nx_ttrust_response_test.nx source

1// nx_ttrust_response_test.nx -- CMORONIGATE: proves the Captain Moroni active-defense FSM. GREEN iff: 2// - a full confirmed+continued+completed attack WITH authorization reaches phase 6 (scorched earth), 3// - the SAME attack WITHOUT an auth token STOPS at phase 5 (no vigilante -- the authorization gate), 4// - a single-axis anomaly does NOT escalate (phase 0 -- no 90s car alarm; the false-positive liar-kill), 5// - the response is TIERED (desist -> stop at soft-refuse 3; persist-but-incomplete -> entrap 4). 6// exit 0 on 7/7. 7import "nx_ttrust_response.nx" 8import "nx_syscalls.nx" 9 10func cg_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 } 11func cg_num(v: i64) -> i64 { let b: *u8 = sys_mmap(28); var m: i64=v; if m<0 {m=0-m}; let t: *u8 = sys_mmap(28); var k: i64=0; if m==0 {t[0]=48;k=1}; while m>0 {t[k]=48+(m%10); m=m/10; k=k+1}; var i: i64=0; while i<k {b[i]=t[k-1-i]; i=i+1}; sys_write(1,b,k); return 0 } 12 13func main() -> i64 { 14 cg_puts("=== CAPTAIN MORONI ACTIVE-DEFENSE FSM (defensive by default; scorch only AUTHORIZED) ===\n" as *u8) 15 16 // confirmation axes 17 let three_axis: i64 = cm_axes_confirmed(1, 1, 1) // behavior + context + provenance all violate 18 let one_axis: i64 = cm_axes_confirmed(1, 0, 0) // a lone anomaly (wind) -- not a contract violation 19 let two_axis: i64 = cm_axes_confirmed(1, 1, 0) // still not all three 20 21 // full attack, authorized -> scorched earth (phase 6) 22 let p_full_auth: i64 = cm_phase(three_axis, 1, 1, 1) 23 // full attack, NO authorization -> STOP at attribution (phase 5) [the no-vigilante gate] 24 let p_full_noauth: i64 = cm_phase(three_axis, 1, 1, 0) 25 // single-axis anomaly -> principled defense only (phase 0) [anti-car-alarm] 26 let p_one: i64 = cm_phase(one_axis, 1, 1, 1) 27 // confirmed but attacker desisted -> soft refuse (phase 3) [tiered] 28 let p_desist: i64 = cm_phase(three_axis, 0, 0, 1) 29 // confirmed + persisted but not completed -> entrap (phase 4) [tiered] 30 let p_entrap: i64 = cm_phase(three_axis, 1, 0, 1) 31 32 cg_puts(" full+AUTH -> phase " as *u8); cg_num(p_full_auth); cg_puts(" (6=SCORCH)\n" as *u8) 33 cg_puts(" full+NO-auth -> phase " as *u8); cg_num(p_full_noauth); cg_puts(" (5=ATTRIBUTE, scorch REFUSED -- no vigilante)\n" as *u8) 34 cg_puts(" single-axis -> phase " as *u8); cg_num(p_one); cg_puts(" (0=PRINCIPLED, no car-alarm)\n" as *u8) 35 cg_puts(" confirmed+desist-> phase " as *u8); cg_num(p_desist); cg_puts(" (3=SOFT-REFUSE)\n" as *u8) 36 cg_puts(" confirmed+persist-> phase " as *u8); cg_num(p_entrap); cg_puts(" (4=ENTRAP)\n" as *u8) 37 38 let r: *i64 = sys_mmap(8*8) as *i64 39 r[0] = 0; if p_full_auth == CM_SCORCH { r[0] = 1 } // authorized full response reaches scorch 40 r[1] = 0; if p_full_noauth == CM_ATTRIBUTE { r[1] = 1 } // no auth -> stops at attribution 41 r[2] = 0; if cm_stayed_defensive(p_full_noauth) == 1 { r[2] = 1 } // and stayed defensive (no counter-pipe) 42 r[3] = 0; if p_one == CM_PRINCIPLED { r[3] = 1 } // lone anomaly never escalates 43 r[4] = 0; if two_axis == 0 { if one_axis == 0 { if three_axis == 1 { r[4] = 1 } } } // multi-axis is real 44 r[5] = 0; if p_desist == CM_SOFT_REFUSE { r[5] = 1 } // tiered: desist stops early 45 r[6] = 0; if p_entrap == CM_ENTRAP { r[6] = 1 } // tiered: persist-incomplete entraps 46 47 var pass: i64 = 0; var i: i64 = 0 48 while i < 7 { pass = pass + r[i]; i = i + 1 } 49 cg_puts("----\n passed " as *u8); cg_num(pass); cg_puts("/7\n" as *u8) 50 if pass == 7 { 51 cg_puts("CMORONIGATE phases=7(0..6) full_authorized=6 unauthorized_stops_at=5 false_positive=phase0 tiered[desist=3,entrap=4] exceed[active-defense + counter-narrate-via-attacker-pipe (no industry analog) GATED on hex0-rooted Auth token = no-vigilante + anti-car-alarm; counter-offensive is OPERATOR-authorized only] verdict=GREEN\n" as *u8) 52 sys_exit(0); return 0 53 } 54 cg_puts("CMORONIGATE verdict=RED\n" as *u8); sys_exit(1); return 1 55}