nx_ship_behavior_authority_gate_t371.nx source
↩ module page · 20 lines · 1648 B
1import "nx_organ_ship_review_candidate_t371.nx"
2import "nx_gate_verdict.nx"
3func main()->i64{
4 if sys_chdir(BP_HOST)<0{return 2};let ctr:*i64=gv_ctr()
5 let liveSha:*u8=sys_mmap_try(80);let body:*u8=sys_mmap_try(64)
6 if (liveSha as i64)<=0||(body as i64)<=0{if (liveSha as i64)>0{sys_munmap_direct(liveSha,80)};if (body as i64)>0{sys_munmap_direct(body,64)};return 2}
7 var exact:i64=0
8 let rc:i64=os_adoption_review("nx_ship_loss_live_fixture_t370","nx_ship_loss_live_fixture_t370.elf","nx_ship_loss_live_fixture_t370.sov.elf.new","d9d29eb3267a712985d66cff15829f369581e06e0d23e4e601db38714b8b9d4b",0 as *i64,0,"fd4ed8ec7b193b4f49e4940544ffca674f18eb95a52f97f30a04bfdb94234158",0 as *u8,liveSha,&exact)
9 gv_check("exact reviewed twenty-loss set marks only loss authorization",exact==1,ctr)
10 gv_check("loss authorization still cannot approve changed behavior",rc==32,ctr)
11 os_cat(body,0,"confirm=yes");let off:i64=os_slen(body)
12 let noLoss:i64=os_promote_loss_clause(body,off,0)
13 gv_check("no-loss promotion request has no loss bypass",noLoss==off&&os_streq(body,"confirm=yes")==1,ctr)
14 let withLoss:i64=os_promote_loss_clause(body,off,exact)
15 gv_check("exact-approved-loss request includes explicit loss permission",withLoss>off&&os_streq(body,"confirm=yes&allow_capability_loss=yes")==1,ctr)
16 os_cat(body,0,"confirm=yes");let invalid:i64=os_promote_loss_clause(body,off,2)
17 gv_check("non-authorization state cannot add permission",invalid==off&&os_streq(body,"confirm=yes")==1,ctr)
18 sys_munmap_direct(liveSha,80);sys_munmap_direct(body,64)
19 return gv_verdict("SHIP-REVIEW-AUTHORITY",ctr,"Disposable fixture only; no promotion request dispatched")
20}