nx_pub_govern2_gate.nx source

1// nx_pub_govern2_gate.nx -- R13 PROOF: N-of-M multi-approver QUORUM + release SCHEDULE (window + freeze). 2// 3// QUORUM -- 2 distinct approvers meet a 2-of-N gate but not 3-of-N; the SAME approver twice does NOT count twice 4// (dedup, liar-kill); an artifact with no approvals is not approved (fail-closed). 5// SCHEDULE -- a deploy is allowed only inside the window; before/after -> denied; a FREEZE flag overrides even an 6// in-window time (liar-kill: the gate is not always-allow). 7// File-based (no forks). license_tier: ORIGINAL expect_exit: 0 8import "nx_syscalls.nx" 9import "nx_publisher.nx" 10import "nx_runpath.nx" 11 12func g_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } 13func g_n(v: i64) -> i64 { var m: i64=v; if m<0{g_w("-" as *u8);m=0-m} let t:*u8=sys_mmap(24); var k:i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var i:i64=0; let o:*u8=sys_mmap(24); while i<k{o[i]=t[k-1-i];i=i+1} sys_write(1,o,k); return 0 } 14func g_row(id: *u8, ok: i64, pass: *i64) -> i64 { g_w(" " as *u8); g_w(id); g_w(": " as *u8); if ok==1 { g_w("OK\n" as *u8); pass[0]=pass[0]+1 } else { g_w("FAIL\n" as *u8) } return 0 } 15func sv_write(path: *u8, content: *u8) -> i64 { let fd: i64 = sys_openat_wr(path, 0x1a4); if fd<0 { return 0 } var n: i64=0; while content[n]!=(0 as u8){n=n+1} sys_write(fd, content, n); sys_close(fd); return 1 } 16func g_unlink(path: *u8) -> i64 { __syscall(87, path as i64, 0, 0, 0, 0, 0); return 0 } 17 18func main() -> i64 { 19 let pass: *i64 = sys_mmap(8) as *i64; pass[0]=0 20 g_w("=== NX-PUB-GOVERN2 GATE (N-of-M quorum approval + release window/freeze schedule) ===\n" as *u8) 21 let wsid: *u8 = sys_mmap(64); rp_wsid(wsid); rp_ensure(wsid) 22 let D: *u8 = sys_mmap(512); rp_path(wsid, "pg2" as *u8, D); __syscall(83, D as i64, 493, 0, 0, 0, 0) 23 let appr: *u8 = sys_mmap(700); pub_join(D, "appr" as *u8, appr); __syscall(83, appr as i64, 493, 0, 0, 0, 0) 24 25 // reset the approvers file for the test artifact (unlink -- never "") 26 let qpath: *u8 = sys_mmap(700); pub_approvers_path(appr, "shaQ" as *u8, qpath); g_unlink(qpath) 27 28 // ---- QUORUM ---- 29 pub_approve_quorum(appr, "shaQ" as *u8, "alice" as *u8) 30 pub_approve_quorum(appr, "shaQ" as *u8, "bob" as *u8) 31 let met2: i64 = pub_quorum_met(appr, "shaQ" as *u8, 2) 32 let met3a: i64 = pub_quorum_met(appr, "shaQ" as *u8, 3) 33 pub_approve_quorum(appr, "shaQ" as *u8, "alice" as *u8) // duplicate -- must NOT add a 3rd 34 let met3b: i64 = pub_quorum_met(appr, "shaQ" as *u8, 3) 35 let met2b: i64 = pub_quorum_met(appr, "shaQ" as *u8, 2) 36 let unknown: i64 = pub_quorum_met(appr, "shaUNKNOWN" as *u8, 1) // no approvals -> fail-closed 37 38 // ---- SCHEDULE ---- 39 let freeze: *u8 = sys_mmap(700); pub_join(D, "freeze.flag" as *u8, freeze); g_unlink(freeze) 40 let in_win: i64 = pub_schedule_allows(500, 100, 1000, freeze) 41 let before: i64 = pub_schedule_allows(50, 100, 1000, freeze) 42 let after: i64 = pub_schedule_allows(2000, 100, 1000, freeze) 43 sv_write(freeze, "frozen" as *u8) // raise the freeze flag 44 let frozen_in_win: i64 = pub_schedule_allows(500, 100, 1000, freeze) 45 g_unlink(freeze) 46 47 g_w(" QUORUM met@2=" as *u8); g_n(met2); g_w(" met@3(before dup)=" as *u8); g_n(met3a); g_w(" met@3(after dup)=" as *u8); g_n(met3b); g_w(" unknown=" as *u8); g_n(unknown); g_w("\n" as *u8) 48 g_w(" SCHEDULE in_win=" as *u8); g_n(in_win); g_w(" before=" as *u8); g_n(before); g_w(" after=" as *u8); g_n(after); g_w(" frozen_in_win=" as *u8); g_n(frozen_in_win); g_w("\n" as *u8) 49 50 g_row("QUORUM: 2 distinct approvers meet 2-of-N, not 3-of-N" as *u8, ((met2==1) as i64) & ((met3a==0) as i64), pass) 51 g_row("QUORUM LIAR-KILL: same approver twice is NOT 3 distinct (still not 3-of-N) + still 2-of-N" as *u8, ((met3b==0) as i64) & ((met2b==1) as i64), pass) 52 g_row("QUORUM fail-closed: unapproved artifact meets nothing (0)" as *u8, (unknown==0) as i64, pass) 53 g_row("SCHEDULE window: in-window allowed, before/after denied" as *u8, ((in_win==1) as i64) & ((before==0) as i64) & ((after==0) as i64), pass) 54 g_row("SCHEDULE LIAR-KILL: FREEZE overrides even an in-window time (denied)" as *u8, (frozen_in_win==0) as i64, pass) 55 56 g_w("NX-PUB-GOVERN2 rows=5 pass=" as *u8); g_n(pass[0]) 57 if pass[0]==5 { g_w(" verdict=GREEN\n" as *u8); sys_exit(0); return 0 } 58 g_w(" verdict=RED\n" as *u8); sys_exit(1); return 1 59}