code wiki / _hdl_build / nx_vizsla_render_gate.nx
`nx_vizsla_render_gate.nx` source

↩ module page · 246 lines · 9905 B
1// nx_vizsla_render_gate.nx -- VIZSLA render gate: the first-party Nishi-browser UI page is gate-proven to carry
2// the relationship brief AND to be SOVEREIGN (0 JS, 0 third-party loads) -- the operator's privacy-first exceed.
3// 100% sovereign: writes a tenant fixture, loads it via the blessed relate engine, renders via nx_vizsla_render,
4// greps the emitted HTML.
5//
6// tenant "rt" @2026-06-22: rmom inner last 06-15=FRESH bday 06-30=in 8d + THANKS gift; rdave close never=NEW
7//   followup + OBLIGATION OWE loan  => brief reach=1 bday=1 thanks=1 owed=1.
8//
9// Rows:
10//   1 render-verdict       VIZSLA-RENDER tenant=rt reach=1 bday=1 thanks=1 owed=1 ... sovereign=1
11//   2 page-has-contact     emitted HTML contains <b>rdave</b> (a real relationship card)
12//   3 page-headers         "Reach out today" + "Birthdays coming up" section headers
13//   4 page-privacy         the privacy statement ("never uploaded") is in the page
14//   5 SOVEREIGN-no-script  page contains ZERO "<script"
15//   6 SOVEREIGN-no-http    page contains ZERO "http" (no external CSS/font/img/script)
16//   7 SOVEREIGN-no-link    page contains ZERO "<link"
17//   8 determinism          render byte-identical twice
18//   9 loud-fail-args       render with a missing outfile arg => exit 1
19// Evidence: VIZSLA-RENDER-GATE -> stdout + knowledge/status/vizsla_gate.log; exit 0 iff 9/9.
20// license_tier: ORIGINAL
21import "nx_syscalls.nx"
22import "nx_gate_verdict.nx"
23
24func og_slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n }
25func og_p(s: *u8) -> i64 { sys_write(1, s, og_slen(s)); return 0 }
26
27func og_cat(dst: *u8, off: i64, s: *u8) -> i64 {
  var i: i64 = 0
  while s[i] != (0 as u8) { dst[off + i] = s[i]; i = i + 1 }
  return off + i
31}
32
33func og_catn(dst: *u8, off: i64, v: i64) -> i64 {
  var o: i64 = off
  var m: i64 = v
  if m < 0 { dst[o] = 45 as u8; o = o + 1; m = 0 - m }
  let t: *u8 = sys_mmap(28)
  var k: i64 = 0
  if m == 0 { t[0] = 48 as u8; k = 1 }
  while m > 0 { t[k] = (48 + (m % 10)) as u8; m = m / 10; k = k + 1 }
  var i: i64 = 0
  while i < k { dst[o + i] = t[k - 1 - i]; i = i + 1 }
  return o + k
44}
45
46func og_write(path: *u8, content: *u8) -> i64 {
  let fd: i64 = sys_openat_wr(path, 0x1a4)
  if fd < 0 { return 0 - 1 }
  sys_write(fd, content, og_slen(content))
  sys_close(fd)
  return 0
52}
53
54func og_readall(path: *u8, szout: *i64) -> *u8 {
  let fd: i64 = sys_openat_rd(path)
  if fd < 0 { szout[0] = 0 - 1; return 0 as *u8 }
  let sz: i64 = sys_lseek(fd, 0, 2)
  sys_lseek(fd, 0, 0)
  let buf: *u8 = sys_mmap(sz + 64)
  var got: i64 = 0
  var n: i64 = 1
  while n > 0 { n = sys_read(fd, (buf as i64 + got) as *u8, 65536); if n > 0 { got = got + n } }
  sys_close(fd)
  szout[0] = got
  return buf
66}
67
68func og_runv(elf: *u8, args: *i64, outpath: *u8) -> i64 {
  let pid: i64 = sys_fork()
  if pid == 0 {
      if (outpath as i64) != 0 {
          let ofd: i64 = sys_openat_wr(outpath, 0x1a4)
          if ofd >= 0 { sys_dup3(ofd, 1, 0); sys_dup3(ofd, 2, 0) }
      }
      let argv: *i64 = sys_mmap(128) as *i64
      argv[0] = elf as i64
      var i: i64 = 0
      var go: i64 = 1
      while go == 1 { if args[i] == 0 { go = 0 } else { argv[i + 1] = args[i]; i = i + 1 } }
      argv[i + 1] = 0
      let envp: *i64 = sys_mmap(16) as *i64
      envp[0] = 0
      sys_execve(elf, argv, envp)
      sys_exit(127)
  }
  let st: *i64 = sys_mmap(16) as *i64
  sys_wait4(pid, st, 0)
  let sig: i64 = st[0] & 0x7f
  if sig != 0 { return 128 + sig }
  return (st[0] >> 8) & 0xff
91}
92
93func og_has(path: *u8, needle: *u8) -> i64 {
  let szp: *i64 = sys_mmap(16) as *i64
  let b: *u8 = og_readall(path, szp)
  let sz: i64 = szp[0]
  let n: i64 = og_slen(needle)
  if sz < n { return 0 }
  var i: i64 = 0
  while i + n <= sz {
      var ok: i64 = 1
      var j: i64 = 0
      while j < n { if b[i + j] != needle[j] { ok = 0; j = n } else { j = j + 1 } }
      if ok == 1 { return 1 }
      i = i + 1
  }
  return 0
108}
109
110func og_fileeq(p1: *u8, p2: *u8) -> i64 {
  let s1: *i64 = sys_mmap(16) as *i64
  let s2: *i64 = sys_mmap(16) as *i64
  let b1: *u8 = og_readall(p1, s1)
  let b2: *u8 = og_readall(p2, s2)
  if s1[0] != s2[0] { return 0 }
  if s1[0] <= 0 { return 0 }
  var i: i64 = 0
  while i < s1[0] { if b1[i] != b2[i] { return 0 } i = i + 1 }
  return 1
120}
121
122func og_row(name: *u8, pass: i64) -> i64 {
  og_p("ROW " as *u8); og_p(name)
  if pass == 1 { og_p(" PASS\n" as *u8) } else { og_p(" FAIL\n" as *u8) }
  return pass
126}
127
128func og_args(a1: *u8, a2: *u8, a3: *u8, a4: *u8, a5: *u8) -> *i64 {
  let a: *i64 = sys_mmap(64) as *i64
  a[0] = a1 as i64; a[1] = a2 as i64; a[2] = a3 as i64; a[3] = a4 as i64; a[4] = a5 as i64; a[5] = 0
  return a
132}
133
134func og_join(base: *u8, name: *u8) -> *u8 {
  let p: *u8 = sys_mmap(512)
  var o: i64 = 0
  o = og_cat(p, o, base); o = og_cat(p, o, name); p[o] = 0 as u8
  return p
139}
140
141func main(argc: i64, argv: *i64) -> i64 {
  og_p("=== VIZSLA RENDER GATE: first-party UI page carries the brief + is SOVEREIGN (0 JS/3rd-party) ===\n" as *u8)
  var ob: *u8 = "buildroot/_build/nx_vizsla_render.sov.elf" as *u8
  if argc > 1 { ob = argv[1] as *u8 }
  let pr: i64 = sys_openat_rd(ob)
  if pr >= 0 { sys_close(pr) }
  else {
      og_p(" instrument missing -> rebuilding via durable runner\n" as *u8)
      og_runv("_offc/nx_sov_build_run.elf" as *u8, og_args("nx_vizsla_render" as *u8, 0 as *u8, 0 as *u8, 0 as *u8, 0 as *u8), "/tmp/vrr_rebuild.out" as *u8)
  }
151
  let base: *u8 = sys_mmap(256)
  var bo: i64 = 0
  bo = og_cat(base, bo, "/tmp/vrG" as *u8); bo = og_catn(base, bo, sys_now_us()); bo = og_cat(base, bo, "_" as *u8)
  base[bo] = 0 as u8
156
  og_write(og_join(base, "rt.contacts.txt" as *u8), "CONF soon_days 14\nTIER inner 14\nTIER close 45\nCONTACT rmom Mom inner 06-30\nCONTACT rdave Dave close -\n" as *u8)
  og_write(og_join(base, "rt.relate_log.txt" as *u8), "TOUCH 2026-06-15 rmom call\nOBLIGATION 2026-06-01 OWE rdave loan 0 owe-him\nTHANKS 2026-06-10 rmom gift\n" as *u8)
159
  let logp: *u8 = og_join(base, "rt.relate_log.txt" as *u8)
  let pfx: *u8 = og_join(base, "rt.relate-" as *u8)
  og_runv("_offc/nx_vizsla_relate.elf" as *u8, og_args("load" as *u8, logp, pfx, "9501" as *u8, 0 as *u8), "/tmp/vrr_load.txt" as *u8)
163
  let pagep: *u8 = og_join(base, "rt.html" as *u8)
  let today: *u8 = "2026-06-22" as *u8
  var pass: i64 = 0
  var r: i64 = 0
168
  // row 1: render
  let rc1: i64 = og_runv(ob, og_args("page" as *u8, base, "rt" as *u8, today, pagep), "/tmp/vrr_v.txt" as *u8)
  r = 0
  if rc1 == 0 { if og_has("/tmp/vrr_v.txt" as *u8, "VIZSLA-RENDER tenant=rt reach=1 bday=1 thanks=1 owed=1" as *u8) == 1 { if og_has("/tmp/vrr_v.txt" as *u8, "sovereign=1" as *u8) == 1 { r = 1 } } }
  pass = pass + og_row("render-verdict" as *u8, r)
174
  // row 2: a real relationship card
  r = og_has(pagep, "<b>rdave</b>" as *u8)
  pass = pass + og_row("page-has-contact" as *u8, r)
178
  // row 3: section headers
  r = 0
  if og_has(pagep, "Reach out today" as *u8) == 1 { if og_has(pagep, "Birthdays coming up" as *u8) == 1 { r = 1 } }
  pass = pass + og_row("page-headers" as *u8, r)
183
  // row 4: the privacy statement
  r = og_has(pagep, "never uploaded" as *u8)
  pass = pass + og_row("page-privacy" as *u8, r)
187
  // rows 5-7: SOVEREIGNTY -- the page must carry NO JS and NO third-party loads
  var has_script: i64 = og_has(pagep, "<script" as *u8)
  r = 0
  if has_script == 0 { r = 1 }
  pass = pass + og_row("SOVEREIGN-no-script" as *u8, r)
193
  var has_http: i64 = og_has(pagep, "http" as *u8)
  r = 0
  if has_http == 0 { r = 1 }
  pass = pass + og_row("SOVEREIGN-no-http" as *u8, r)
198
  var has_link: i64 = og_has(pagep, "<link" as *u8)
  r = 0
  if has_link == 0 { r = 1 }
  pass = pass + og_row("SOVEREIGN-no-link" as *u8, r)
203
  // row 8: determinism
  let pagep2: *u8 = og_join(base, "rt2.html" as *u8)
  og_runv(ob, og_args("page" as *u8, base, "rt" as *u8, today, pagep2), "/tmp/vrr_v2.txt" as *u8)
  r = og_fileeq(pagep, pagep2)
  pass = pass + og_row("determinism" as *u8, r)
209
  // row 9: loud-fail on missing outfile arg
  let rc9: i64 = og_runv(ob, og_args("page" as *u8, base, "rt" as *u8, today, 0 as *u8), "/tmp/vrr_neg.txt" as *u8)
  r = 0
  if rc9 == 1 { r = 1 }
  pass = pass + og_row("loud-fail-args" as *u8, r)
215
  let permil: i64 = (pass * 1000) / 9
  let logfd: i64 = sys_openat_append("knowledge/status/vizsla_gate.log" as *u8, 0x1a4)
  var fdi: i64 = 0
  while fdi < 2 {
      var fd: i64 = 1
      if fdi == 1 { fd = logfd }
      if fd > 0 {
          let line: *u8 = sys_mmap(256)
          var o: i64 = 0
          o = og_cat(line, o, "VIZSLA-RENDER-GATE epoch=" as *u8)
          o = og_catn(line, o, sys_now_realtime_sec())
          o = og_cat(line, o, " rows=9 pass=" as *u8)
          o = og_catn(line, o, pass)
          o = og_cat(line, o, " permil=" as *u8)
          o = og_catn(line, o, permil)
          if pass == 9 { o = og_cat(line, o, " verdict=GREEN\n" as *u8) } else { o = og_cat(line, o, " verdict=RED\n" as *u8) }
          sys_write(fd, line, o)
      }
      fdi = fdi + 1
  }
  if logfd > 0 { sys_close(logfd) }
  // MIGRATED onto nx_gate_verdict by nx_gate_dry_apply (D001, minimal form): every check
  // row above is untouched, so the PASS/FAIL vector cannot change; only the hand-rolled
  // verdict emission is replaced by the ONE shared base class. Proven by nx_gate_migrate verify.
  let ctr__dry: *i64 = gv_ctr()
  ctr__dry[0] = pass
  ctr__dry[1] = 9
  let rc__dry: i64 = gv_verdict("VIZSLA-RENDER-GATE" as *u8, ctr__dry, "teeth unchanged; verdict emission migrated onto the shared base class" as *u8)
  sys_exit(rc__dry)
  return rc__dry
246}
nx_vizsla_render_gate.nx source

`nx_vizsla_render_gate.nx` source
