code wiki / _hdl_build / nx_seatresume_gate.nx
`nx_seatresume_gate.nx` source

↩ module page · 299 lines · 20543 B
1// nx_seatresume_gate.nx -- referee for nx_seat resume_map (DM2 crash-resume map, /compare/devmgmt).
2// Fixtures are ASSEMBLED AT RUNTIME under /tmp/nx_seatresume_gate/<epoch>/ (never the live population,
3// never a source-embedded pattern -- the detector-finds-its-own-fixture trap), unique per run so the
4// gate is idempotent by construction. It forks the DEPLOYED subject elf (argv override for staged or
5// local builds) and judges only the subject's OUTPUT -- the same evidence a coordinator would read.
6// Teeth carry their strength in their NAME (gate law E7); both refusal directions are covered: a
7// mapper that misses a planted in-flight write fails the detection teeth, and a mapper that flags
8// EVERYTHING fails the clean-session neg-control (the guard-that-refuses-everything trap).
9// license_tier: ORIGINAL   No hw writes (Rule 26).   expect_exit: 0
10import "nx_gate_verdict.nx"
11import "nx_tool_run.nx"
12import "nx_syscalls.nx"
13
14const GT_MODE_FILE: i64 = 0x1a4        // 0644, the estate's ST_MODE_RW spelling
15const GT_MODE_DIR: i64 = 0x1ed         // 0755 for fixture dirs
16const GT_CAP: i64 = 262144             // capture buffer; the fixture report measures <20KB, tooth asserts TR_FIT so a silent cut cannot pass
17const GT_TIMEOUT_MS: i64 = 30000       // mirrors the subject's own ST_FORK_TIMEOUT_MS bounded-exec rationale
18const GT_WIN_HALF: i64 = 3600          // explicit fixture window half-width = the subject's ST_STALE_SEC/2; only needs to exceed the write-to-run gap
19const GT_OLD_OFFSET: i64 = 100000      // pushes old1 outside BOTH the explicit window and latest-mode span (ST_STALE_SEC=7200) by >10x
20const GT_NULPAD: i64 = 32              // NUL-fill length for the truncated-final-line fixture (real crashes measured 1700..26911B of garbage; any NUL run without a parseable type reproduces the class)
21const GT_PATH: i64 = 4096              // PATH_MAX
22const GT_ARGV: i64 = 96                // argv cell array: 12 slots x 8
23const GT_NUMBUF: i64 = 32              // one decimal epoch string
24
25const GT_JWIN: i64 = 60         // journal-leg test window width (s): narrow enough that the fixture's own span brackets it, so COVERS/PARTIAL are decided by the fixture, not by wall-clock drift
26const GT_JSEED: i64 = 3600      // how far back the fixture's span-min frame sits; only needs to precede the window start
27const GT_JBUF: i64 = 4096       // journal fixture build buffer; the fixtures below measure a few hundred bytes
28
29func gt_slen(s: *u8) -> i64 { var sl_n: i64 = 0; while s[sl_n] != (0 as u8) { sl_n = sl_n + 1 } return sl_n }
30
31// one actlog frame: <ts>\t<ws>\t<tool>\t<verb>\t<outcome>\t<note>\n -- the DM1 contract's shape, built
32// at runtime so the gate never carries a journal fixture as source bytes a scanner could find.
33func gt_frame(buf: *u8, off: i64, ts: i64, ws: *u8, tool: *u8, note: *u8) -> i64 {
  var fr_o: i64 = gv_catn(buf, off, ts)
  buf[fr_o] = 9 as u8
  fr_o = gv_cat(buf, fr_o + 1, ws)
  buf[fr_o] = 9 as u8
  fr_o = gv_cat(buf, fr_o + 1, tool)
  buf[fr_o] = 9 as u8
  fr_o = gv_cat(buf, fr_o + 1, "use" as *u8)
  buf[fr_o] = 9 as u8
  fr_o = gv_cat(buf, fr_o + 1, "-" as *u8)
  buf[fr_o] = 9 as u8
  fr_o = gv_cat(buf, fr_o + 1, note)
  buf[fr_o] = 10 as u8
  buf[fr_o + 1] = 0 as u8
  return fr_o + 1
48}
49
50func gt_wf(path: *u8, content: *u8) -> i64 {
  let wf_fd: i64 = sys_openat_wr(path, GT_MODE_FILE)
  if wf_fd < 0 { return 0 - 1 }
  var wf_n: i64 = 0
  while content[wf_n] != (0 as u8) { wf_n = wf_n + 1 }
  sys_write(wf_fd, content, wf_n)
  sys_close(wf_fd)
  return 0
58}
59
60func gt_path2(dst: *u8, a: *u8, b: *u8) -> i64 {
  var p2_o: i64 = gv_cat(dst, 0, a)
  p2_o = gv_cat(dst, p2_o, b)
  dst[p2_o] = 0 as u8
  return p2_o
65}
66
67func main(argc: i64, argv: *i64) -> i64 {
  let ctr: *i64 = gv_ctr()
  gv_head("nx_seatresume_gate -- DM2 crash-resume map referee (runtime fixtures, forks the subject elf)" as *u8)
  var subj: *u8 = "_offc/nx_seat.elf" as *u8
  if argc > 1 { subj = argv[1] as *u8 }
  let now: i64 = sys_now_realtime_sec()
  // ---- fixture tree: /tmp/nx_seatresume_gate/<now>/{tr,troot/crash1/{scratchpad,tasks}} ----
  sys_mkdir("/tmp/nx_seatresume_gate" as *u8, GT_MODE_DIR)
  let base: *u8 = sys_mmap(GT_PATH)
  var bo: i64 = gv_cat(base, 0, "/tmp/nx_seatresume_gate/" as *u8)
  bo = gv_catn(base, bo, now)
  base[bo] = 0 as u8
  sys_mkdir(base, GT_MODE_DIR)
  let tr: *u8 = sys_mmap(GT_PATH)
  gt_path2(tr, base, "/tr" as *u8)
  sys_mkdir(tr, GT_MODE_DIR)
  let troot: *u8 = sys_mmap(GT_PATH)
  gt_path2(troot, base, "/troot" as *u8)
  sys_mkdir(troot, GT_MODE_DIR)
  let td1: *u8 = sys_mmap(GT_PATH)
  gt_path2(td1, troot, "/crash1" as *u8)
  sys_mkdir(td1, GT_MODE_DIR)
  let td2: *u8 = sys_mmap(GT_PATH)
  gt_path2(td2, td1, "/scratchpad" as *u8)
  sys_mkdir(td2, GT_MODE_DIR)
  let td3: *u8 = sys_mmap(GT_PATH)
  gt_path2(td3, td1, "/tasks" as *u8)
  sys_mkdir(td3, GT_MODE_DIR)
  let fp: *u8 = sys_mmap(GT_PATH)
  // crash1.jsonl: paired FIXA, DANGLING FIXB, then a NUL-filled unterminated final line (the measured crash shape)
  gt_path2(fp, tr, "/crash1.jsonl" as *u8)
  let c1fd: i64 = sys_openat_wr(fp, GT_MODE_FILE)
  if c1fd >= 0 {
      let c1a: *u8 = "{\"type\":\"last-prompt\",\"lastPrompt\":\"fixture-lane-crash1\"}\n{\"type\":\"user\",\"message\":{\"role\":\"user\",\"content\":\"fixture-prompt crash1 lane work\"},\"timestamp\":\"2026-08-20T00:00:01.000Z\"}\n{\"type\":\"assistant\",\"message\":{\"role\":\"assistant\",\"content\":[{\"type\":\"text\",\"text\":\"fixture assistant text crash1\"}]},\"timestamp\":\"2026-08-20T00:00:02.000Z\"}\n" as *u8
      sys_write(c1fd, c1a, gt_slen(c1a))
      let c1b: *u8 = "{\"type\":\"assistant\",\"message\":{\"role\":\"assistant\",\"content\":[{\"type\":\"tool_use\",\"id\":\"toolu_FIXA\",\"name\":\"Bash\",\"input\":{\"command\":\"echo hi\"}}]},\"timestamp\":\"2026-08-20T00:00:03.000Z\"}\n{\"type\":\"user\",\"message\":{\"role\":\"user\",\"content\":[{\"type\":\"tool_result\",\"tool_use_id\":\"toolu_FIXA\",\"content\":\"ok\"}]},\"timestamp\":\"2026-08-20T00:00:04.000Z\"}\n{\"type\":\"ai-title\",\"aiTitle\":\"fixture crash1 title\"}\n" as *u8
      sys_write(c1fd, c1b, gt_slen(c1b))
      let c1c: *u8 = "{\"type\":\"assistant\",\"message\":{\"role\":\"assistant\",\"content\":[{\"type\":\"tool_use\",\"id\":\"toolu_FIXB\",\"name\":\"PowerShell\",\"input\":{\"command\":\"apply\"}}]},\"timestamp\":\"2026-08-20T00:00:05.000Z\"}\n" as *u8
      sys_write(c1fd, c1c, gt_slen(c1c))
      let nulb: *u8 = sys_mmap(GT_NULPAD)
      var nz: i64 = 0
      while nz < GT_NULPAD { nulb[nz] = 0 as u8; nz = nz + 1 }
      sys_write(c1fd, nulb, GT_NULPAD)
      sys_close(c1fd)
  }
  // clean1.jsonl: every use paired, turn ends in assistant text + system row (COMPLETED; the neg-control)
  gt_path2(fp, tr, "/clean1.jsonl" as *u8)
  gt_wf(fp, "{\"type\":\"last-prompt\",\"lastPrompt\":\"fixture-lane-clean1\"}\n{\"type\":\"user\",\"message\":{\"role\":\"user\",\"content\":\"fixture-prompt clean1\"},\"timestamp\":\"2026-08-20T00:00:01.000Z\"}\n{\"type\":\"assistant\",\"message\":{\"role\":\"assistant\",\"content\":[{\"type\":\"tool_use\",\"id\":\"toolu_FIXC\",\"name\":\"Bash\",\"input\":{\"command\":\"ls\"}}]},\"timestamp\":\"2026-08-20T00:00:02.000Z\"}\n{\"type\":\"user\",\"message\":{\"role\":\"user\",\"content\":[{\"type\":\"tool_result\",\"tool_use_id\":\"toolu_FIXC\",\"content\":\"ok\"}]},\"timestamp\":\"2026-08-20T00:00:03.000Z\"}\n{\"type\":\"assistant\",\"message\":{\"role\":\"assistant\",\"content\":[{\"type\":\"text\",\"text\":\"fixture clean1 done all banked\"}]},\"timestamp\":\"2026-08-20T00:00:04.000Z\"}\n{\"type\":\"system\",\"subtype\":\"hook\",\"timestamp\":\"2026-08-20T00:00:05.000Z\"}\n" as *u8)
  // old1.jsonl: clean shape, mtime pushed out of every window
  gt_path2(fp, tr, "/old1.jsonl" as *u8)
  gt_wf(fp, "{\"type\":\"last-prompt\",\"lastPrompt\":\"fixture-lane-old1\"}\n{\"type\":\"assistant\",\"message\":{\"role\":\"assistant\",\"content\":[{\"type\":\"text\",\"text\":\"fixture old1 text\"}]},\"timestamp\":\"2026-08-19T00:00:01.000Z\"}\n" as *u8)
  let tsp: *i64 = sys_mmap(GT_ARGV) as *i64
  tsp[0] = now - GT_OLD_OFFSET
  tsp[1] = 0
  tsp[2] = now - GT_OLD_OFFSET
  tsp[3] = 0
  sys_utimensat(fp, tsp)
  // novel1.jsonl: an UNKNOWN entry type must be censused, never crash, never misfile the seat
  gt_path2(fp, tr, "/novel1.jsonl" as *u8)
  gt_wf(fp, "{\"type\":\"zz-novel-type\",\"x\":\"y\"}\n{\"type\":\"assistant\",\"message\":{\"role\":\"assistant\",\"content\":[{\"type\":\"text\",\"text\":\"fixture novel1 text\"}]},\"timestamp\":\"2026-08-20T00:00:02.000Z\"}\n" as *u8)
  // crash1's children: one agent JSONL output with a DANGLING use, one raw output, one scratch file
  gt_path2(fp, td2, "/f1.txt" as *u8)
  gt_wf(fp, "s\n" as *u8)
  gt_path2(fp, td3, "/agent1.output" as *u8)
  gt_wf(fp, "{\"parentUuid\":null,\"isSidechain\":true,\"agentId\":\"agent1\",\"type\":\"user\",\"message\":{\"role\":\"user\",\"content\":\"fixture-agent-lane sub work\"},\"timestamp\":\"2026-08-20T00:01:00.000Z\"}\n{\"type\":\"assistant\",\"message\":{\"role\":\"assistant\",\"content\":[{\"type\":\"tool_use\",\"id\":\"toolu_FIXD\",\"name\":\"Grep\",\"input\":{\"pattern\":\"x\"}}]},\"timestamp\":\"2026-08-20T00:01:01.000Z\"}\n" as *u8)
  gt_path2(fp, td3, "/raw1.output" as *u8)
  gt_wf(fp, "plain output line\nno json here\n" as *u8)
  // journal fixtures: one present, one deliberately never created
  let jyes: *u8 = sys_mmap(GT_PATH)
  gt_path2(jyes, base, "/frames.jrnl" as *u8)
  gt_wf(jyes, "f1\nf2\n" as *u8)
  let jno: *u8 = sys_mmap(GT_PATH)
  gt_path2(jno, base, "/absent.jrnl" as *u8)
  // ---- DM1 leg fixtures (contract: chbeat_<YYYYMMDD>.jrnl, actlog frames, tszero its own file) ----
  // jdir COVERS the journal-test window (a frame before it and one at its end bracket the span) and
  // carries a crash1 frame whose tool MATCHES the transcript's last tool_use, so agreement is a real
  // join and not a coincidence. clean1 is deliberately ABSENT from every journal -> UNCOVERED.
  let jdir: *u8 = sys_mmap(GT_PATH)
  gt_path2(jdir, base, "/jrnl" as *u8)
  sys_mkdir(jdir, GT_MODE_DIR)
  let jbuf: *u8 = sys_mmap(GT_JBUF)
  var jo: i64 = gt_frame(jbuf, 0, now - GT_JSEED, "boundary" as *u8, "Seed" as *u8, "span-min" as *u8)
  jo = gt_frame(jbuf, jo, now - GT_JWIN + 1, "crash1" as *u8, "PowerShell" as *u8, "delta" as *u8)
  jo = gt_frame(jbuf, jo, now, "boundary" as *u8, "Seed" as *u8, "span-max" as *u8)
  gt_path2(fp, jdir, "/chbeat_20260820.jrnl" as *u8)
  gt_wf(fp, jbuf)
  jo = gt_frame(jbuf, 0, 0, "crash1" as *u8, "Read" as *u8, "undated" as *u8)
  jo = gt_frame(jbuf, jo, 0, "crash1" as *u8, "Read" as *u8, "undated" as *u8)
  gt_path2(fp, jdir, "/chbeat_tszero.jrnl" as *u8)
  gt_wf(fp, jbuf)
  // jold sits ENTIRELY before the window -- the backfill-mid-drain case that must read PARTIAL
  let jold: *u8 = sys_mmap(GT_PATH)
  gt_path2(jold, base, "/jrnlold" as *u8)
  sys_mkdir(jold, GT_MODE_DIR)
  jo = gt_frame(jbuf, 0, now - GT_OLD_OFFSET, "crash1" as *u8, "Bash" as *u8, "old" as *u8)
  gt_path2(fp, jold, "/chbeat_20260101.jrnl" as *u8)
  gt_wf(fp, jbuf)
  // an empty transcripts dir for estate-only mode (no .jsonl reachable, journal is the only source)
  let notr: *u8 = sys_mmap(GT_PATH)
  gt_path2(notr, base, "/notr" as *u8)
  sys_mkdir(notr, GT_MODE_DIR)
  let jwsb: *u8 = sys_mmap(GT_NUMBUF)
  var jwo: i64 = gv_catn(jwsb, 0, now - GT_JWIN)
  jwsb[jwo] = 0 as u8
  let jweb: *u8 = sys_mmap(GT_NUMBUF)
  jwo = gv_catn(jweb, 0, now)
  jweb[jwo] = 0 as u8
  // ---- window strings ----
  let wsb: *u8 = sys_mmap(GT_NUMBUF)
  var wo: i64 = gv_catn(wsb, 0, now - GT_WIN_HALF)
  wsb[wo] = 0 as u8
  let web: *u8 = sys_mmap(GT_NUMBUF)
  wo = gv_catn(web, 0, now + GT_WIN_HALF)
  web[wo] = 0 as u8
  let one: *u8 = "1" as *u8
  let two: *u8 = "2" as *u8
  // ---- run A: explicit window, journal ABSENT ----
  let out: *u8 = sys_mmap(GT_CAP)
  let olen: *i64 = sys_mmap(16) as *i64
  let trunc: *i64 = sys_mmap(16) as *i64
  let av: *i64 = sys_mmap(GT_ARGV) as *i64
  av[0] = subj as i64
  av[1] = "resume_map" as i64
  av[2] = tr as i64
  av[3] = troot as i64
  av[4] = wsb as i64
  av[5] = web as i64
  av[6] = jno as i64
  av[7] = 0
  let rcA: i64 = tr_run_capture_tr(subj, av, out, GT_CAP, olen, GT_TIMEOUT_MS, trunc)
  let nA: i64 = olen[0]
  gv_check("T1 crashed-fixture-state-CRASHED-MIDACTION" as *u8, tr_contains(out, nA, "resume> crash1 state=CRASHED-MIDACTION" as *u8), ctr)
  gv_check("T2 dangling-tool-use-flagged-by-id" as *u8, tr_contains(out, nA, "INFLIGHT id=toolu_FIXB tool=PowerShell" as *u8), ctr)
  var t3: i64 = 0
  if tr_contains(out, nA, "INFLIGHT-SUSPECT final-line-unparseable" as *u8) == 1 { if tr_contains(out, nA, "nul=1" as *u8) == 1 { t3 = 1 } }
  gv_check("T3 nul-truncated-final-line-flagged-inflight-suspect" as *u8, t3, ctr)
  var t4: i64 = 0
  if tr_contains(out, nA, "resume> clean1 state=COMPLETED" as *u8) == 1 { if tr_contains(out, nA, "INFLIGHT id=toolu_FIXC" as *u8) == 0 { t4 = 1 } }
  gv_check("T4 neg-control-clean-session-must-not-be-flagged-inflight" as *u8, t4, ctr)
  var t5: i64 = 0
  if tr_contains(out, nA, "PARTITION scope=transcripts total_jsonl=4 in_window=3 out_of_window=1 sum=4 SUM-OK" as *u8) == 1 { if tr_contains(out, nA, "INWINDOW crashed_midaction=1 completed=2 idle=0 unknown=0 sum=3 SUM-OK" as *u8) == 1 { t5 = 1 } }
  gv_check("T5 partition-parts-sum-with-denominators" as *u8, t5, ctr)
  gv_check("T6 out-of-window-seat-counted-not-expanded" as *u8, 1 - tr_contains(out, nA, "SEAT id=old1" as *u8), ctr)
  var t7: i64 = 0
  if tr_contains(out, nA, "task_child name=agent1.output" as *u8) == 1 { if tr_contains(out, nA, "kind=agent" as *u8) == 1 { if tr_contains(out, nA, "INFLIGHT id=toolu_FIXD tool=Grep" as *u8) == 1 { t7 = 1 } } }
  gv_check("T7 task-child-agent-parsed-lane-state-and-dangling" as *u8, t7, ctr)
  var t8: i64 = 0
  if tr_contains(out, nA, "zz-novel-type=1" as *u8) == 1 { if tr_contains(out, nA, "resume> novel1 state=COMPLETED" as *u8) == 1 { t8 = 1 } }
  gv_check("T8 unknown-entry-type-censused-never-misfiled" as *u8, t8, ctr)
  gv_check("T9 journal-absent-SKIP-UNOBSERVABLE-abstains" as *u8, tr_contains(out, nA, "SKIP UNOBSERVABLE reason=absent" as *u8), ctr)
  var t13a: i64 = 0
  if rcA == 0 { if trunc[0] == TR_FIT { if tr_contains(out, nA, "RESUME-MAP-END" as *u8) == 1 { t13a = 1 } } }
  gv_check("T10 capture-complete-envelope-rc0-fit-and-end-marker" as *u8, t13a, ctr)
  // ---- run B: a NON-actlog journal must be counted as malformed, never crash and never be believed.
  // The transcript wire format is vendor-declared version-unstable and the journal is written by a
  // sibling organ, so a shape the scanner does not recognise is EVIDENCE, not an exception.
  av[6] = jyes as i64
  let rcB: i64 = tr_run_capture_tr(subj, av, out, GT_CAP, olen, GT_TIMEOUT_MS, trunc)
  let nB: i64 = olen[0]
  var t10: i64 = 0
  if rcB == 0 { if tr_contains(out, nB, "malformed=2" as *u8) == 1 { if tr_contains(out, nB, "verdict=SKIP" as *u8) == 1 { t10 = 1 } } }
  gv_check("T11 unparseable-journal-counted-malformed-and-SKIPs-rather-than-being-believed" as *u8, t10, ctr)
  // ---- run C: empty window (the empty set must carry its denominator, exit 0, zero seats) ----
  av[4] = one as i64
  av[5] = two as i64
  av[6] = jno as i64
  let rcC: i64 = tr_run_capture_tr(subj, av, out, GT_CAP, olen, GT_TIMEOUT_MS, trunc)
  let nC: i64 = olen[0]
  var t11: i64 = 0
  if rcC == 0 { if tr_contains(out, nC, "in_window=0" as *u8) == 1 { if tr_contains(out, nC, "sum=4 SUM-OK" as *u8) == 1 { if tr_contains(out, nC, "RESUME-MAP-END seats=0" as *u8) == 1 { t11 = 1 } } } }
  gv_check("T12 neg-control-empty-window-empty-set-carries-denominator" as *u8, t11, ctr)
  // ---- run D: latest mode derives and PRINTS the window ----
  av[4] = "latest" as i64
  av[5] = jno as i64
  av[6] = 0
  let rcD: i64 = tr_run_capture_tr(subj, av, out, GT_CAP, olen, GT_TIMEOUT_MS, trunc)
  let nD: i64 = olen[0]
  var t12: i64 = 0
  if rcD == 0 { if tr_contains(out, nD, "WINDOW mode=latest span_src=ST_STALE_SEC" as *u8) == 1 { if tr_contains(out, nD, "in_window=3" as *u8) == 1 { t12 = 1 } } }
  gv_check("T13 latest-mode-window-derived-printed-and-excludes-stale" as *u8, t12, ctr)
  // ---- runs E/F/G: the DM1 frames-journal leg (contract published 2026-08-20) ----
  // E: journal COVERS the window -> per-seat join, agreement, tszero in its own bucket
  av[2] = tr as i64
  av[3] = troot as i64
  av[4] = jwsb as i64
  av[5] = jweb as i64
  av[6] = jdir as i64
  av[7] = 0
  let rcE: i64 = tr_run_capture_tr(subj, av, out, GT_CAP, olen, GT_TIMEOUT_MS, trunc)
  let nE: i64 = olen[0]
  var t14: i64 = 0
  if rcE == 0 { if tr_contains(out, nE, "verdict=COVERS" as *u8) == 1 { if tr_contains(out, nE, "COVERS: derived coverage spans the requested window" as *u8) == 1 { t14 = 1 } } }
  gv_check("T14 journal-covering-window-reported-COVERS" as *u8, t14, ctr)
  gv_check("T15 per-seat-join-agrees-with-transcript-last-action" as *u8, tr_contains(out, nE, "nas_last_tool=PowerShell laptop_last_tool=PowerShell agree=YES" as *u8), ctr)
  gv_check("T16 neg-control-seat-absent-from-journal-reads-UNCOVERED-not-agree" as *u8, tr_contains(out, nE, "agree=UNCOVERED" as *u8), ctr)
  gv_check("T17 tszero-frames-counted-in-their-own-bucket-never-folded" as *u8, tr_contains(out, nE, "tszero=2" as *u8), ctr)
  var t18: i64 = 0
  if tr_contains(out, nE, "seats_with_frames=1" as *u8) == 1 { if tr_contains(out, nE, "seats_uncovered=2" as *u8) == 1 { if tr_contains(out, nE, "residual=0" as *u8) == 1 { t18 = 1 } } }
  gv_check("T18 journal-seat-partition-parts-sum" as *u8, t18, ctr)
  // F: journal sits entirely BEFORE the window -> PARTIAL, and it must STATE the covered window
  av[6] = jold as i64
  let rcF: i64 = tr_run_capture_tr(subj, av, out, GT_CAP, olen, GT_TIMEOUT_MS, trunc)
  let nF: i64 = olen[0]
  var t19: i64 = 0
  if rcF == 0 { if tr_contains(out, nF, "verdict=PARTIAL" as *u8) == 1 { if tr_contains(out, nF, "covered_window=" as *u8) == 1 { if tr_contains(out, nF, "does NOT span the requested window" as *u8) == 1 { t19 = 1 } } } }
  gv_check("T19 backfill-mid-drain-journal-reported-PARTIAL-with-covered-window-stated" as *u8, t19, ctr)
  gv_check("T20 neg-control-partial-journal-must-not-read-as-COVERS" as *u8, 1 - tr_contains(out, nF, "verdict=COVERS" as *u8), ctr)
  // G: ESTATE-ONLY -- no transcripts reachable, the journal is the whole source (the NAS case)
  av[2] = notr as i64
  av[3] = "-" as i64
  av[6] = jdir as i64
  let rcG: i64 = tr_run_capture_tr(subj, av, out, GT_CAP, olen, GT_TIMEOUT_MS, trunc)
  let nG: i64 = olen[0]
  var t21: i64 = 0
  if rcG == 0 { if tr_contains(out, nG, "SEAT id=crash1 source=journal-only" as *u8) == 1 { if tr_contains(out, nG, "source=estate-journal" as *u8) == 1 { t21 = 1 } } }
  gv_check("T21 estate-only-mode-builds-the-map-from-frames-with-no-transcripts" as *u8, t21, ctr)
  var t22: i64 = 0
  if tr_contains(out, nG, "state=UNKNOWN reason=journal-only" as *u8) == 1 { if tr_contains(out, nG, "inflight=UNOBSERVABLE" as *u8) == 1 { t22 = 1 } }
  gv_check("T22 neg-control-estate-only-abstains-on-in-flight-never-acquits" as *u8, t22, ctr)
  gv_check("T23 non-session-journal-actor-not-counted-as-a-seat" as *u8, tr_contains(out, nG, "actor_kind=actor (a beat row, NOT a seat)" as *u8), ctr)
  // H: the contract allows ONE chbeat_<YYYYMMDD>.jrnl day file in place of the convention directory
  let jfile: *u8 = sys_mmap(GT_PATH)
  gt_path2(jfile, jdir, "/chbeat_20260820.jrnl" as *u8)
  av[2] = tr as i64
  av[3] = troot as i64
  av[6] = jfile as i64
  let rcH: i64 = tr_run_capture_tr(subj, av, out, GT_CAP, olen, GT_TIMEOUT_MS, trunc)
  let nH: i64 = olen[0]
  var t24: i64 = 0
  if rcH == 0 { if tr_contains(out, nH, "verdict=COVERS" as *u8) == 1 { if tr_contains(out, nH, "files=1" as *u8) == 1 { if tr_contains(out, nH, "agree=YES" as *u8) == 1 { t24 = 1 } } } }
  gv_check("T24 single-day-file-journal-path-honoured-per-contract" as *u8, t24, ctr)
  return gv_verdict("nx_seatresume_gate" as *u8, ctr, "judges the subject's emitted evidence over runtime fixtures" as *u8)
299}
nx_seatresume_gate.nx source

`nx_seatresume_gate.nx` source
