code wiki / _hdl_build / nx_vizsla_realm_gate.nx
`nx_vizsla_realm_gate.nx` source

↩ module page · 223 lines · 9685 B
1// nx_vizsla_realm_gate.nx -- VIZSLA realm gate: ONE person, THREE integrated relationship books with SEPARATE
2// focuses (personal PRM / professional / business CRM). Proves each realm provisions its OWN focus tiers, adds
3// contacts independently, and is fully ISOLATED from the others -- while sharing the person + the engine.
4// 100% sovereign: runs nx_vizsla_realm (which composes the tenant engine), greps the realm books + briefs.
5//
6// Rows:
7//   1 personal-focus     rp_personal.contacts has "TIER family 7"
8//   2 professional-focus rp_professional.contacts has "TIER recruiter 30"
9//   3 business-focus     rp_business.contacts has "TIER lead 7" AND "CONF soon_days 7" (CRM = tighter follow-up)
10//   4 add-personal       add-contact personal mom -> CONTACT mom Mom family 06-30
11//   5 add-business       add-contact business acme -> CONTACT acme Acme-Corp customer -
12//   6 brief-personal-iso brief personal shows mom, shows NOTHING of business (no "acme")
13//   7 brief-business-iso brief business shows acme, shows NOTHING of personal (no "mom")
14//   8 neg-bad-realm      provision realm=frobnicate -> exit 1
15// Evidence: VIZSLA-REALM-GATE -> stdout + knowledge/status/vizsla_gate.log; exit 0 iff 8/8.
16// license_tier: ORIGINAL
17import "nx_syscalls.nx"
18import "nx_gate_verdict.nx"
19
20func og_slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n }
21func og_p(s: *u8) -> i64 { sys_write(1, s, og_slen(s)); return 0 }
22
23func og_cat(dst: *u8, off: i64, s: *u8) -> i64 {
  var i: i64 = 0
  while s[i] != (0 as u8) { dst[off + i] = s[i]; i = i + 1 }
  return off + i
27}
28
29func og_catn(dst: *u8, off: i64, v: i64) -> i64 {
  var o: i64 = off
  var m: i64 = v
  if m < 0 { dst[o] = 45 as u8; o = o + 1; m = 0 - m }
  let t: *u8 = sys_mmap(28)
  var k: i64 = 0
  if m == 0 { t[0] = 48 as u8; k = 1 }
  while m > 0 { t[k] = (48 + (m % 10)) as u8; m = m / 10; k = k + 1 }
  var i: i64 = 0
  while i < k { dst[o + i] = t[k - 1 - i]; i = i + 1 }
  return o + k
40}
41
42func og_readall(path: *u8, szout: *i64) -> *u8 {
  let fd: i64 = sys_openat_rd(path)
  if fd < 0 { szout[0] = 0 - 1; return 0 as *u8 }
  let sz: i64 = sys_lseek(fd, 0, 2)
  sys_lseek(fd, 0, 0)
  let buf: *u8 = sys_mmap(sz + 64)
  var got: i64 = 0
  var n: i64 = 1
  while n > 0 { n = sys_read(fd, (buf as i64 + got) as *u8, 65536); if n > 0 { got = got + n } }
  sys_close(fd)
  szout[0] = got
  return buf
54}
55
56func og_runv(elf: *u8, args: *i64, outpath: *u8) -> i64 {
  let pid: i64 = sys_fork()
  if pid == 0 {
      if (outpath as i64) != 0 {
          let ofd: i64 = sys_openat_wr(outpath, 0x1a4)
          if ofd >= 0 { sys_dup3(ofd, 1, 0); sys_dup3(ofd, 2, 0) }
      }
      let argv: *i64 = sys_mmap(128) as *i64
      argv[0] = elf as i64
      var i: i64 = 0
      var go: i64 = 1
      while go == 1 { if args[i] == 0 { go = 0 } else { argv[i + 1] = args[i]; i = i + 1 } }
      argv[i + 1] = 0
      let envp: *i64 = sys_mmap(16) as *i64
      envp[0] = 0
      sys_execve(elf, argv, envp)
      sys_exit(127)
  }
  let st: *i64 = sys_mmap(16) as *i64
  sys_wait4(pid, st, 0)
  let sig: i64 = st[0] & 0x7f
  if sig != 0 { return 128 + sig }
  return (st[0] >> 8) & 0xff
79}
80
81func og_has(path: *u8, needle: *u8) -> i64 {
  let szp: *i64 = sys_mmap(16) as *i64
  let b: *u8 = og_readall(path, szp)
  let sz: i64 = szp[0]
  let n: i64 = og_slen(needle)
  if sz < n { return 0 }
  var i: i64 = 0
  while i + n <= sz {
      var ok: i64 = 1
      var j: i64 = 0
      while j < n { if b[i + j] != needle[j] { ok = 0; j = n } else { j = j + 1 } }
      if ok == 1 { return 1 }
      i = i + 1
  }
  return 0
96}
97
98func og_row(name: *u8, pass: i64) -> i64 {
  og_p("ROW " as *u8); og_p(name)
  if pass == 1 { og_p(" PASS\n" as *u8) } else { og_p(" FAIL\n" as *u8) }
  return pass
102}
103
104func og_args(a1: *u8, a2: *u8, a3: *u8, a4: *u8, a5: *u8) -> *i64 {
  let a: *i64 = sys_mmap(64) as *i64
  a[0] = a1 as i64; a[1] = a2 as i64; a[2] = a3 as i64; a[3] = a4 as i64; a[4] = a5 as i64; a[5] = 0
  return a
108}
109
110func og_args8(a1: *u8, a2: *u8, a3: *u8, a4: *u8, a5: *u8, a6: *u8, a7: *u8, a8: *u8) -> *i64 {
  let a: *i64 = sys_mmap(96) as *i64
  a[0] = a1 as i64; a[1] = a2 as i64; a[2] = a3 as i64; a[3] = a4 as i64
  a[4] = a5 as i64; a[5] = a6 as i64; a[6] = a7 as i64; a[7] = a8 as i64; a[8] = 0
  return a
115}
116
117func og_join(base: *u8, name: *u8) -> *u8 {
  let p: *u8 = sys_mmap(512)
  var o: i64 = 0
  o = og_cat(p, o, base); o = og_cat(p, o, name); p[o] = 0 as u8
  return p
122}
123
124func main(argc: i64, argv: *i64) -> i64 {
  og_p("=== VIZSLA REALM GATE: personal/professional/business -- integrated, separate focuses, isolated ===\n" as *u8)
  var ob: *u8 = "buildroot/_build/nx_vizsla_realm.sov.elf" as *u8
  if argc > 1 { ob = argv[1] as *u8 }
  let pr: i64 = sys_openat_rd(ob)
  if pr >= 0 { sys_close(pr) }
  else {
      og_p(" instrument missing -> rebuilding via durable runner\n" as *u8)
      og_runv("_offc/nx_sov_build_run.elf" as *u8, og_args("nx_vizsla_realm" as *u8, 0 as *u8, 0 as *u8, 0 as *u8, 0 as *u8), "/tmp/vzr_rebuild.out" as *u8)
  }
134
  let base: *u8 = sys_mmap(256)
  var bo: i64 = 0
  bo = og_cat(base, bo, "/tmp/vzrG" as *u8); bo = og_catn(base, bo, sys_now_us()); bo = og_cat(base, bo, "_" as *u8)
  base[bo] = 0 as u8
139
  let cp_per: *u8 = og_join(base, "rp_personal.contacts.txt" as *u8)
  let cp_pro: *u8 = og_join(base, "rp_professional.contacts.txt" as *u8)
  let cp_biz: *u8 = og_join(base, "rp_business.contacts.txt" as *u8)
  let today: *u8 = "2026-06-23" as *u8
  var pass: i64 = 0
  var r: i64 = 0
146
  // provision all three realms for person "rp"
  og_runv(ob, og_args("provision" as *u8, base, "rp" as *u8, "personal" as *u8, 0 as *u8), "/tmp/vzr_pp.txt" as *u8)
  og_runv(ob, og_args("provision" as *u8, base, "rp" as *u8, "professional" as *u8, 0 as *u8), "/tmp/vzr_pr.txt" as *u8)
  og_runv(ob, og_args("provision" as *u8, base, "rp" as *u8, "business" as *u8, 0 as *u8), "/tmp/vzr_pb.txt" as *u8)
151
  // rows 1-3: each realm provisioned its OWN focus tiers
  r = og_has(cp_per, "TIER family 7" as *u8)
  pass = pass + og_row("personal-focus" as *u8, r)
155
  r = og_has(cp_pro, "TIER recruiter 30" as *u8)
  pass = pass + og_row("professional-focus" as *u8, r)
158
  r = 0
  if og_has(cp_biz, "TIER lead 7" as *u8) == 1 { if og_has(cp_biz, "CONF soon_days 7" as *u8) == 1 { r = 1 } }
  pass = pass + og_row("business-focus" as *u8, r)
162
  // rows 4-5: add contacts into specific realms
  og_runv(ob, og_args8("add-contact" as *u8, base, "rp" as *u8, "personal" as *u8, "mom" as *u8, "Mom" as *u8, "family" as *u8, "06-30" as *u8), "/tmp/vzr_a1.txt" as *u8)
  r = og_has(cp_per, "CONTACT mom Mom family 06-30" as *u8)
  pass = pass + og_row("add-personal" as *u8, r)
167
  og_runv(ob, og_args8("add-contact" as *u8, base, "rp" as *u8, "business" as *u8, "acme" as *u8, "Acme-Corp" as *u8, "customer" as *u8, "-" as *u8), "/tmp/vzr_a2.txt" as *u8)
  r = og_has(cp_biz, "CONTACT acme Acme-Corp customer -" as *u8)
  pass = pass + og_row("add-business" as *u8, r)
171
  // rows 6-7: per-realm briefs are ISOLATED
  og_runv(ob, og_args("brief" as *u8, base, "rp" as *u8, "personal" as *u8, today), "/tmp/vzr_bp.txt" as *u8)
  var pmom: i64 = og_has("/tmp/vzr_bp.txt" as *u8, "contact=mom" as *u8)
  var pacme: i64 = og_has("/tmp/vzr_bp.txt" as *u8, "acme" as *u8)
  r = 0
  if pmom == 1 { if pacme == 0 { r = 1 } }
  pass = pass + og_row("brief-personal-isolated" as *u8, r)
179
  og_runv(ob, og_args("brief" as *u8, base, "rp" as *u8, "business" as *u8, today), "/tmp/vzr_bb.txt" as *u8)
  var bacme: i64 = og_has("/tmp/vzr_bb.txt" as *u8, "contact=acme" as *u8)
  var bmom: i64 = og_has("/tmp/vzr_bb.txt" as *u8, "mom" as *u8)
  r = 0
  if bacme == 1 { if bmom == 0 { r = 1 } }
  pass = pass + og_row("brief-business-isolated" as *u8, r)
186
  // row 8: neg-control -- unknown realm
  let rc8: i64 = og_runv(ob, og_args("provision" as *u8, base, "rp" as *u8, "frobnicate" as *u8, 0 as *u8), "/tmp/vzr_neg.txt" as *u8)
  r = 0
  if rc8 == 1 { r = 1 }
  pass = pass + og_row("neg-bad-realm" as *u8, r)
192
  let permil: i64 = (pass * 1000) / 8
  let logfd: i64 = sys_openat_append("knowledge/status/vizsla_gate.log" as *u8, 0x1a4)
  var fdi: i64 = 0
  while fdi < 2 {
      var fd: i64 = 1
      if fdi == 1 { fd = logfd }
      if fd > 0 {
          let line: *u8 = sys_mmap(256)
          var o: i64 = 0
          o = og_cat(line, o, "VIZSLA-REALM-GATE epoch=" as *u8)
          o = og_catn(line, o, sys_now_realtime_sec())
          o = og_cat(line, o, " rows=8 pass=" as *u8)
          o = og_catn(line, o, pass)
          o = og_cat(line, o, " permil=" as *u8)
          o = og_catn(line, o, permil)
          if pass == 8 { o = og_cat(line, o, " verdict=GREEN\n" as *u8) } else { o = og_cat(line, o, " verdict=RED\n" as *u8) }
          sys_write(fd, line, o)
      }
      fdi = fdi + 1
  }
  if logfd > 0 { sys_close(logfd) }
  // MIGRATED onto nx_gate_verdict by nx_gate_dry_apply (D001, minimal form): every check
  // row above is untouched, so the PASS/FAIL vector cannot change; only the hand-rolled
  // verdict emission is replaced by the ONE shared base class. Proven by nx_gate_migrate verify.
  let ctr__dry: *i64 = gv_ctr()
  ctr__dry[0] = pass
  ctr__dry[1] = 8
  let rc__dry: i64 = gv_verdict("VIZSLA-REALM-GATE" as *u8, ctr__dry, "teeth unchanged; verdict emission migrated onto the shared base class" as *u8)
  sys_exit(rc__dry)
  return rc__dry
223}
nx_vizsla_realm_gate.nx source

`nx_vizsla_realm_gate.nx` source
