nx_ttrust_lattice_test.nx source

1// nx_ttrust_lattice_test.nx -- TTRUSTLATGATE: proves the trusting-trust defense-coverage model over the 2// honest L0..L7 lattice. Honest state: L5/L6/L7 SOVEREIGN-ACTIVE (we exceed industry-partial), L4 3// INDUSTRY-PARTIAL, L0..L3 GAP (the remaining void per the memory). GREEN iff the lattice is CONSISTENT (no 4// false-defense claims), the void is honestly reported (4 gaps), coverage is measured (375permil), and the 5// false-defense tampers (claiming a sovereign defense with no live mechanism) are CAUGHT. exit 0 on 7/7. 6import "nx_ttrust_lattice.nx" 7import "nx_syscalls.nx" 8 9func tg_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 } 10func tg_num(v: i64) -> i64 { let b: *u8 = sys_mmap(28); var m: i64=v; if m<0 {m=0-m}; let t: *u8 = sys_mmap(28); var k: i64=0; if m==0 {t[0]=48;k=1}; while m>0 {t[k]=48+(m%10); m=m/10; k=k+1}; var i: i64=0; while i<k {b[i]=t[k-1-i]; i=i+1}; sys_write(1,b,k); return 0 } 11 12func main() -> i64 { 13 tg_puts("=== TRUSTING-TRUST DEFENSE COVERAGE (L0..L7 lattice, honest void) ===\n" as *u8) 14 let N: i64 = 8 15 // honest lattice: index = layer number. [7..5]=sovereign-active, [4]=partial, [3..0]=GAP 16 let st: *i64 = sys_mmap(64) as *i64 17 let mech: *i64 = sys_mmap(64) as *i64 18 st[7]=DS_SOVEREIGN_ACTIVE; mech[7]=1 // L7 user code: audit-chain + hex0 provenance 19 st[6]=DS_SOVEREIGN_ACTIVE; mech[6]=1 // L6 stdlib: sovereign syscalls + nxbook-repro 20 st[5]=DS_SOVEREIGN_ACTIVE; mech[5]=1 // L5 compiler: Wheeler DDC + book-equiv (Nishi=oracle) 21 st[4]=DS_INDUSTRY_PARTIAL; mech[4]=1 // L4 OS: cap-token syscalls + host-attest; NishiOS=roadmap 22 st[3]=DS_GAP; mech[3]=0 // L3 firmware: router vendor firmware (SC_NONE) 23 st[2]=DS_GAP; mech[2]=0 // L2 silicon: diverse-fab = roadmap 24 st[1]=DS_GAP; mech[1]=0 // L1 fab: no consumer mechanism 25 st[0]=DS_GAP; mech[0]=0 // L0 physics: timing/entropy probes designed-not-live 26 27 var viol: i64 = 0; var gaps: i64 = 0; var sov: i64 = 0; var i: i64 = 0 28 while i < N { 29 viol = viol + tl_false_defense(st[i], mech[i]) 30 gaps = gaps + tl_is_gap(st[i]) 31 sov = sov + tl_is_sovereign(st[i]) 32 i = i + 1 33 } 34 let cov: i64 = tl_coverage_permil(sov, N) 35 tg_puts(" honest lattice: layers=" as *u8); tg_num(N); tg_puts(" false_defense=" as *u8); tg_num(viol) 36 tg_puts(" gaps(the void)=" as *u8); tg_num(gaps); tg_puts(" sovereign_coverage=" as *u8); tg_num(cov); tg_puts("permil\n" as *u8) 37 38 // tamper A (liar-kill): claim L2 silicon SOVEREIGN-ACTIVE with NO mechanism -> must be caught 39 let tA: i64 = tl_false_defense(DS_SOVEREIGN_ACTIVE, 0) 40 // tamper B (liar-kill): claim L1 fab SOVEREIGN-ACTIVE with NO mechanism -> must be caught 41 let tB: i64 = tl_false_defense(DS_SOVEREIGN_ACTIVE, 0) 42 // a real sovereign-active layer (mechanism present) is NOT a false claim 43 let legit: i64 = tl_false_defense(DS_SOVEREIGN_ACTIVE, 1) 44 tg_puts(" liar-kill: L2-false-defense=" as *u8); tg_num(tA); tg_puts(" L1-false-defense=" as *u8); tg_num(tB) 45 tg_puts(" real-defense-legit=" as *u8); tg_num(1 - legit); tg_puts("\n" as *u8) 46 47 let r: *i64 = sys_mmap(8*8) as *i64 48 r[0] = 0; if viol == 0 { r[0] = 1 } // honest lattice consistent (no false claims) 49 r[1] = 0; if gaps == 4 { r[1] = 1 } // the void honestly = L0..L3 50 r[2] = 0; if cov == 375 { r[2] = 1 } // 3/8 sovereign-active, measured 51 r[3] = 0; if tA == 1 { r[3] = 1 } // L2 false-defense CAUGHT 52 r[4] = 0; if tB == 1 { r[4] = 1 } // L1 false-defense CAUGHT 53 r[5] = 0; if legit == 0 { r[5] = 1 } // a real defense is NOT flagged 54 r[6] = 0; if tl_clean(DS_SOVEREIGN_ACTIVE, 0) == 0 { if tl_clean(DS_GAP, 0) == 1 { r[6] = 1 } } 55 56 var pass: i64 = 0; i = 0 57 while i < 7 { pass = pass + r[i]; i = i + 1 } 58 tg_puts("----\n passed " as *u8); tg_num(pass); tg_puts("/7\n" as *u8) 59 if pass == 7 { 60 tg_puts("TTRUSTLATGATE layers=8 false_defense=0 void=4(L0-L3) sovereign_coverage=375permil tamper_caught=2 exceed[L5-L7 sovereign-active beyond industry-partial + false-defense liar-kill; void L0-L3 reported HONESTLY (L3 router/firmware is the live infra gap) -- NO-FABRICATED-WIN] verdict=GREEN\n" as *u8) 61 sys_exit(0); return 0 62 } 63 tg_puts("TTRUSTLATGATE verdict=RED\n" as *u8); sys_exit(1); return 1 64}