nx_video_embed_exceed.nx source

1// nx_video_embed_exceed.nx -- HONEST measured census for the <nishi-video> embeddable room vs the commercial 2// video/room embeds (YouTube / Vimeo / Jitsi / Whereby). Two kinds of axis, kept rigorously apart: 3// [EXCEED] sovereignty/security/privacy properties PROVEN by grep over our REAL emitted artifacts 4// (web_assets/video_embed.html + embed.js) -- cited to a real file, refused if the file is missing. 5// [BEHIND] axes where the commercial embeds genuinely win -- NAMED, not hidden (hardware decode, CDN scale, 6// codec intra-efficiency). Concessions, stated straight. 7// [PENDING] the per-competitor HEAD-TO-HEAD is NOT claimed until a sovereign-fetched competitor corpus 8// (knowledge/index/video_embed_competitors.tsv) exists. No corpus -> we print "NOT YET MEASURED" 9// and REFUSE to emit a head-to-head verdict. This is the no-wave law: measure what we can prove, 10// never wave what we have not fetched. [[feedback-no-wave-measured-exceed]] 11// Integrity GREEN iff every claimed EXCEED axis is substantiated by a real artifact AND least-privilege holds. 12// license_tier: ORIGINAL 13import "nx_syscalls.nx" 14import "nx_itoa_lib.nx" // shared MSB-first emitter (zero-alloc) 15const K_MAGIC_2097152: i64 = 2097152 16 17func ex_puts(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } 18// MIGRATED to the shared emitter (debt 1785563586). The old body mmapped a scratch buffer 19// per call and never freed it. At PAGE granularity that is 4096B leaked PER CALL -- the 20// defect that took 28.5GB of a 36GB host in nx_ts_lumadiff (2MB input, ~3.66M calls). 21// nxi_* is MSB-first, allocates NOTHING, and emits identical bytes including the sign. 22func ex_pn(v: i64) -> i64 { nxi_out(v); return 0 } 23func ex_strlen(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} return n } 24 25// 1 found / 0 absent / -1 file missing 26func ex_has(path: *u8, needle: *u8) -> i64 { 27 let fd: i64=sys_openat_rd(path); if fd<0 { return 0-1 } 28 let cap: i64=K_MAGIC_2097152 29 let buf: *u8=sys_mmap(cap+16) 30 var total: i64=0; var nrd: i64=sys_read(fd, buf, cap) 31 while nrd>0 { total=total+nrd; if total>=cap { nrd=0 } else { nrd=sys_read(fd, ((buf as i64)+total) as *u8, cap-total) } } 32 sys_close(fd) 33 let nl: i64=ex_strlen(needle); if nl==0 { return 0 } 34 var i: i64=0 35 while i+nl<=total { var j: i64=0; var ok: i64=1; while j<nl { if buf[i+j]!=needle[j] { ok=0; j=nl } else { j=j+1 } } if ok==1 { return 1 } i=i+1 } 36 return 0 37} 38 39// EXCEED axis: artifact `path` must (want=1) or must-not (want=0) contain `marker`. st[0]=exceed st[1]=red 40func ex_axis(name: *u8, path: *u8, marker: *u8, want: i64, st: *i64) -> i64 { 41 let h: i64=ex_has(path, marker) 42 ex_puts(" [EXCEED] " as *u8); ex_puts(name) 43 if h < 0 { ex_puts(" -> RED (artifact missing, cannot substantiate)\n" as *u8); st[1]=st[1]+1; return 1 } 44 var holds: i64=0 45 if want==1 { if h==1 { holds=1 } } else { if h==0 { holds=1 } } 46 if holds==1 { ex_puts(" -> PROVEN (sovereign)\n" as *u8); st[0]=st[0]+1; return 0 } 47 ex_puts(" -> NOT MET (RED, would be an overclaim)\n" as *u8); st[1]=st[1]+1; return 1 48} 49func ex_behind(name: *u8) -> i64 { ex_puts(" [BEHIND] " as *u8); ex_puts(name); ex_puts("\n" as *u8); return 0 } 50 51func main() -> i64 { 52 let TGT: *u8="web_assets/video_embed.html" as *u8 53 let LDR: *u8="web_assets/embed.js" as *u8 54 let COMP: *u8="knowledge/index/video_embed_competitors.tsv" as *u8 55 let st: *i64 = sys_mmap(8*4) as *i64 56 st[0]=0; st[1]=0 57 58 ex_puts("=== <nishi-video> EMBED EXCEED CENSUS (vs YouTube/Vimeo/Jitsi/Whereby embeds; grep over REAL artifacts) ===\n" as *u8) 59 ex_puts("-- SOVEREIGNTY / PRIVACY / SECURITY (proven from our emitted artifacts) --\n" as *u8) 60 ex_axis("zero third-party script in iframe target (no src=http) " as *u8, TGT, "src=\"http" as *u8, 0, st) 61 ex_axis("zero third-party script in loader (no external src) " as *u8, LDR, "src=http" as *u8, 0, st) 62 ex_axis("zero tracking cookies (no document.cookie) " as *u8, TGT, "document.cookie" as *u8, 0, st) 63 ex_axis("origin-isolated sandbox (allow-same-origin + sandbox) " as *u8, LDR, "allow-same-origin" as *u8, 1, st) 64 ex_axis("LEAST-PRIVILEGE allow= grants camera+mic ONLY " as *u8, LDR, "camera; microphone" as *u8, 1, st) 65 ex_axis(" ...and does NOT grant geolocation " as *u8, LDR, "geolocation" as *u8, 0, st) 66 ex_axis(" ...and does NOT grant payment " as *u8, LDR, "payment" as *u8, 0, st) 67 ex_axis("inbound host messages ORIGIN-CHECKED (target) " as *u8, TGT, "e.origin!==PORIGIN" as *u8, 1, st) 68 ex_axis("bridge messages ORIGIN-CHECKED (loader) " as *u8, LDR, "e.origin!==self._host" as *u8, 1, st) 69 ex_axis("typed CustomEvent comms (not postMessage string-soup) " as *u8, LDR, "CustomEvent" as *u8, 1, st) 70 ex_axis("resource CSP locks connect-src to self " as *u8, TGT, "connect-src 'self'" as *u8, 1, st) 71 ex_axis("host allowlist (cannot be pointed at arbitrary origin) " as *u8, LDR, "ALLOW[host]" as *u8, 1, st) 72 ex_axis("referrer suppressed (no-referrer) " as *u8, LDR, "no-referrer" as *u8, 1, st) 73 74 ex_puts("-- HONEST BEHIND (where the commercial embeds genuinely win; named, not hidden) --\n" as *u8) 75 ex_behind("hardware-accelerated decode: browsers decode H.264/VP9/AV1 in silicon; our WHT path is software" as *u8) 76 ex_behind("global CDN/edge scale: a single sovereign relay is not a multi-PoP CDN (fine for family rooms)" as *u8) 77 ex_behind("codec intra-efficiency: ~1.6-3.8x vs H.264-intra's several-x more (RT-003 realframe finding)" as *u8) 78 ex_behind("captions/a11y + analytics dashboards: mature on commercial players; minimal here (by design)" as *u8) 79 80 ex_puts("-- PER-COMPETITOR HEAD-TO-HEAD --\n" as *u8) 81 let cc: i64=ex_has(COMP, "youtube" as *u8) 82 if cc < 0 { 83 ex_puts(" NOT YET MEASURED: no sovereign-fetched competitor corpus at knowledge/index/video_embed_competitors.tsv.\n" as *u8) 84 ex_puts(" REFUSING to emit a head-to-head verdict (no-wave law). NEXT: fetch + cite the embed docs of\n" as *u8) 85 ex_puts(" YouTube(iframe_api/youtube-nocookie), Vimeo(player.js/dnt), Jitsi(external_api.js), Whereby(iframe),\n" as *u8) 86 ex_puts(" then grade cookie-default / third-party-JS-weight / permission-scope per competitor over THAT corpus.\n" as *u8) 87 } else { 88 ex_puts(" competitor corpus present -> (head-to-head grading rung to be wired over it).\n" as *u8) 89 } 90 91 ex_puts("----\nCENSUS: sovereignty EXCEEDS PROVEN=" as *u8); ex_pn(st[0]) 92 ex_puts(" overclaim/RED=" as *u8); ex_pn(st[1]) 93 ex_puts(" + 4 named BEHIND axes + head-to-head DEFERRED to fetched evidence\n" as *u8) 94 ex_puts("HONEST FRAME: the embeddable WINS on sovereignty/privacy/least-privilege/clean-comms (proven above);\n" as *u8) 95 ex_puts(" it is BEHIND on hardware-decode/CDN/codec-efficiency (named); the per-competitor head-to-head is\n" as *u8) 96 ex_puts(" NOT claimed until fetched + cited. Narrow + measured -- never a blanket 'beats YouTube'.\n" as *u8) 97 98 let lg: i64=sys_openat_append("knowledge/status/video_embed_exceed.log" as *u8, 0x1a4) 99 if lg>=0 { var w: *u8="VIDEO-EMBED-EXCEED sovereignty_proven=" as *u8; var n: i64=0; while w[n]!=(0 as u8){n=n+1} sys_write(lg,w,n); sys_close(lg) } 100 101 if st[1]==0 { 102 ex_puts("CENSUS-INTEGRITY GREEN: every claimed sovereignty EXCEED is substantiated by a real artifact; nothing waved.\n" as *u8) 103 sys_exit(0); return 0 104 } 105 ex_puts("CENSUS-INTEGRITY RED: a claimed EXCEED axis could not be substantiated -> fix the artifact or drop the claim.\n" as *u8) 106 sys_exit(1); return 1 107}