nx_roku_catalog_gate.nx source

1// nx_roku_catalog_gate.nx -- SOVEREIGN gate for nx_roku_catalog_emit (R1b). Drives the real feed emitter, then 2// validates catalog.json ENTIRELY within Nishi (no python): well-formed object, exactly 6 items each with a 3// title + poster, the declared generated-media namespace, balanced braces/brackets, and a LIAR-KILL that the 4// feed references NOTHING personal (the personal archive stays out by construction). GREEN iff 10/10. 5// Requires /tmp/nx_roku_catalog_emit.sov.elf. Durable knowledge/status/roku_catalog_gate.log. license_tier: ORIGINAL 6import "nx_syscalls.nx" 7import "nx_gate_emit_lib.nx" 8 9func g_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } 10func g_w(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 } 11func g_wn(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 } 12func g_strlen(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} return n } 13func g_read(path: *u8, buf: *u8, cap: i64) -> i64 { 14 let fd: i64=sys_openat_rd(path); if fd<0 { return 0 } 15 var total: i64=0; var nrd: i64=sys_read(fd, buf, cap) 16 while nrd>0 { total=total+nrd; if total>=cap { nrd=0 } else { nrd=sys_read(fd, ((buf as i64)+total) as *u8, cap-total) } } 17 sys_close(fd); return total 18} 19func g_contains(hay: *u8, n: i64, needle: *u8) -> i64 { 20 let nl: i64=g_strlen(needle); if nl==0 { return 0 } 21 var i: i64=0 22 while i+nl<=n { var j: i64=0; var hit: i64=1; while j<nl { if hay[i+j]!=needle[j] { hit=0; j=nl } else { j=j+1 } } if hit==1 { return 1 } i=i+1 } 23 return 0 24} 25func g_count(hay: *u8, n: i64, needle: *u8) -> i64 { 26 let nl: i64=g_strlen(needle); if nl==0 { return 0 } 27 var cnt: i64=0; var i: i64=0 28 while i+nl<=n { var j: i64=0; var hit: i64=1; while j<nl { if hay[i+j]!=needle[j] { hit=0; j=nl } else { j=j+1 } } if hit==1 { cnt=cnt+1; i=i+nl } else { i=i+1 } } 29 return cnt 30} 31func g_check(label: *u8, ok: i64) -> i64 { g_puts(label); if ok==1 { g_puts(" PASS\n" as *u8); return 1 } g_puts(" FAIL\n" as *u8); return 0 } 32func g_run(elf: *u8, args: *i64, nargs: i64, out_path: *u8) -> i64 { 33 let pid: i64=sys_fork() 34 if pid==0 { 35 let o: i64=sys_openat_wr(out_path, 0x1a4); if o>=0 { sys_dup3(o,1,0) } 36 let argv: *i64=sys_mmap(8*16) as *i64; argv[0]=elf as i64 37 var i: i64=0; while i<nargs { argv[1+i]=args[i]; i=i+1 } argv[1+nargs]=0 38 let envp: *i64=sys_mmap(16) as *i64; envp[0]="PATH=/usr/bin:/bin" as *u8 as i64; envp[1]=0 39 sys_execve(elf, argv, envp); sys_exit(127) 40 } 41 let st: *i64=sys_mmap(16) as *i64; sys_wait4(pid, st, 0); return (st[0]>>8)&0xff 42} 43func samei(a: i64, b: i64) -> i64 { if a==b { return 1 } return 0 } 44 45func main() -> i64 { 46 g_puts("=== ROKU CATALOG GATE: sovereign re-proof of catalog.json (no python) ===\n" as *u8) 47 let EMIT: *u8="/tmp/nx_roku_catalog_emit.sov.elf" as *u8 48 let JSON: *u8="/tmp/roku_catalog.json" as *u8 49 let scr: *u8="/tmp/roku_catalog_scratch.txt" as *u8 50 let a: *i64=sys_mmap(8*8) as *i64; a[0]=JSON as i64 51 g_run(EMIT, a, 1, scr) 52 53 let b: *u8=sys_mmap(65536) 54 let n: i64=g_read(JSON, b, 65536) 55 let titles: i64=g_count(b, n, "\"title\":" as *u8) 56 let posters: i64=g_count(b, n, "\"poster\":" as *u8) 57 let ob: i64=g_count(b, n, "{" as *u8); let cb: i64=g_count(b, n, "}" as *u8) 58 let osq: i64=g_count(b, n, "[" as *u8); let csq: i64=g_count(b, n, "]" as *u8) 59 60 var pass: i64=0; let rows: i64=10 61 var startok: i64=0; if n>0 { if b[0]==(0x7b as u8) { startok=1 } } 62 pass=pass+g_check(" R1 starts with '{'" as *u8, startok) 63 pass=pass+g_check(" R2 has \"items\" array" as *u8, g_contains(b,n,"\"items\":[" as *u8)) 64 pass=pass+g_check(" R3 exactly 6 titles" as *u8, samei(titles,6)) 65 pass=pass+g_check(" R4 exactly 6 posters" as *u8, samei(posters,6)) 66 pass=pass+g_check(" R5 first title 'Sunrise'" as *u8, g_contains(b,n,"Sunrise" as *u8)) 67 pass=pass+g_check(" R6 last title 'City'" as *u8, g_contains(b,n,"City" as *u8)) 68 var posok: i64=0; if g_contains(b,n,"posters/poster1.png" as *u8)==1 { if g_contains(b,n,"posters/poster6.png" as *u8)==1 { posok=1 } } 69 pass=pass+g_check(" R7 poster refs poster1..6.png" as *u8, posok) 70 pass=pass+g_check(" R8 generated-media namespace" as *u8, g_contains(b,n,"\"namespace\":\"generated\"" as *u8)) 71 var noperson: i64=0; if g_contains(b,n,"personal" as *u8)==0 { noperson=1 } 72 pass=pass+g_check(" R9 LIAR-KILL: no personal reference" as *u8, noperson) 73 var bal: i64=0; if ob==cb { if osq==csq { if ob>=7 { bal=1 } } } 74 pass=pass+g_check(" R10 balanced braces/brackets" as *u8, bal) 75 76 g_puts("----\nROKU-CATALOG rows=" as *u8); g_num(rows); g_puts(" pass=" as *u8); g_num(pass); g_puts(" bytes=" as *u8); g_num(n); g_puts(" titles=" as *u8); g_num(titles); g_puts("\n" as *u8) 77 let lg: i64=sys_openat_append("knowledge/status/roku_catalog_gate.log" as *u8, 0x1a4) 78 if lg>=0 { g_w(lg, "ROKU-CATALOG rows=" as *u8); g_wn(lg, rows); g_w(lg, " pass=" as *u8); g_wn(lg, pass); if pass==rows { g_w(lg, " verdict=GREEN\n" as *u8) } else { g_w(lg, " verdict=RED\n" as *u8) } sys_close(lg) } 79 if pass==rows { g_puts("ROKU-CATALOG GREEN (sovereign generated-media feed proven without python)\n" as *u8); sys_exit(0); return 0 } 80 g_puts("ROKU-CATALOG RED\n" as *u8); sys_exit(1); return 1 81}