nx_recycler_census.nx source

1// nx_recycler_census.nx -- Recycles external bug data into Nishi hardening artifacts through structured pipeline stages. 2import "nx_gate_gn.nx" 3// nx_recycler_census.nx -- the NISHI RECYCLER pipeline MAP + ladder (the inverse of the builder: the builder 4// CONSUMES features to build; the recycler CONSUMES other systems' GARBAGE -- CVEs, bug trackers, postmortems, 5// complaints, "considered harmful" essays -- and recycles what APPLIES to us into hardening). LIVING MAP, liar- 6// killed: a pipeline stage is graded HAVE only if its real organ/artifact exists on disk; honest GAPs stay GAP. 7// Stages: DISCOVER -> FETCH -> EXTRACT -> ASSESS -> CONVERT. expect_exit: 0 license_tier: ORIGINAL 8import "nx_syscalls.nx" 9 10func gp(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } 11func have(p: *u8) -> i64 { let fd: i64=sys_openat_rd(p); if fd<0 { return 0 } sys_close(fd); return 1 } 12func row(stage: *u8, p: *u8, note: *u8) -> i64 { 13 gp(" " as *u8); gp(stage) 14 if have(p)==1 { gp(": HAVE (" as *u8) } else { gp(": GAP (" as *u8) } 15 gp(p); gp(") " as *u8); gp(note); gp("\n" as *u8) 16 return have(p) 17} 18 19func main() -> i64 { 20 gp("=== nx_recycler_census: the Nishi Recycler pipeline (inverse-builder: eat others' garbage -> our hardening) ===\n" as *u8) 21 var hav: i64=0; var gap: i64=0 22 23 // DISCOVER -- find MORE bugs to consume by MINING the fetched corpus for CVE-IDs (R2, grounded). nx_recycler_ 24 // discover surfaced 21 unique CVEs (16 NEW beyond the curated seed, incl. the Shellshock + Log4Shell families). 25 if row("DISCOVER" as *u8, "runtime/_hdl_build/nx_recycler_discover.nx" as *u8, "mines fetched bytes for CVE-IDs -> 16 NEW intake candidates (R2 corpus-discovery HAVE; full search-engine wiring = growth)" as *u8)==1 { hav=hav+1 } else { gap=gap+1 } 26 // FETCH -- pull the real bug corpora sovereignly (own TLS, Wikipedia-allowed). HAVE: 8/8 real vuln pages fetched. 27 if row("FETCH " as *u8, "runtime/nx_recycler_fetch.nx" as *u8, "8 real published-vuln pages over our own TLS -> knowledge/fetched/recyc_*.raw" as *u8)==1 { hav=hav+1 } else { gap=gap+1 } 28 // EXTRACT -- pull the stated issue out of the fetched bytes. PARTIAL: the assess brain keys off the bug CLASS; 29 // full free-text issue/sentiment extraction (incl. product REVIEWS, complaints) is R5. 30 if row("EXTRACT " as *u8, "runtime/_hdl_build/nx_recycler_extract.nx" as *u8, "R5 critique-mining: 5 critique-classes of other systems extracted from real pages, 2 APPLY (UB->LM-030/031, memory-safety)" as *u8)==1 { hav=hav+1 } else { gap=gap+1 } 31 // ASSESS -- logically map each bug to Nishi -> verdict + recycle-action; cross-link to our own catalogue. HAVE. 32 if row("ASSESS " as *u8, "runtime/_hdl_build/nx_recycler_assess.nx" as *u8, "8/0: 4 NEEDS-GATE + 3 IMMUNE + 1 N/A; Spectre->SEC-CT, int-overflow->LM-005" as *u8)==1 { hav=hav+1 } else { gap=gap+1 } 33 // CONVERT -- recycle a verdict into a real hardening artifact (a gate/primitive). HAVE (proven once): the 34 // Heartbleed-recycled bounds primitive. Auto-convert-EVERY-verdict is R3. 35 if row("CONVERT " as *u8, "runtime/_hdl_build/nx_recycler_bounds.nx" as *u8, "Heartbleed -> bounds primitive + gate (proven); auto-convert-all is R3" as *u8)==1 { hav=hav+1 } else { gap=gap+1 } 36 37 gp(" grounding: real intake artifact recyc_heartbleed.raw " as *u8) 38 var grounded: i64 = have("knowledge/fetched/recyc_heartbleed.raw" as *u8) 39 if grounded==1 { gp("PRESENT\n" as *u8) } else { gp("MISSING\n" as *u8) } 40 41 gp(" LADDER: R0 intake(HAVE) R1 assess(HAVE) R2 corpus-discover(HAVE) R3 auto-convert(PARTIAL: 2 proven -- bounds+sovereignty) R4 self-grow(HAVE-inherit: coverage 8->24, PROVISIONAL; continuous re-fetch=growth) R5 critique-mining(HAVE: 5 critiques, 2 apply -- continuous-refetch + R3-auto-convert-rest = growth)\n" as *u8) 42 gp("RECYCLER-CENSUS have=" as *u8); gn(hav); gp(" gap=" as *u8); gn(gap); gp("\n" as *u8) 43 44 // self-gate: the HAVE stages must really be on disk; DISCOVER must honestly read GAP; grounding present. 45 var pass: i64=0; var fail: i64=0 46 if have("runtime/nx_recycler_fetch.nx" as *u8)==1 { pass=pass+1 } else { fail=fail+1; gp(" FAIL fetch-absent\n" as *u8) } 47 if have("runtime/_hdl_build/nx_recycler_assess.nx" as *u8)==1 { pass=pass+1 } else { fail=fail+1; gp(" FAIL assess-absent\n" as *u8) } 48 if have("runtime/_hdl_build/nx_recycler_bounds.nx" as *u8)==1 { pass=pass+1 } else { fail=fail+1; gp(" FAIL convert-absent\n" as *u8) } 49 if have("runtime/_hdl_build/nx_recycler_discover.nx" as *u8)==1 { pass=pass+1 } else { fail=fail+1; gp(" FAIL discover-absent\n" as *u8) } 50 if have("runtime/_hdl_build/nx_recycler_extract.nx" as *u8)==1 { pass=pass+1 } else { fail=fail+1; gp(" FAIL extract-absent\n" as *u8) } 51 if grounded==1 { pass=pass+1 } else { fail=fail+1; gp(" FAIL grounding-absent\n" as *u8) } 52 if hav==5 { pass=pass+1 } else { fail=fail+1; gp(" FAIL have-count (expected 5 HAVE: all pipeline stages)\n" as *u8) } 53 54 gp("RECYCLER-CENSUS pass=" as *u8); gn(pass); gp(" fail=" as *u8); gn(fail) 55 if fail==0 { gp(" verdict=GREEN (ALL 5 pipeline stages HAVE; 2 CONVERTs proven; self-grow 8->24; 5 critiques mined [2 apply]; continuous-refetch + R3-auto-convert-rest = growth)\n" as *u8); sys_exit(0); return 0 } 56 gp(" verdict=RED\n" as *u8); sys_exit(1); return 1 57}