.0.7" as *u8)
  o = ng_u8(dst, o, NF_CH_NL)
  o = ng_u32(dst, o, NF_VER_SSE)
  o = ng_u8(dst, o, 1)
  o = ng_u32(dst, o, 12)
  o = ng_u32(dst, o, 3)
  o = ng_u32(dst, o, 100)
  o = ng_export_empty(dst, o)
  o = ng_export_empty(dst, o)
  o = ng_export_empty(dst, o)
  o = ng_u16(dst, o, 65535)     // absurd num block types
  return o
171}
172
173func main(argc: i64, argv: *i64) -> i64 {
  let ctr: *i64 = gv_ctr()
  gv_head("=== NX-NIF GATE -- the Bethesda mesh container must census exactly, and abstain by name on everything else ===" as *u8)
176
  sys_mkdir(NG_DIR, MODE_0755)
  let asmbuf: *u8 = sys_mmap(NG_BUFCAP)
  let sc: *i64 = sys_mmap(64) as *i64
180
  let n_good: i64 = ng_build_good(asmbuf, NF_VER_SSE, NG_F32_TWO)
  let w_good: i64 = ng_write(NG_F_GOOD, asmbuf, n_good)
  let n_oob: i64 = ng_build_good(asmbuf, NF_VER_SSE, NG_F32_HALF)
  let w_oob: i64 = ng_write(NG_F_OOB, asmbuf, n_oob)
  let n_155: i64 = ng_build_bs155(asmbuf)
  let w_155: i64 = ng_write(NG_F_BS155, asmbuf, n_155)
  let n_old: i64 = ng_build_good(asmbuf, NG_VER_OLD, NG_F32_TWO)
  let w_old: i64 = ng_write(NG_F_OLDVER, asmbuf, n_old)
  let n_abs: i64 = ng_build_absurd(asmbuf)
  let w_abs: i64 = ng_write(NG_F_ABSURD, asmbuf, n_abs)
  let n_junk: i64 = ng_raw(asmbuf, 0, "these bytes are neither gamebryo nor netimmerse and never will be, padded to pass the length floor" as *u8)
  let w_junk: i64 = ng_write(NG_F_JUNK, asmbuf, n_junk)
  let w_empty: i64 = ng_write(NG_F_EMPTY, asmbuf, 0)
194
  gv_puts("  planted: good=" as *u8); gv_num(w_good)
  gv_puts(" bs155=" as *u8); gv_num(w_155)
  gv_puts(" oob=" as *u8); gv_num(w_oob)
  gv_puts(" oldver=" as *u8); gv_num(w_old)
  gv_puts(" absurd=" as *u8); gv_num(w_abs)
  gv_puts(" junk=" as *u8); gv_num(w_junk)
  gv_puts(" empty=" as *u8); gv_num(w_empty); gv_puts("\n" as *u8)
202
  var built: i64 = 0
  if w_good == n_good { if w_good > 300 { if w_155 == n_155 { if w_oob == n_oob { if w_old == n_old { if w_abs == n_abs {
  if w_junk == n_junk { if w_junk >= 40 { if w_empty == 0 { built = 1 } } } } } } } } }
  gv_need("every fixture reached its planted condition (written == built, good past 300 B with its geometry block, empty empty)" as *u8, built, ctr)
207
  let good: *u8 = sys_read_file(NG_F_GOOD, sc)
  let good_n: i64 = sc[0]
  let facts: *i64 = sys_mmap(NF_N_SLOTS * 8) as *i64
211
  // ---- T1 THE BITE
  nif_probe(good, good_n, good_n, facts)
  var fired_good: i64 = 0
  if facts[0] == 1 { fired_good = 1 }
  let f_ver: i64 = facts[1]
  let f_bsv: i64 = facts[2]
  let f_blk: i64 = facts[3]
  let f_typ: i64 = facts[4]
  let f_tri: i64 = facts[5]
  let f_tot: i64 = facts[6]
  let f_str: i64 = facts[7]
  let f_hdr: i64 = facts[8]
  let junk: *u8 = sys_read_file(NG_F_JUNK, sc)
  let junk_n: i64 = sc[0]
  nif_probe(junk, junk_n, junk_n, facts)
  var fired_junk: i64 = 0
  if facts[0] != 0 { fired_junk = 1 }
  gv_bite("T1 nif_probe parses the modern container and reads prose as NOT A NIF" as *u8, fired_good, fired_junk, ctr)
230
  // ---- T2 census exact against the built values
  gv_puts("  census: ver=" as *u8); gv_num(f_ver)
  gv_puts(" bsver=" as *u8); gv_num(f_bsv)
  gv_puts(" blocks=" as *u8); gv_num(f_blk)
  gv_puts(" types=" as *u8); gv_num(f_typ)
  gv_puts(" trishapes=" as *u8); gv_num(f_tri)
  gv_puts(" blockbytes=" as *u8); gv_num(f_tot)
  gv_puts(" strings=" as *u8); gv_num(f_str)
  gv_puts(" headerbytes=" as *u8); gv_num(f_hdr); gv_puts("\n" as *u8)
  var t2: i64 = 0
  if f_ver == NF_VER_SSE { if f_bsv == 100 { if f_blk == 3 { if f_typ == 2 { if f_str == 1 { t2 = 1 } } } } }
  gv_check("T2 header census exact: version 20.2.0.7, BS 100, 3 blocks, 2 types, 1 string" as *u8, t2, ctr)
243
  // ---- T3 the TriShape count discriminates by TYPE, not by block count
  var t3: i64 = 0
  if f_tri == 2 { if f_blk == 3 { t3 = 1 } }
  gv_check("T3 trishape census counts the two BSTriShape blocks and not the NiNode (2 of 3)" as *u8, t3, ctr)
248
  // ---- T4 the size table sums and the header ends where the payload begins
  var t4: i64 = 0
  if f_tot == NG_BLOCKBYTES { if f_hdr > 0 { if f_hdr + f_tot == good_n { t4 = 1 } } }
  gv_check("T4 block bytes sum to the declared 212 and headerbytes + blockbytes == the file (the partition SUMS)" as *u8, t4, ctr)
253
  // ---- T5 the type-table verb agrees with the probe
  let toffs: *i64 = sys_mmap(NF_MAX_TYPES * 8) as *i64
  let tlens: *i64 = sys_mmap(NF_MAX_TYPES * 8) as *i64
  let tcounts: *i64 = sys_mmap(NF_MAX_TYPES * 8) as *i64
  let meta: *i64 = sys_mmap(16) as *i64
  let st: i64 = nif_types(good, good_n, good_n, toffs, tlens, tcounts, NF_MAX_TYPES, meta)
  var t5: i64 = 0
  if st == 1 { if meta[0] == 2 { if tcounts[0] == 1 { if tcounts[1] == 2 { t5 = 1 } } } }
  gv_check("T5 nif_types agrees: 2 types, NiNode carries 1 block and BSTriShape carries 2" as *u8, t5, ctr)
263
  // ---- T5g THE GEOMETRY LEG: the schema's own datasize arithmetic separates a true tuple from
  // an undersized block in the SAME file -- both signals present at once.
  let vouts: *i64 = sys_mmap(64 * 8) as *i64
  let touts: *i64 = sys_mmap(64 * 8) as *i64
  let vflags: *i64 = sys_mmap(64 * 8) as *i64
  let gmeta: *i64 = sys_mmap(32) as *i64
  let shapes: i64 = nif_geom(good, good_n, good_n, vouts, touts, vflags, 64, gmeta)
  gv_puts("  geom: shapes=" as *u8); gv_num(shapes)
  gv_puts(" verified=" as *u8); gv_num(gmeta[0])
  gv_puts(" verts=" as *u8); gv_num(gmeta[1])
  gv_puts(" tris=" as *u8); gv_num(gmeta[2])
  gv_puts(" flags=" as *u8); gv_num(vflags[0]); gv_puts("," as *u8); gv_num(vflags[1]); gv_puts("\n" as *u8)
  var t5g: i64 = 0
  if shapes == 2 { if gmeta[0] == 1 { if gmeta[1] == NG_GEO_VERTS { if gmeta[2] == NG_GEO_TRIS {
  if vflags[0] == 1 { if vflags[1] == 0 { t5g = 1 } } } } } }
  gv_check("T5g nif_geom verifies the true tuple by the nif.xml formula (2 verts, 1 tri) and counts the undersized sibling UNVERIFIED" as *u8, t5g, ctr)
280
  // ---- T5v THE VERTEX LEG: positions decode to exact permil and land inside the block's OWN bound
  let pxs: *i64 = sys_mmap(64 * 8) as *i64
  let pys: *i64 = sys_mmap(64 * 8) as *i64
  let pzs: *i64 = sys_mmap(64 * 8) as *i64
  let vmeta: *i64 = sys_mmap(32) as *i64
  let nv: i64 = nif_verts(good, good_n, good_n, 0, pxs, pys, pzs, 64, vmeta)
  gv_puts("  verts: n=" as *u8); gv_num(nv)
  gv_puts(" inside=" as *u8); gv_num(vmeta[1])
  gv_puts(" radius=" as *u8); gv_num(vmeta[2])
  gv_puts(" v0=" as *u8); gv_num(pxs[0]); gv_puts("," as *u8); gv_num(pys[0]); gv_puts("," as *u8); gv_num(pzs[0])
  gv_puts(" v1=" as *u8); gv_num(pxs[1]); gv_puts("," as *u8); gv_num(pys[1]); gv_puts("," as *u8); gv_num(pzs[1]); gv_puts("\n" as *u8)
  var t5v: i64 = 0
  if nv == 2 { if pxs[0] == 1000 { if pys[0] == 0 { if pys[1] == 1500 { if pxs[1] == 0 {
  if vmeta[1] == 2 { if vmeta[2] == 2000 { t5v = 1 } } } } } } }
  gv_check("T5v vertex positions decode exactly (1.0 -> 1000, 1.5 -> 1500 permil) and both land inside the declared radius-2000 bound" as *u8, t5v, ctr)
296
  // ---- T5w CONTAINMENT BITES: the SAME geometry under a shrunk bound must read OUTSIDE
  let oobf: *u8 = sys_read_file(NG_F_OOB, sc)
  let oobf_n: i64 = sc[0]
  let nv2: i64 = nif_verts(oobf, oobf_n, oobf_n, 0, pxs, pys, pzs, 64, vmeta)
  var contain_good: i64 = 0
  if nv == 2 { contain_good = 1 }
  var contain_oob_fires: i64 = 0
  if nv2 == 2 { if vmeta[1] > 0 { contain_oob_fires = 1 } }
  gv_puts("  oob: n=" as *u8); gv_num(nv2)
  gv_puts(" inside=" as *u8); gv_num(vmeta[1]); gv_puts("\n" as *u8)
  gv_bite("T5w the bound containment discriminates: identical verts read inside at radius 2.0 and OUTSIDE at radius 0.5" as *u8, contain_good, contain_oob_fires, ctr)
308
  // ---- T5h the FO76-layout header (bsver 155: extra u32, no Process Script, Max Filepath) parses
  let b155: *u8 = sys_read_file(NG_F_BS155, sc)
  let b155_n: i64 = sc[0]
  nif_probe(b155, b155_n, b155_n, facts)
  var t5h: i64 = 0
  if facts[0] == 1 { if facts[2] == 155 { if facts[3] == 1 { if facts[8] + facts[6] == b155_n { t5h = 1 } } } }
  gv_check("T5h the bsver-155 header variant parses: state 1, 1 block, and its partition sums too" as *u8, t5h, ctr)
316
  // ---- T6 an unsupported version is RECOGNIZED-UNSUPPORTED (2), never misparsed into counts
  let old: *u8 = sys_read_file(NG_F_OLDVER, sc)
  let old_n: i64 = sc[0]
  nif_probe(old, old_n, old_n, facts)
  var t6: i64 = 0
  if facts[0] == 2 { if facts[3] == (0 - 1) { if facts[1] == NG_VER_OLD { t6 = 1 } } }
  gv_check("T6 neg-control-an-unsupported-version-reads-state-2-with-counts-abstained-and-the-version-still-reported" as *u8, t6, ctr)
324
  // ---- T7 an absurd bound is a named abstention, not a crash or a confident garbage census
  let absf: *u8 = sys_read_file(NG_F_ABSURD, sc)
  let absf_n: i64 = sc[0]
  nif_probe(absf, absf_n, absf_n, facts)
  var t7: i64 = 0
  if facts[0] == 2 { if facts[3] == (0 - 1) { t7 = 1 } }
  gv_check("T7 neg-control-a-65535-entry-type-table-refuses-into-state-2-abstention (bounds, not guesses)" as *u8, t7, ctr)
332
  // ---- T8 truncation honesty: a partial read of a real container abstains
  nif_probe(good, 60, good_n, facts)
  var t8: i64 = 0
  if facts[0] == 2 { if facts[3] == (0 - 1) { t8 = 1 } }
  gv_check("T8 a truncated read is RECOGNIZED-UNSUPPORTED with every count abstained, never a small number" as *u8, t8, ctr)
338
  // ---- T9 empty refused
  let emp: *u8 = sys_read_file(NG_F_EMPTY, sc)
  let emp_n: i64 = sc[0]
  nif_probe(emp, emp_n, emp_n, facts)
  var t9: i64 = 0
  if facts[0] == 0 { t9 = 1 }
  gv_check("T9 neg-control-a-zero-byte-file-is-not-a-nif" as *u8, t9, ctr)
346
  return gv_verdict("NIFFACTS" as *u8, ctr,
      "the Bethesda mesh container censuses exactly on the modern layout incl. the bsver-155 header, self-verifies TriShape geometry AND vertex positions by the file's own declared oracles, and abstains BY NAME on anything it cannot parse" as *u8)
349}
nx_nif_gate.nx source

`nx_nif_gate.nx` source
