nx_torrent_access_gate.nx source
↩ module page · 68 lines · 4948 B
1// nx_torrent_access_gate.nx -- referee for the torrent download/stream AREA access policy.
2// PROVES the operator's rule as a deny-by-default / fail-closed decision matrix:
3// AREA_SFW ("media", required FAMILY 1): owner(3) ALLOW, family(1) ALLOW, anon(0) DENY, junk DENY
4// AREA_NSFW ("gallery", required OWNER 3): owner(3) ALLOW, family(1) DENY <-- the leak-check, anon DENY
5// UNKNOWN area: DENY even for owner (no download to a bogus destination)
6// GREEN iff every row matches (liar-kill: a single family->NSFW ALLOW = an NSFW LEAK to a normal user = RED).
7// Prints verdict=GREEN to STDOUT *and* returns the exit code (0=pass) -- so a stdout sweep never reads "empty".
8// Durable verdict -> knowledge/status/torrent_access_gate.log. license_tier: ORIGINAL
9import "nx_torrent_access.nx"
10
11func g_puts(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
12func g_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 }
13func g_w(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 }
14func g_wn(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 }
15
16// one decision-matrix row: print label + got/want, return 1 if match else 0.
17func chk(got: i64, want: i64, label: *u8) -> i64 {
18 g_puts(" "); g_puts(label); g_puts(" got="); g_num(got); g_puts(" want="); g_num(want)
19 if got == want { g_puts(" PASS\n"); return 1 }
20 g_puts(" FAIL\n"); return 0
21}
22
23func main() -> i64 {
24 g_puts("=== TORRENT ACCESS GATE (download/stream by AREA: media=SFW family+, gallery=NSFW operator-only; deny-by-default) ===\n" as *u8)
25 var pass: i64=0
26 var rows: i64=0
27
28 // --- single-vocabulary asserts (must match nx_galx_authz / nx_image_access) ---
29 rows=rows+1; pass=pass+chk(NX_TACCESS_OWNER, 3, "OWNER==3" as *u8)
30 rows=rows+1; pass=pass+chk(NX_TACCESS_FAMILY, 1, "FAMILY==1" as *u8)
31 rows=rows+1; pass=pass+chk(nx_taccess_required_level(NX_TAREA_SFW), 1, "required(media/SFW)==1" as *u8)
32 rows=rows+1; pass=pass+chk(nx_taccess_required_level(NX_TAREA_NSFW), 3, "required(gallery/NSFW)==3" as *u8)
33
34 // --- OWNER (operator, level 3): both areas ALLOW ---
35 rows=rows+1; pass=pass+chk(nx_taccess_allow(3, NX_TAREA_NSFW), NX_TACCESS_ALLOW, "owner(3)->gallery/NSFW" as *u8)
36 rows=rows+1; pass=pass+chk(nx_taccess_allow(3, NX_TAREA_SFW), NX_TACCESS_ALLOW, "owner(3)->media/SFW" as *u8)
37
38 // --- level 2 (below owner): SFW ALLOW, NSFW DENY ---
39 rows=rows+1; pass=pass+chk(nx_taccess_allow(2, NX_TAREA_SFW), NX_TACCESS_ALLOW, "lvl2->media/SFW" as *u8)
40 rows=rows+1; pass=pass+chk(nx_taccess_allow(2, NX_TAREA_NSFW), NX_TACCESS_DENY, "lvl2->gallery/NSFW(deny)" as *u8)
41
42 // --- FAMILY (level 1): SFW ALLOW (they download here), NSFW DENY (THE leak-check) ---
43 rows=rows+1; pass=pass+chk(nx_taccess_allow(1, NX_TAREA_SFW), NX_TACCESS_ALLOW, "family(1)->media/SFW" as *u8)
44 rows=rows+1; pass=pass+chk(nx_taccess_allow(1, NX_TAREA_NSFW), NX_TACCESS_DENY, "family(1)->gallery/NSFW(LEAK-CHECK)" as *u8)
45
46 // --- ANON (level 0): both DENY (must be logged in to download) ---
47 rows=rows+1; pass=pass+chk(nx_taccess_allow(0, NX_TAREA_SFW), NX_TACCESS_DENY, "anon(0)->media/SFW(deny)" as *u8)
48 rows=rows+1; pass=pass+chk(nx_taccess_allow(0, NX_TAREA_NSFW), NX_TACCESS_DENY, "anon(0)->gallery/NSFW(deny)" as *u8)
49
50 // --- garbage/negative level: both DENY (fail-closed) ---
51 rows=rows+1; pass=pass+chk(nx_taccess_allow(0-5, NX_TAREA_SFW), NX_TACCESS_DENY, "junk(-5)->media/SFW(deny)" as *u8)
52 rows=rows+1; pass=pass+chk(nx_taccess_allow(0-5, NX_TAREA_NSFW), NX_TACCESS_DENY, "junk(-5)->gallery/NSFW(deny)" as *u8)
53
54 // --- UNKNOWN area: DENY even for the owner (no download to a bogus destination) ---
55 rows=rows+1; pass=pass+chk(nx_taccess_allow(3, 7), NX_TACCESS_DENY, "owner(3)->area#7(unknown,deny)" as *u8)
56
57 g_puts("----\nTORRENT-ACCESS-GATE rows=" as *u8); g_num(rows); g_puts(" pass=" as *u8); g_num(pass)
58 if pass==rows { g_puts(" verdict=GREEN\n" as *u8) } else { g_puts(" verdict=RED\n" as *u8) }
59
60 let lg: i64=sys_openat_append("knowledge/status/torrent_access_gate.log" as *u8, 0x1a4)
61 if lg>=0 {
62 g_w(lg, "TORRENT-ACCESS-GATE rows=" as *u8); g_wn(lg, rows); g_w(lg, " pass=" as *u8); g_wn(lg, pass)
63 if pass==rows { g_w(lg, " verdict=GREEN\n" as *u8) } else { g_w(lg, " verdict=RED\n" as *u8) }
64 sys_close(lg)
65 }
66 if pass==rows { sys_exit(0); return 0 }
67 sys_exit(1); return 1
68}