code wiki / _hdl_build / nx_vizsla_tenant_gate.nx
nx_vizsla_tenant_gate.nx source
↩ module page · 313 lines · 13231 B
1// nx_vizsla_tenant_gate.nx -- VIZSLA universal/multi-tenant gate: proves the SAME S-class relationship engine
2// serves MANY people on one Nishi system, each fully ISOLATED (operator 2026-06-22: "universal also available to
3// others ... the same thing giving me s class relationship management can help them achieve s class"). Two
4// tenants with DIFFERENT people + interactions; each gets their OWN correct brief; NEITHER can see the other's
5// data (cross-tenant bleed = RED). Plus a path-traversal security control. 100% sovereign: self-writes the
6// per-tenant fixtures, forks nx_vizsla_tenant (which composes the blessed relate engine), greps stdout.
7//
8// tenant ELDER (today 2026-06-22): emom inner last 06-20=FRESH bday 06-25=in 3d ; ejess close never=NEW followup;
9// THANKS emom gift 06-10=PENDING ; OBLIGATION OWE ejess dinner => followups=1 birthdays=1 thankyous=1 obligations=1
10// tenant DAVE: dwife inner last 06-21=FRESH bday 09-01=far ; dboss work never=NEW followup ;
11// OBLIGATION DUE dboss raise => followups=1 birthdays=0 thankyous=0 obligations=1
12//
13// Rows:
14// 1 load-elder tenant load -> RELATE-LOAD scanned=3 new=3 seg-8001
15// 2 load-dave tenant load -> RELATE-LOAD scanned=2 new=2 seg-8002
16// 3 elder-brief-own elder brief shows ejess (NEW) + emom (BIRTHDAY)
17// 4 elder-verdict followups=1 birthdays=1 thankyous=1 obligations=1
18// 5 elder-ISOLATED elder brief shows NOTHING of dave (no dboss, no dwife) [isolation]
19// 6 dave-brief-own dave brief shows dboss OBLIGATION DUE
20// 7 dave-verdict followups=1 birthdays=0 thankyous=0 obligations=1
21// 8 dave-ISOLATED dave brief shows NOTHING of elder (no emom, no ejess) [isolation]
22// 9 tid-traversal-reject brief with tenant-id ".." => exit 1 [security neg-control]
23// 10 brief-determinism elder brief byte-identical twice
24// Evidence: VIZSLA-TENANT-GATE -> stdout + knowledge/status/vizsla_gate.log; exit 0 iff 10/10.
25// spec: knowledge/research/2026-06-22-vizsla-sclass-roadmap.md license_tier: ORIGINAL
26import "nx_syscalls.nx"
27
28func og_slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n }
29func og_p(s: *u8) -> i64 { sys_write(1, s, og_slen(s)); return 0 }
30
31func og_cat(dst: *u8, off: i64, s: *u8) -> i64 {
32 var i: i64 = 0
33 while s[i] != (0 as u8) { dst[off + i] = s[i]; i = i + 1 }
34 return off + i
35}
36
37func og_catn(dst: *u8, off: i64, v: i64) -> i64 {
38 var o: i64 = off
39 var m: i64 = v
40 if m < 0 { dst[o] = 45 as u8; o = o + 1; m = 0 - m }
41 let t: *u8 = sys_mmap(28)
42 var k: i64 = 0
43 if m == 0 { t[0] = 48 as u8; k = 1 }
44 while m > 0 { t[k] = (48 + (m % 10)) as u8; m = m / 10; k = k + 1 }
45 var i: i64 = 0
46 while i < k { dst[o + i] = t[k - 1 - i]; i = i + 1 }
47 return o + k
48}
49
50func og_write(path: *u8, content: *u8) -> i64 {
51 let fd: i64 = sys_openat_wr(path, 0x1a4)
52 if fd < 0 { return 0 - 1 }
53 sys_write(fd, content, og_slen(content))
54 sys_close(fd)
55 return 0
56}
57
58func og_readall(path: *u8, szout: *i64) -> *u8 {
59 let fd: i64 = sys_openat_rd(path)
60 if fd < 0 { szout[0] = 0 - 1; return 0 as *u8 }
61 let sz: i64 = sys_lseek(fd, 0, 2)
62 sys_lseek(fd, 0, 0)
63 let buf: *u8 = sys_mmap(sz + 64)
64 var got: i64 = 0
65 var n: i64 = 1
66 while n > 0 {
67 n = sys_read(fd, (buf as i64 + got) as *u8, 65536)
68 if n > 0 { got = got + n }
69 }
70 sys_close(fd)
71 szout[0] = got
72 return buf
73}
74
75func og_runv(elf: *u8, args: *i64, outpath: *u8) -> i64 {
76 let pid: i64 = sys_fork()
77 if pid == 0 {
78 if (outpath as i64) != 0 {
79 let ofd: i64 = sys_openat_wr(outpath, 0x1a4)
80 if ofd >= 0 { sys_dup3(ofd, 1, 0); sys_dup3(ofd, 2, 0) }
81 }
82 let argv: *i64 = sys_mmap(128) as *i64
83 argv[0] = elf as i64
84 var i: i64 = 0
85 var go: i64 = 1
86 while go == 1 {
87 if args[i] == 0 { go = 0 } else {
88 argv[i + 1] = args[i]
89 i = i + 1
90 }
91 }
92 argv[i + 1] = 0
93 let envp: *i64 = sys_mmap(16) as *i64
94 envp[0] = 0
95 sys_execve(elf, argv, envp)
96 sys_exit(127)
97 }
98 let st: *i64 = sys_mmap(16) as *i64
99 sys_wait4(pid, st, 0)
100 let sig: i64 = st[0] & 0x7f
101 if sig != 0 { return 128 + sig }
102 return (st[0] >> 8) & 0xff
103}
104
105func og_has(path: *u8, needle: *u8) -> i64 {
106 let szp: *i64 = sys_mmap(16) as *i64
107 let b: *u8 = og_readall(path, szp)
108 let sz: i64 = szp[0]
109 let n: i64 = og_slen(needle)
110 if sz < n { return 0 }
111 var i: i64 = 0
112 while i + n <= sz {
113 var ok: i64 = 1
114 var j: i64 = 0
115 while j < n {
116 if b[i + j] != needle[j] { ok = 0; j = n } else { j = j + 1 }
117 }
118 if ok == 1 { return 1 }
119 i = i + 1
120 }
121 return 0
122}
123
124func og_fileeq(p1: *u8, p2: *u8) -> i64 {
125 let s1: *i64 = sys_mmap(16) as *i64
126 let s2: *i64 = sys_mmap(16) as *i64
127 let b1: *u8 = og_readall(p1, s1)
128 let b2: *u8 = og_readall(p2, s2)
129 if s1[0] != s2[0] { return 0 }
130 if s1[0] <= 0 { return 0 }
131 var i: i64 = 0
132 while i < s1[0] {
133 if b1[i] != b2[i] { return 0 }
134 i = i + 1
135 }
136 return 1
137}
138
139func og_row(name: *u8, pass: i64) -> i64 {
140 og_p("ROW " as *u8)
141 og_p(name)
142 if pass == 1 { og_p(" PASS\n" as *u8) } else { og_p(" FAIL\n" as *u8) }
143 return pass
144}
145
146func og_args(a1: *u8, a2: *u8, a3: *u8, a4: *u8, a5: *u8) -> *i64 {
147 let a: *i64 = sys_mmap(64) as *i64
148 a[0] = a1 as i64
149 a[1] = a2 as i64
150 a[2] = a3 as i64
151 a[3] = a4 as i64
152 a[4] = a5 as i64
153 a[5] = 0
154 return a
155}
156
157func og_args7(a1: *u8, a2: *u8, a3: *u8, a4: *u8, a5: *u8, a6: *u8, a7: *u8) -> *i64 {
158 let a: *i64 = sys_mmap(80) as *i64
159 a[0] = a1 as i64
160 a[1] = a2 as i64
161 a[2] = a3 as i64
162 a[3] = a4 as i64
163 a[4] = a5 as i64
164 a[5] = a6 as i64
165 a[6] = a7 as i64
166 a[7] = 0
167 return a
168}
169
170// build base+name into a fresh buffer
171func og_join(base: *u8, name: *u8) -> *u8 {
172 let p: *u8 = sys_mmap(512)
173 var o: i64 = 0
174 o = og_cat(p, o, base)
175 o = og_cat(p, o, name)
176 p[o] = 0 as u8
177 return p
178}
179
180func main(argc: i64, argv: *i64) -> i64 {
181 og_p("=== VIZSLA TENANT GATE: universal multi-tenant relationship mgmt, ISOLATION-proven ===\n" as *u8)
182 var ob: *u8 = "/tmp/nx_vizsla_tenant.sov.elf" as *u8
183 if argc > 1 { ob = argv[1] as *u8 }
184 let pr: i64 = sys_openat_rd(ob)
185 if pr >= 0 { sys_close(pr) }
186 else {
187 og_p(" instrument missing -> rebuilding via durable runner\n" as *u8)
188 og_runv("_offc/nx_sov_build_run.elf" as *u8, og_args("nx_vizsla_tenant" as *u8, 0 as *u8, 0 as *u8, 0 as *u8, 0 as *u8), "/tmp/vtt_rebuild.out" as *u8)
189 }
190
191 let base: *u8 = sys_mmap(256)
192 var bo: i64 = 0
193 bo = og_cat(base, bo, "/tmp/vztU" as *u8)
194 bo = og_catn(base, bo, sys_now_us())
195 bo = og_cat(base, bo, "_" as *u8)
196 base[bo] = 0 as u8
197
198 // tenant fixtures (each person's private files)
199 og_write(og_join(base, "elder.contacts.txt" as *u8), "CONF soon_days 14\nTIER inner 30\nTIER close 90\nCONTACT emom Mom inner 06-25\nCONTACT ejess Jess close -\n" as *u8)
200 og_write(og_join(base, "elder.relate_log.txt" as *u8), "TOUCH 2026-06-20 emom call\nOBLIGATION 2026-06-01 OWE ejess dinner 0 owe-dinner\nTHANKS 2026-06-10 emom gift\n" as *u8)
201 og_write(og_join(base, "dave.contacts.txt" as *u8), "CONF soon_days 14\nTIER inner 30\nTIER work 60\nCONTACT dwife Maria inner 09-01\nCONTACT dboss Boss work -\n" as *u8)
202 og_write(og_join(base, "dave.relate_log.txt" as *u8), "TOUCH 2026-06-21 dwife dinner\nOBLIGATION 2026-06-05 DUE dboss raise 0 raise-talk\n" as *u8)
203
204 let today: *u8 = "2026-06-22" as *u8
205 var pass: i64 = 0
206 var r: i64 = 0
207
208 // row 1: load elder
209 let rcle: i64 = og_runv(ob, og_args("load" as *u8, base, "elder" as *u8, "8001" as *u8, 0 as *u8), "/tmp/vtt_le.txt" as *u8)
210 r = 0
211 if rcle == 0 {
212 if og_has("/tmp/vtt_le.txt" as *u8, "VIZSLA-RELATE-LOAD scanned=3 new=3 dup_infile=0 dup_instore=0 segment=seg-8001" as *u8) == 1 { r = 1 }
213 }
214 pass = pass + og_row("load-elder" as *u8, r)
215
216 // row 2: load dave
217 let rcld: i64 = og_runv(ob, og_args("load" as *u8, base, "dave" as *u8, "8002" as *u8, 0 as *u8), "/tmp/vtt_ld.txt" as *u8)
218 r = 0
219 if rcld == 0 {
220 if og_has("/tmp/vtt_ld.txt" as *u8, "VIZSLA-RELATE-LOAD scanned=2 new=2 dup_infile=0 dup_instore=0 segment=seg-8002" as *u8) == 1 { r = 1 }
221 }
222 pass = pass + og_row("load-dave" as *u8, r)
223
224 // rows 3-5: elder brief (own data + isolation)
225 og_runv(ob, og_args("brief" as *u8, base, "elder" as *u8, today, 0 as *u8), "/tmp/vtt_be.txt" as *u8)
226 r = 0
227 if og_has("/tmp/vtt_be.txt" as *u8, "FOLLOWUP contact=ejess" as *u8) == 1 {
228 if og_has("/tmp/vtt_be.txt" as *u8, "BIRTHDAY contact=emom" as *u8) == 1 { r = 1 }
229 }
230 pass = pass + og_row("elder-brief-own" as *u8, r)
231
232 r = og_has("/tmp/vtt_be.txt" as *u8, "VIZSLA-RELATE-BRIEF-VERDICT followups=1 birthdays=1 thankyous=1 obligations=1" as *u8)
233 pass = pass + og_row("elder-verdict" as *u8, r)
234
235 var leak1: i64 = og_has("/tmp/vtt_be.txt" as *u8, "dboss" as *u8)
236 var leak2: i64 = og_has("/tmp/vtt_be.txt" as *u8, "dwife" as *u8)
237 r = 0
238 if leak1 == 0 { if leak2 == 0 { r = 1 } }
239 pass = pass + og_row("elder-ISOLATED-no-dave" as *u8, r)
240
241 // rows 6-8: dave brief (own data + isolation)
242 og_runv(ob, og_args("brief" as *u8, base, "dave" as *u8, today, 0 as *u8), "/tmp/vtt_bd.txt" as *u8)
243 r = og_has("/tmp/vtt_bd.txt" as *u8, "OBLIGATION contact=dboss dir=DUE" as *u8)
244 pass = pass + og_row("dave-brief-own" as *u8, r)
245
246 r = og_has("/tmp/vtt_bd.txt" as *u8, "VIZSLA-RELATE-BRIEF-VERDICT followups=1 birthdays=0 thankyous=0 obligations=1" as *u8)
247 pass = pass + og_row("dave-verdict" as *u8, r)
248
249 var leak3: i64 = og_has("/tmp/vtt_bd.txt" as *u8, "emom" as *u8)
250 var leak4: i64 = og_has("/tmp/vtt_bd.txt" as *u8, "ejess" as *u8)
251 r = 0
252 if leak3 == 0 { if leak4 == 0 { r = 1 } }
253 pass = pass + og_row("dave-ISOLATED-no-elder" as *u8, r)
254
255 // row 9: path-traversal tenant-id rejected (security neg-control)
256 let rctr: i64 = og_runv(ob, og_args("brief" as *u8, base, ".." as *u8, today, 0 as *u8), "/tmp/vtt_tr.txt" as *u8)
257 r = 0
258 if rctr == 1 { r = 1 }
259 pass = pass + og_row("tid-traversal-reject" as *u8, r)
260
261 // row 10: determinism
262 og_runv(ob, og_args("brief" as *u8, base, "elder" as *u8, today, 0 as *u8), "/tmp/vtt_be2.txt" as *u8)
263 r = og_fileeq("/tmp/vtt_be.txt" as *u8, "/tmp/vtt_be2.txt" as *u8)
264 pass = pass + og_row("brief-determinism" as *u8, r)
265
266 // rows 11-13: frictionless capture on a FRESH "cap" tenant (provision -> add-contact -> touch)
267 og_runv(ob, og_args("provision" as *u8, base, "cap" as *u8, 0 as *u8, 0 as *u8), "/tmp/vtt_cprov.txt" as *u8)
268 og_runv(ob, og_args7("add-contact" as *u8, base, "cap" as *u8, "newpal" as *u8, "New-Pal" as *u8, "inner" as *u8, "-" as *u8), "/tmp/vtt_cadd.txt" as *u8)
269 og_runv(ob, og_args("brief" as *u8, base, "cap" as *u8, today, 0 as *u8), "/tmp/vtt_cb1.txt" as *u8)
270 r = og_has("/tmp/vtt_cb1.txt" as *u8, "FOLLOWUP contact=newpal" as *u8)
271 pass = pass + og_row("capture-add-contact" as *u8, r)
272
273 og_runv(ob, og_args7("add-contact" as *u8, base, "cap" as *u8, "buddy" as *u8, "A-Buddy" as *u8, "close" as *u8, "07-04" as *u8), "/tmp/vtt_cadd2.txt" as *u8)
274 og_runv(ob, og_args("brief" as *u8, base, "cap" as *u8, today, 0 as *u8), "/tmp/vtt_cb2.txt" as *u8)
275 r = og_has("/tmp/vtt_cb2.txt" as *u8, "BIRTHDAY contact=buddy" as *u8)
276 pass = pass + og_row("capture-add-birthday" as *u8, r)
277
278 og_runv(ob, og_args7("touch" as *u8, base, "cap" as *u8, today, "newpal" as *u8, "hi" as *u8, 0 as *u8), "/tmp/vtt_ctouch.txt" as *u8)
279 og_runv(ob, og_args("brief" as *u8, base, "cap" as *u8, today, 0 as *u8), "/tmp/vtt_cb3.txt" as *u8)
280 var stillfollow: i64 = og_has("/tmp/vtt_cb3.txt" as *u8, "FOLLOWUP contact=newpal" as *u8)
281 var buddyfollow: i64 = og_has("/tmp/vtt_cb3.txt" as *u8, "FOLLOWUP contact=buddy" as *u8)
282 r = 0
283 if stillfollow == 0 { if buddyfollow == 1 { r = 1 } }
284 pass = pass + og_row("capture-touch-makes-fresh" as *u8, r)
285
286 let permil: i64 = (pass * 1000) / 13
287 let logfd: i64 = sys_openat_append("knowledge/status/vizsla_gate.log" as *u8, 0x1a4)
288 var fdi: i64 = 0
289 while fdi < 2 {
290 var fd: i64 = 1
291 if fdi == 1 { fd = logfd }
292 if fd > 0 {
293 let line: *u8 = sys_mmap(256)
294 var o: i64 = 0
295 o = og_cat(line, o, "VIZSLA-TENANT-GATE epoch=" as *u8)
296 o = og_catn(line, o, sys_now_realtime_sec())
297 o = og_cat(line, o, " rows=13 pass=" as *u8)
298 o = og_catn(line, o, pass)
299 o = og_cat(line, o, " permil=" as *u8)
300 o = og_catn(line, o, permil)
301 if pass == 13 {
302 o = og_cat(line, o, " verdict=GREEN\n" as *u8)
303 } else {
304 o = og_cat(line, o, " verdict=RED\n" as *u8)
305 }
306 sys_write(fd, line, o)
307 }
308 fdi = fdi + 1
309 }
310 if logfd > 0 { sys_close(logfd) }
311 if pass == 13 { return 0 }
312 return 1
313}