Nishi Family › Compare › The Review Queue

Nishi Compare · capabilities, evidence and delivery

The Review Queue

Compare capabilities and delivery evidence. Source discovery, qualification, deployment and accepted outcomes are separate; an open contract names work still to verify.

Source-law scanner + review plane + risk and contract registers (sovereign, plane-native, never blocking) vs Snyk, FOSSA, Black Duck and ServiceNow IRM -- Sep-2026 field

Overview

The purpose, declared position and evidence coverage of this domain. Source presence and completed acceptance are different measures.

Where we are. MEASURED 2026-09-02: the source-law scanner nx_formatlaw (lib + CLI + gate 26/26, bite classes planted at runtime) exists, is installed on the laptop's PreToolUse/Write hook and has censused the whole authoring tree: 19,277 sources, 818 durable legacy-format literals, 39 JSON-as-state literals, 144 third-party exec paths, 8,954 sources without license_tier. The review plane knowledge/store/review- is written by its review verb (7-col debt grammar, FNV identity, dedupe). The risk register (nx_risk_register) and the patent table (nx_patent_check over a 174-row TSV) exist as libs and are fed by nothing. There is no gated /review surface, no contract register, no research-currency ratchet, and licgate verdicts do not reach the queue.

Where we need to go. OPERATOR 2026-09-02: the licence and law scanners must never block but flag into a review queue visible on /compare and on nishifamily.com/review behind the OPAQUE wall -- a risk register collecting all risk from everywhere, tied to a contract register where licences, contracts and other legal needs are tracked as SOTA and best of breed; and the estate tooled for world-class-scale work (VR, GTA-6 class) without hitting patents or licences, on research current to September 2026.

The unit. 1 u = one measured session-leg (organ plus gate plus live flip), the standing calibration.

Research bar. Snyk CLI is measured on dependency, code, container and IaC scanning with licence policies; IDE plugins flag on save. Theirs: UNPINNED at admission -- pinnable through api.github.com/repos/snyk/cli/releases/latest, to be READ LIVE through nx_research_fetch and banked in knowledge/barcheck.conf before any version is quoted. Ours: our scanner reads the code's own literals for three estate laws and files into a sovereign plane; no dependency-manifest scan yet.

Research bar. FOSSA CLI is measured on open-source licence compliance and SBOM from dependency manifests. Theirs: UNPINNED at admission -- pinnable through api.github.com/repos/fossas/fossa-cli/releases/latest, same lane. Ours: ours has no manifest scan and no SBOM; the licence axis is the per-source license_tier declaration and nx_licgate over model chains.

Research bar. Black Duck SCA is measured on software composition analysis: licence, security and operational risk per component. Theirs: UNPINNED -- a vendor product page with no machine-readable release registry; declared, not pinned. Ours: ours answers patent encumbrance per algorithm offline, which no SCA product does, and nothing else of its component view.

Research bar. ServiceNow IRM is measured on integrated risk management: risk register, policy and obligation register, issue workflow. Theirs: UNPINNED -- a SaaS product with no public release registry; declared, not pinned. Ours: ours is a lib with sealed enums and no surface yet; the register the operator asked for is RV3+RV4 on this board.

Where we are: scanner LIVE on the laptop, queue plane written, surface ABSENT. The mechanism that finds is done; the mechanism that decides (a human or AI reading the queue with the contract behind it) has no surface yet.

Cost to a visible queue: 2 u. RV1 the scanner and its gate (landed), RV2 the tree census with its review verb feeding the plane (landed), RV3 the gated /review gateway rendering the queue from the plane. Version 0.1.

Cost to a register that binds: 4 u more. RV4 the contract register plane and its reader, RV5 the patent table into the plane, RV8 licgate verdicts into the queue. 6 u cumulative = version 1.0.

Cost to an estate that cannot ship an encumbered rung: 3 u more. RV6 the research-currency ratchet on every SOTA board, RV7 IP clearance over the world pipeline before a rung is marked done. 9 u cumulative = version 2.0.

Latest recorded release

2026-09-05 · RV9

REFEREE LEG LIVE (2026-09-05): nx_swcompare_shape_gate rebuilt through the sovereign lane in debug flavour (43744 B sha 2ed80528; the mgmt lane had served the PRE-EDIT 41992 B twice), contentdiff live-vs-built lost exactly one run -- the old T11 tooth name, reworded when T11 grew to count rows C and D -- and gained the 12 fixture and tooth strings, behaveprobe live_rc=0 other_rc=0 DIFFERS STRONG, PROMOTED with allow_capability_loss=yes prev=1, offc-installed, run on the NAS: 15/15 GREEN with T12 (band prints rows 3 cited 1 uncited 2), T13 (row A carries the uncited badge in its own row), neg-control row C (no rival, no badge) and neg-control row D (cited, no badge) all PASS; RV9 now has emitter + sota leg + referee, the first fleet-wide uncited count publishes on the next regen beat; operator ACCEPT owed

Release history and work log

Release entries describe recorded changes; they do not establish that every capability passed evaluation.

6 of 12 capability source symbols found|1 of them authored stronger-claims|6 open|coverage 500/1000|adoption 2 full / 4 partial

Evidence profile — what the gaps on this board actually are

Measured by nx_swcompare_evidence, read back by nx_evprofile_lib. Every figure is a count with its denominator — there is deliberately no score, no grade and no percentage anywhere in this band, because a stored scalar is a field a seat can edit and a counted partition is not.

proven able to fail counts the gates that have a RECORDED RED — nx_gate_bite mutated the gate subject, rebuilt it, watched the gate go red, and that record is inside the shared TTL. never bitten is its complement over the same denominator: those gates ran and were green, and nothing has ever shown them able to detect anything, so their green is a statement about this run and not about the gate. green at 0/0 is a separate and much weaker observation — the gate printed GREEN on a zero denominator, so its own tooth counter says it examined nothing. A gate can be green, non-zero, and still never bitten; that is the common case and it is now visible instead of implied.

partition: grounded + unsupported = 6 vs present 6 · named + unnamed + withheld = 6 vs open 6 · both reconcile

liar-kill conj=GPQN · all four conjuncts held

graded document: BUILDROOT tree, 7376 bytes · gates map: PRIMARY · stamped 35d 23h ago · STALE against the shared TTL of 604800s — this is evidence about a build nobody can vouch for now · source ../knowledge/status/evstamp_review.verdict

Gap class	What it is, and the work it names
STALE	This profile is older than the shared TTL, or its clock ran backwards. It is reported as unusable rather than as fresh, because being wrong in the direction of refusing is the safe direction.

This band reports the referee counts. The per-axis worklist rows — which axis is unsupported, which watch is ready to flip, which gap is unnamed — are printed by nx_swcompare_evidence review itself and are not carried on the stamp, so this page names the classes and the producer names the rows. That split is stated rather than hidden: a count without a worklist is not actionable, and this band is honest about which half of that it is.

Production map

Follow the dependencies, declared acceptance criteria and recorded priorities. Inspect source binding before treating a rank as executable work.

Ranking source binding: STALE_INCONSISTENT. Recorded priorities require current acceptance evidence and resource checks before execution.

Recorded ranking withheld

Retained ranking is not bound to the current plan and matrix: STALE_INCONSISTENT. Historical data remains retained. Refresh the ranking after resolving the input differences. Latest execution outcome is unverified.

Declared roadmap — contract, acceptance, executor, effort

Milestones

Milestone	Rungs	Cumulative
M1 · The queue is visible: the scanner finds, files and the operator can read it	RV1,RV2,RV3	2 u
M2 · The registers bind: contracts, patents and licence verdicts behind every finding	RV4,RV5,RV8	6 u
M3 · Nothing encumbered ships: currency and clearance are ratchets on the boards	RV6,RV7	9 u

Rung	Closes with	Definition of done (pre-declared)	Executor	Est.
The source-law scanner and its gate (RV1)	fl_scan	F1 durable legacy-format literals, F1J JSON-as-state, F2 third-party exec paths, F3 missing license_tier, over string literals with comments skipped; exemptions declared (fetched evidence, fixtures, wire formats, documents); gate plants every class at runtime and holds the count past the kept cap; never blocks. LANDED 2026-09-02 (nx_formatlaw_lib, nx_formatlaw_gate 26/26)	Organ	1 u
The census and the review verb (RV2) after RV1	flc_scan_path	nx_formatlaw tree scans both source roots and prints per-class counts with total and shown separate; review <actor> files each F1/F1J/F2 finding as a 7-col row into knowledge/store/review- under an FNV identity so a re-scan files nothing twice; the hook verb rides PreToolUse/Write as an advisory. LANDED 2026-09-02 on the laptop; NAS build queued	Organ	1 u
The gated /review gateway (RV3) after RV2	rv_gateway	nishifamily.com/review behind the OPAQUE wall (compare_gw shape: loopback daemon, X-Nishi-Session, HR level deny-by-default) renders the review queue, the risk register and the contract register from their planes with one emitter; a finding row links to its file:line, its remedy, the contract that governs it and the compare rung it gates; the anonymous answer is 404, the same as a missing page; proxy_routes row + deploy_targets row + daemons.reg row, deployed through the health-checked lane	Organ	2 u
The contract register plane (RV4) after RV3	cr_register	knowledge/store/contract- rows: party, kind (licence, contract, patent, obligation), the artifacts it binds, term, expiry, owner, status; nx_ipdock_lib deadline arithmetic drives an expiry watch that files a review row when a term is inside its window; every review finding that names a licence resolves to a contract row or reads UNBOUND	Organ	2 u
The patent table into the plane (RV5) after RV3	pat_plane	knowledge/store/patent- carries every row of specs/nx_patent_table.txt with a source citation per row; nx_patent_check reads the plane (the TSV demoted to a bootstrap fixture); the safe predicate keeps default-deny; a gate proves the plane and the fixture agree row for row and that an unknown algorithm is refused	Organ	1 u
The research-currency ratchet (RV6)	rf_currency	nx_compare_refs_gate gains a tooth: every SOTA-class domain cites at least one primary source whose accessed date is within twelve months of the emit; the census names each domain below the bar; ratcheted so the floor only rises	Gate	1 u
IP clearance over the world pipeline (RV7) after RV5	ip_pipeline_clear	every organ in the graphics, game-engine, procgen and aesthetictwin lanes carries license_tier; algorithm names declared in a conf row per organ are checked against the patent plane; a rung whose organ is encumbered or undeclared reads INCOMPLETE on its board until the review queue clears it; proven by a neg-control organ declaring an active-patent algorithm	Gate	2 u
Licence shippability into the queue (RV8) after RV4	lg_review_row	nx_licgate chain verdicts that are not shippable file a review row (kind LICENCE) naming the model or asset, the licence and the term that refuses; deduped by chain identity	Organ	1 u
Rival marks carry their evidence (RV9) after RV6	rv_class	nx_swcompare_lib classifies every matrix row whose rival columns assert Yes, Best or Part as CITED (the note carries a reference mark the refs gate resolves to a pinned mirror) or UNCITED (an observation read with nothing behind it); the matrix generator badges uncited rows in their evidence, prints rows, cited and uncited on the page and in api.json, and nx_swcompare_shape_gate proves the split on a fixture carrying both kinds; done-rule: the matrix leg lands GREEN and the sota generator carries the same classifier over its grade rows (the second leg of one law, never a second ruler), so the fleet count of uncited rival claims is a published number the boards can only lower	Organ	1.5 u
Rival marks expire (RV10) after RV9	rv_expiry	the reference behind a cited rival mark carries an accessed date; an expiry as DATA (knowledge/compare/refs_expiry.conf, one row per evidence class) turns a cited mark older than its class window into STALE-CITE, rendered with the drift classes the sota page already uses and named by the refs gate; done-rule: a planted old accessed date reads STALE-CITE, a fresh one CITED, and a class with no expiry row reads UNBOUNDED never STALE	Organ	1 u

Milestones

Milestone	Rungs	Cumulative
M4 · Rival claims carry their evidence and its age	RV9,RV10	11.5 u

Rung	Closes with	Definition of done (pre-declared)	Executor	Est.
Classification and exposure follow each artifact and callable capability (RV11) after RV4,capregistry:CR1,extllm:XL1	_ABSENT_:classification_exposure_accept	SOURCE-BOUND PLANNING CONTRACT 2026-09-24. Extend the existing contract register, capability inventory and provider-terms owner; do not create a second rights or credential store. Input is an identified artifact or API capability plus its proprietor, third-party obligations, confidentiality, permitted recipients and explicit publication decision. Output is a versioned classification decision consumed by existing emit/publish/call boundaries, with UNKNOWN refusing exposure rather than defaulting public. Demonstrate proprietary source withheld while approved interface metadata remains discoverable, third-party notices retained, credential values absent from public evidence, and an attempted unapproved export refused. Provider no-training/retention claims require observed account controls and current terms; this contract does not authorize model training or a new provider. Cost remains unestimated; design decision and implementation/verification/production approval are separate.	Workflow	unestimated u
Applicable obligations are a versioned decision set with an accountable reviewer (RV12) after RV4,RV6	_ABSENT_:applicability_decision_accept	SOURCE-BOUND PLANNING CONTRACT 2026-09-24. Compose the existing contract and research-freshness owners. For a named entity, product, jurisdiction and intended use, retain each candidate engineering, security, safety, privacy or legal requirement with pinned primary source, edition, applicability rationale, responsible specialist, checked time and review decision. Output APPLICABLE, NOT_APPLICABLE_WITH_REASON, UNKNOWN or REQUIRES_QUALIFIED_REVIEW; a linked survey is never proof that every named law applies. Demonstrate a stale source triggers research while a current approved rule can be reused; a missing jurisdiction or reviewer stays unresolved, and the existing PM/Compare surface shows the required next action. Legal coordinates applicability review with technical and domain specialists; no compliance certification from a passing parser. Effort and financial return unestimated.	Workflow	unestimated u

Ladder verdict. NOT DECLARED. This board names no dated best-in-class or frontier target and no rung roles (sotatarget and rungrole rows on its plan); the ranker labels it NO-LADDER until it does, and until then its rungs climb toward a target nobody has written down. Bars read NO-BAR against the current month 2026-10.

Bar freshness, counted
Class	Count	Note
bars	0	sotabar rows on the plan
fresh	0	the bar month is the current month
attested	0	an older bar with a this-month barscan reporting no newer entry
stale	0	a this-month scan saw a newer month the bar ignores
unattested	0	nobody looked this month
malformed	0	a sotabar row missing a field
duplicate	0	bar ids an earlier row already carries
bars, summed	0	RECONCILED: the parts sum to the total 0
current month	2026-10	the month every bar is judged against

Treatment verdict. NOT DECLARED. No rung on this board declares its three-step treatment (a treat row naming the MCP row, the API route, the primitive it composes, the workflow that composes it and the agent beat that runs it); the ranker labels every rung TREATMENT-UNDECLARED until it does.

Inspect a rung and its prerequisites

Declared nodes 12. Rank input binding: STALE_INCONSISTENT. Dependency order is authored. Implementation, acceptance evidence, authority and resource readiness are unverified. No action is recommended or dispatched here.

Plan SHA-256 a2c66cee29ccfed82ed56dd30346e37767950130c17a0504801d33bbb33673a9. Target rows 0; role rows 0. Existing risks and release worklog retain their own scope; no node completion is inferred.

Runtime observation coverage: 0 of 12 rungs have current, identity-bound execution observations. Observation may report RED. Accepted completion remains unknown; source presence, qualification and deployment do not establish it.

Use Enter or Space on a rung to inspect its contract. Prerequisite links locate another rung in this list; open its summary to inspect it. Estimates are authored effort, not forecasts.

RV1 — The source-law scanner and its gate
Prerequisites: None declared; this does not establish execution eligibility.
Contract: fl_scan
Acceptance: F1 durable legacy-format literals, F1J JSON-as-state, F2 third-party exec paths, F3 missing license_tier, over string literals with comments skipped; exemptions declared (fetched evidence, fixtures, wire formats, documents); gate plants every class at runtime and holds the count past the kept cap; never blocks. LANDED 2026-09-02 (nx_formatlaw_lib, nx_formatlaw_gate 26/26)
Authored effort: 1. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt , SHA-256 . Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.
RV2 — The census and the review verb
Prerequisites: RV1 (acceptance unverified)
Contract: flc_scan_path
Acceptance: nx_formatlaw tree scans both source roots and prints per-class counts with total and shown separate; review <actor> files each F1/F1J/F2 finding as a 7-col row into knowledge/store/review- under an FNV identity so a re-scan files nothing twice; the hook verb rides PreToolUse/Write as an advisory. LANDED 2026-09-02 on the laptop; NAS build queued
Authored effort: 1. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt , SHA-256 . Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.
RV3 — The gated /review gateway
Prerequisites: RV2 (acceptance unverified)
Contract: rv_gateway
Acceptance: nishifamily.com/review behind the OPAQUE wall (compare_gw shape: loopback daemon, X-Nishi-Session, HR level deny-by-default) renders the review queue, the risk register and the contract register from their planes with one emitter; a finding row links to its file:line, its remedy, the contract that governs it and the compare rung it gates; the anonymous answer is 404, the same as a missing page; proxy_routes row + deploy_targets row + daemons.reg row, deployed through the health-checked lane
Authored effort: 2. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt , SHA-256 . Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.
RV4 — The contract register plane
Prerequisites: RV3 (acceptance unverified)
Contract: cr_register
Acceptance: knowledge/store/contract- rows: party, kind (licence, contract, patent, obligation), the artifacts it binds, term, expiry, owner, status; nx_ipdock_lib deadline arithmetic drives an expiry watch that files a review row when a term is inside its window; every review finding that names a licence resolves to a contract row or reads UNBOUND
Authored effort: 2. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt , SHA-256 . Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.
RV5 — The patent table into the plane
Prerequisites: RV3 (acceptance unverified)
Contract: pat_plane
Acceptance: knowledge/store/patent- carries every row of specs/nx_patent_table.txt with a source citation per row; nx_patent_check reads the plane (the TSV demoted to a bootstrap fixture); the safe predicate keeps default-deny; a gate proves the plane and the fixture agree row for row and that an unknown algorithm is refused
Authored effort: 1. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt , SHA-256 . Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.
RV6 — The research-currency ratchet
Prerequisites: None declared; this does not establish execution eligibility.
Contract: rf_currency
Acceptance: nx_compare_refs_gate gains a tooth: every SOTA-class domain cites at least one primary source whose accessed date is within twelve months of the emit; the census names each domain below the bar; ratcheted so the floor only rises
Authored effort: 1. Executor kind: Gate. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt , SHA-256 . Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.
RV7 — IP clearance over the world pipeline
Prerequisites: RV5 (acceptance unverified)
Contract: ip_pipeline_clear
Acceptance: every organ in the graphics, game-engine, procgen and aesthetictwin lanes carries license_tier; algorithm names declared in a conf row per organ are checked against the patent plane; a rung whose organ is encumbered or undeclared reads INCOMPLETE on its board until the review queue clears it; proven by a neg-control organ declaring an active-patent algorithm
Authored effort: 2. Executor kind: Gate. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt , SHA-256 . Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.
RV8 — Licence shippability into the queue
Prerequisites: RV4 (acceptance unverified)
Contract: lg_review_row
Acceptance: nx_licgate chain verdicts that are not shippable file a review row (kind LICENCE) naming the model or asset, the licence and the term that refuses; deduped by chain identity
Authored effort: 1. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt , SHA-256 . Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.
RV9 — Rival marks carry their evidence
Prerequisites: RV6 (acceptance unverified)
Contract: rv_class
Acceptance: nx_swcompare_lib classifies every matrix row whose rival columns assert Yes, Best or Part as CITED (the note carries a reference mark the refs gate resolves to a pinned mirror) or UNCITED (an observation read with nothing behind it); the matrix generator badges uncited rows in their evidence, prints rows, cited and uncited on the page and in api.json, and nx_swcompare_shape_gate proves the split on a fixture carrying both kinds; done-rule: the matrix leg lands GREEN and the sota generator carries the same classifier over its grade rows (the second leg of one law, never a second ruler), so the fleet count of uncited rival claims is a published number the boards can only lower
Authored effort: 1.5. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt , SHA-256 . Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.
RV10 — Rival marks expire
Prerequisites: RV9 (acceptance unverified)
Contract: rv_expiry
Acceptance: the reference behind a cited rival mark carries an accessed date; an expiry as DATA (knowledge/compare/refs_expiry.conf, one row per evidence class) turns a cited mark older than its class window into STALE-CITE, rendered with the drift classes the sota page already uses and named by the refs gate; done-rule: a planted old accessed date reads STALE-CITE, a fresh one CITED, and a class with no expiry row reads UNBOUNDED never STALE
Authored effort: 1. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt , SHA-256 . Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.
RV11 — Classification and exposure follow each artifact and callable capability
Prerequisites: RV4 (acceptance unverified)
Contract: _ABSENT_:classification_exposure_accept
Acceptance: SOURCE-BOUND PLANNING CONTRACT 2026-09-24. Extend the existing contract register, capability inventory and provider-terms owner; do not create a second rights or credential store. Input is an identified artifact or API capability plus its proprietor, third-party obligations, confidentiality, permitted recipients and explicit publication decision. Output is a versioned classification decision consumed by existing emit/publish/call boundaries, with UNKNOWN refusing exposure rather than defaulting public. Demonstrate proprietary source withheld while approved interface metadata remains discoverable, third-party notices retained, credential values absent from public evidence, and an attempted unapproved export refused. Provider no-training/retention claims require observed account controls and current terms; this contract does not authorize model training or a new provider. Cost remains unestimated; design decision and implementation/verification/production approval are separate.
Authored effort: unestimated. Executor kind: Workflow. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt , SHA-256 . Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.
RV12 — Applicable obligations are a versioned decision set with an accountable reviewer
Prerequisites: RV4 (acceptance unverified), RV6 (acceptance unverified)
Contract: _ABSENT_:applicability_decision_accept
Acceptance: SOURCE-BOUND PLANNING CONTRACT 2026-09-24. Compose the existing contract and research-freshness owners. For a named entity, product, jurisdiction and intended use, retain each candidate engineering, security, safety, privacy or legal requirement with pinned primary source, edition, applicability rationale, responsible specialist, checked time and review decision. Output APPLICABLE, NOT_APPLICABLE_WITH_REASON, UNKNOWN or REQUIRES_QUALIFIED_REVIEW; a linked survey is never proof that every named law applies. Demonstrate a stale source triggers research while a current approved rule can be reused; a missing jurisdiction or reviewer stays unresolved, and the existing PM/Compare surface shows the required next action. Legal coordinates applicability review with technical and domain specialists; no compliance certification from a passing parser. Effort and financial return unestimated.
Authored effort: unestimated. Executor kind: Workflow. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt , SHA-256 . Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.

Learning and practice paths

No structured learning path is declared for this plan. Existing research, roadmap and worklog remain available above.

Rung dossiers — every record that bears on a rung, in one place

Joined by symbol, never typed. Each dossier is assembled on every publish from the rows this board already carries: the plan's rung row, the matrix row that carries its contract symbol (its status re-measured by the one symbol ruler), the gate the organ declares and the verdict the evidence referee recorded on its last run, the reference marks in the rung text, the design rows that name the rung and the work log filed against it. The capability matrix links each cell to its dossier and each dossier links back to its cell and forward to the rungs it stands on; a dependency naming no rung on this plan is written as UNRESOLVED rather than linked. Absences are named: NO-MATRIX-ROW, NO-GATE-DECLARED, UNRECORDED.

Gate verdicts: UNSTAMPED — no per-gate verdict artifact is published for this domain yet (nx_swcompare_evidence review writes it beside its stamp); every gate below reads UNRECORDED until it runs.

Gate declarations: knowledge/organ_gate.conf read from this working directory (1 rows) and from the estate root (196 rows); rows in both counted once: 0; declarations read: 197. Every declaration in either copy counts, so a stub beside the publisher can never hide the root.

RV1 The source-law scanner and its gate · cell PRESENT · gate NO-GATE-DECLARED

Contract	`fl_scan` · executor Organ · 1 u · stands on nothing
Definition of done	F1 durable legacy-format literals, F1J JSON-as-state, F2 third-party exec paths, F3 missing license_tier, over string literals with comments skipped; exemptions declared (fetched evidence, fixtures, wire formats, documents); gate plants every class at runtime and holds the count past the kept cap; never blocks. LANDED 2026-09-02 (nx_formatlaw_lib, nx_formatlaw_gate 26/26)
Matrix cell	LAW SCAN: legacy durable formats, third-party executable paths and a missing licence tier found in SOURCE LITERALS, comments skipped · `runtime/nx_formatlaw_lib.nx` · PRESENT decl
Gate	NO-GATE-DECLARED — `knowledge/organ_gate.conf` carries no row for `nx_formatlaw_lib`; declare `nx_formatlaw_lib TAB <gate>` and the ship loop proves it and the verdict lands here.
Work log	2026-09-02 measure NAS census 2026-09-02 (nx_formatlaw tree over buildroot/runtime + _hdl_build, 19176 files, coverage complete): flagged=9395 clean=9781 (sums to 19176); per-class F1 durable-legacy-format=822, F1J json-as-state=38, F2 third-party-exec-path=143, F3 no-license_tier=8890. Laptop tree the same day read 19277 files F1=818 F1J=39 F2=144 F3=8954: the two trees differ by 101 files and the class counts move with them, so the census is a property of the tree, not of the scanner.

RV2 The census and the review verb · cell PRESENT · gate NO-GATE-DECLARED

Contract	`flc_scan_path` · executor Organ · 1 u · stands on RV1
Definition of done	nx_formatlaw tree scans both source roots and prints per-class counts with total and shown separate; review <actor> files each F1/F1J/F2 finding as a 7-col row into knowledge/store/review- under an FNV identity so a re-scan files nothing twice; the hook verb rides PreToolUse/Write as an advisory. LANDED 2026-09-02 on the laptop; NAS build queued
Matrix cell	CENSUS: the whole source tree scanned, per-class counts with a kept-cap that announces itself as a prefix · `runtime/nx_formatlaw.nx` · PRESENT decl
Gate	NO-GATE-DECLARED — `knowledge/organ_gate.conf` carries no row for `nx_formatlaw`; declare `nx_formatlaw TAB <gate>` and the ship loop proves it and the verdict lands here.
Work log	2026-09-02 land nx_formatlaw (eff53611, 129288 B) and nx_formatlaw_gate (916d31c0, 39768 B) PROMOTED and REGISTERED on the NAS through the laptop-built chunked staging lane (closure-hash identity then nx_content_put then /api/promote with expect_sha256); /api/gate_run nx_formatlaw_gate GREEN 26/26 on the NAS; knowledge/compare/review.gates written with that row, so the honesty board can count review as executed evidence instead of CLAIM-ONLY. The scanner never blocks: exit 1 means findings exist.

RV3 The gated /review gateway · cell WATCHING · gate NO-GATE-DECLARED

Contract	`rv_gateway` · executor Organ · 2 u · stands on RV2
Definition of done	nishifamily.com/review behind the OPAQUE wall (compare_gw shape: loopback daemon, X-Nishi-Session, HR level deny-by-default) renders the review queue, the risk register and the contract register from their planes with one emitter; a finding row links to its file:line, its remedy, the contract that governs it and the compare rung it gates; the anonymous answer is 404, the same as a missing page; proxy_routes row + deploy_targets row + daemons.reg row, deployed through the health-checked lane
Matrix cell	GATED /review SURFACE: nishifamily.com/review behind the OPAQUE wall renders the queue, the risk register and the contract register from the planes · `runtime/nx_compare_gw.nx` · WATCHING decl
Gate	NO-GATE-DECLARED — `knowledge/organ_gate.conf` carries no row for `nx_compare_gw`; declare `nx_compare_gw TAB <gate>` and the ship loop proves it and the verdict lands here.
Work log	2026-09-02 queue the review queue plane knowledge/store/review- is still UNSEEDED on the NAS: run nx_formatlaw review <actor> <files> over the F1/F1J/F2 offenders (1003 rows by the census) once the seg-store write storm clears (five concurrent nx_store_put whole-plane reseeds held the array in D-state today; loadgov LV15 is the fix).

RV4 The contract register plane · cell WATCHING · gate NO-GATE-DECLARED

Contract	`cr_register` · executor Organ · 2 u · stands on RV3
Definition of done	knowledge/store/contract- rows: party, kind (licence, contract, patent, obligation), the artifacts it binds, term, expiry, owner, status; nx_ipdock_lib deadline arithmetic drives an expiry watch that files a review row when a term is inside its window; every review finding that names a licence resolves to a contract row or reads UNBOUND
Matrix cell	CONTRACT REGISTER: licences, contracts, patents and legal obligations as plane rows with party, term, expiry, owner and the artifacts they bind · `runtime/nx_ipdock_lib.nx` · WATCHING decl
Gate	NO-GATE-DECLARED — `knowledge/organ_gate.conf` carries no row for `nx_ipdock_lib`; declare `nx_ipdock_lib TAB <gate>` and the ship loop proves it and the verdict lands here.
Work log	no log row names this rung yet

RV5 The patent table into the plane · cell WATCHING · gate NO-GATE-DECLARED

Contract	`pat_plane` · executor Organ · 1 u · stands on RV3
Definition of done	knowledge/store/patent- carries every row of specs/nx_patent_table.txt with a source citation per row; nx_patent_check reads the plane (the TSV demoted to a bootstrap fixture); the safe predicate keeps default-deny; a gate proves the plane and the fixture agree row for row and that an unknown algorithm is refused
Matrix cell	PATENT PLANE: the patent table migrated from specs/nx_patent_table.txt (TSV) into knowledge/store/patent- with provenance and hist · `runtime/nx_patent_check.nx` · WATCHING decl
Gate	NO-GATE-DECLARED — `knowledge/organ_gate.conf` carries no row for `nx_patent_check`; declare `nx_patent_check TAB <gate>` and the ship loop proves it and the verdict lands here.
Work log	no log row names this rung yet

RV6 The research-currency ratchet · cell WATCHING · gate NO-GATE-DECLARED

Contract	`rf_currency` · executor Gate · 1 u · stands on nothing
Definition of done	nx_compare_refs_gate gains a tooth: every SOTA-class domain cites at least one primary source whose accessed date is within twelve months of the emit; the census names each domain below the bar; ratcheted so the floor only rises
Matrix cell	RESEARCH CURRENCY: every SOTA board cites at least one primary source dated within twelve months, ratcheted, named per domain · `buildroot/runtime/nx_compare_refs_gate.nx` · WATCHING decl
Gate	NO-GATE-DECLARED — `knowledge/organ_gate.conf` carries no row for `nx_compare_refs_gate`; declare `nx_compare_refs_gate TAB <gate>` and the ship loop proves it and the verdict lands here.
Work log	no log row names this rung yet

RV7 IP clearance over the world pipeline · cell WATCHING · gate NO-GATE-DECLARED

Contract	`ip_pipeline_clear` · executor Gate · 2 u · stands on RV5
Definition of done	every organ in the graphics, game-engine, procgen and aesthetictwin lanes carries license_tier; algorithm names declared in a conf row per organ are checked against the patent plane; a rung whose organ is encumbered or undeclared reads INCOMPLETE on its board until the review queue clears it; proven by a neg-control organ declaring an active-patent algorithm
Matrix cell	IP CLEARANCE ON THE WORLD PIPELINE: every organ in the graphics, game-engine and procgen lanes carries a licence tier and its named algorithms are checked against the patent register before a rung is marked done · `runtime/nx_formatlaw_lib.nx` · WATCHING decl
Gate	NO-GATE-DECLARED — `knowledge/organ_gate.conf` carries no row for `nx_formatlaw_lib`; declare `nx_formatlaw_lib TAB <gate>` and the ship loop proves it and the verdict lands here.
Work log	no log row names this rung yet

RV8 Licence shippability into the queue · cell WATCHING · gate NO-GATE-DECLARED

Contract	`lg_review_row` · executor Organ · 1 u · stands on RV4
Definition of done	nx_licgate chain verdicts that are not shippable file a review row (kind LICENCE) naming the model or asset, the licence and the term that refuses; deduped by chain identity
Matrix cell	LICENCE SHIPPABILITY INTO THE QUEUE: nx_licgate verdicts over model and asset chains land as review rows · `runtime/nx_licgate.nx` · WATCHING decl
Gate	NO-GATE-DECLARED — `knowledge/organ_gate.conf` carries no row for `nx_licgate`; declare `nx_licgate TAB <gate>` and the ship loop proves it and the verdict lands here.
Work log	no log row names this rung yet

RV9 Rival marks carry their evidence · cell NO-MATRIX-ROW · gate NO-MATRIX-ROW

Contract	`rv_class` · executor Organ · 1.5 u · stands on RV6
Definition of done	nx_swcompare_lib classifies every matrix row whose rival columns assert Yes, Best or Part as CITED (the note carries a reference mark the refs gate resolves to a pinned mirror) or UNCITED (an observation read with nothing behind it); the matrix generator badges uncited rows in their evidence, prints rows, cited and uncited on the page and in api.json, and nx_swcompare_shape_gate proves the split on a fixture carrying both kinds; done-rule: the matrix leg lands GREEN and the sota generator carries the same classifier over its grade rows (the second leg of one law, never a second ruler), so the fleet count of uncited rival claims is a published number the boards can only lower
Matrix cell	NO-MATRIX-ROW — no matrix row carries `rv_class`; the ranker reads this rung as unmapped and no cell can flip for it. Add the row and the join completes on the next publish.
Gate	the gate join needs a matrix row: no organ is named for this rung
Work log	2026-09-05 measure found while using the estate as a third party on DanceXR (2026-09-05): the charsim viewer rows I landed carry rival codes for four titles typed from a vendor read; the refs gate reads 24/24 GREEN over them because it measures declared refs and marks, not rows -- a row that grades a rival with no mark at all is invisible to every instrument on the fleet, and that is the biggest hole between meaningful data and evidenced data on /compare 2026-09-05 land the classifier rv_class/rv_code/rv_note_cited landed in nx_swcompare_lib and the once-per-page count in nx_swcompare_matrix (source, both under CAS); the badge, the page band, the api.json tally and the shape-gate teeth follow in the same lane; build through /api/build under admission, promote by expect_sha256, restage buildroot/_offc, then the regen beat publishes the first fleet-wide uncited count 2026-09-05 land MATRIX LEG LIVE (2026-09-05): nx_swcompare_matrix built through /api/build to 371408 B and PROMOTED at sha 4f2744a5 with prev banked; nx_contentdiff live-vs-staged read lost_from_live=0, gained 5 runs, every one the new badge and band text (a strict superset); the promoted shape gate re-run against the just-built artifact stayed 11/11 GREEN, and the rebuilt shape gate with the four provenance teeth (T12 band count, T13 badge inside row A, two neg-controls on rows C and D) is queued behind build admission; the sota leg (the same rv_class over the sota grade rows) is still owed and is why this rung is not closed; the first fleet-wide uncited count appears in every matrix page's band and api.json tally on the next regen beat after buildroot/_offc is refreshed 2026-09-05 land SOTA LEG SOURCE-LANDED (2026-09-05): nx_swcompare_lib gained rv_grade_claims (B, Y, ~ are positive claims in the letter dialect) and rv_class_grades beside rv_class so both generators share ONE note rule; nx_swcompare_sota counts rows/cited/uncited once after its binding-drift loop, prints them in the badge row beside bound/stale-under/unbacked and as rival_rows/rival_cited/rival_uncited in api.json; build queued behind admission, and a sibling seat measured the same day that /api/build served a STALE cached artifact 3x across changed sources while nx_sov_build_run's key MISSed and compiled fresh -- so the sota rebuild is taken through the sovereign lane and staged by hash before promote 2026-09-05 land BOTH LEGS LIVE (2026-09-05): nx_swcompare_sota rebuilt through the sovereign lane in debug flavour (232064 B sha 9c7b2c5f; the release-flavour first cut tripped the promote guard on 186 symbol-name runs, all build metadata, lost_other=0 -- flavour, not loss), contentdiff live-vs-staged a strict superset (0 lost, 29 gained: the rival-claim badge counts and the sibling lane's mined-proposals band), PROMOTED with prev banked, offc-installed at both the serving root and buildroot/_offc where the regen forks it; the matrix leg was promoted earlier at 371408 B sha 4f2744a5; RV9's done-rule is met on the emitter side -- the fleet's first uncited count publishes on the next regen beat, and RV10 (expiry as data) is the open successor 2026-09-05 land REFEREE LEG LIVE (2026-09-05): nx_swcompare_shape_gate rebuilt through the sovereign lane in debug flavour (43744 B sha 2ed80528; the mgmt lane had served the PRE-EDIT 41992 B twice), contentdiff live-vs-built lost exactly one run -- the old T11 tooth name, reworded when T11 grew to count rows C and D -- and gained the 12 fixture and tooth strings, behaveprobe live_rc=0 other_rc=0 DIFFERS STRONG, PROMOTED with allow_capability_loss=yes prev=1, offc-installed, run on the NAS: 15/15 GREEN with T12 (band prints rows 3 cited 1 uncited 2), T13 (row A carries the uncited badge in its own row), neg-control row C (no rival, no badge) and neg-control row D (cited, no badge) all PASS; RV9 now has emitter + sota leg + referee, the first fleet-wide uncited count publishes on the next regen beat; operator ACCEPT owed 2026-09-05 measure FIRST PUBLISHED RIVAL-PROVENANCE NUMBER (2026-09-05): the compare beat ran at ts=1788632942 with all four generator forks FRESH (knowledge/status/compare_forkfresh.status checked=4 fresh=4 stale=0), i.e. after the refreshed buildroot/_offc twins, and the published sites/nishifamily/compare/browser/api.json now carries rival_rows=114 rival_cited=33 rival_uncited=81 -- on the browser board 710 permil of the rows that grade a rival carry no inline citation for that grade; this is ONE domain read by hand, not a fleet total, and the fleet rollup belongs to the emitter (hub or maturity board reading every api.json), which is the open successor to RV10; the uncited badge now renders inside each such row on the live page

RV10 Rival marks expire · cell NO-MATRIX-ROW · gate NO-MATRIX-ROW

Contract	`rv_expiry` · executor Organ · 1 u · stands on RV9
Definition of done	the reference behind a cited rival mark carries an accessed date; an expiry as DATA (knowledge/compare/refs_expiry.conf, one row per evidence class) turns a cited mark older than its class window into STALE-CITE, rendered with the drift classes the sota page already uses and named by the refs gate; done-rule: a planted old accessed date reads STALE-CITE, a fresh one CITED, and a class with no expiry row reads UNBOUNDED never STALE
Matrix cell	NO-MATRIX-ROW — no matrix row carries `rv_expiry`; the ranker reads this rung as unmapped and no cell can flip for it. Add the row and the join completes on the next publish.
Gate	the gate join needs a matrix row: no organ is named for this rung
Work log	no log row names this rung yet

RV11 Classification and exposure follow each artifact and callable capability · cell NO-MATRIX-ROW · gate NO-MATRIX-ROW

Contract	`_ABSENT_:classification_exposure_accept` · executor Workflow · unestimated u · stands on RV4, capregistry:CR1 (UNRESOLVED: no such rung on this plan), extllm:XL1 (UNRESOLVED: no such rung on this plan)
Definition of done	SOURCE-BOUND PLANNING CONTRACT 2026-09-24. Extend the existing contract register, capability inventory and provider-terms owner; do not create a second rights or credential store. Input is an identified artifact or API capability plus its proprietor, third-party obligations, confidentiality, permitted recipients and explicit publication decision. Output is a versioned classification decision consumed by existing emit/publish/call boundaries, with UNKNOWN refusing exposure rather than defaulting public. Demonstrate proprietary source withheld while approved interface metadata remains discoverable, third-party notices retained, credential values absent from public evidence, and an attempted unapproved export refused. Provider no-training/retention claims require observed account controls and current terms; this contract does not authorize model training or a new provider. Cost remains unestimated; design decision and implementation/verification/production approval are separate.
Matrix cell	NO-MATRIX-ROW — no matrix row carries `classification_exposure_accept`; the ranker reads this rung as unmapped and no cell can flip for it. Add the row and the join completes on the next publish.
Gate	the gate join needs a matrix row: no organ is named for this rung
Work log	no log row names this rung yet

RV12 Applicable obligations are a versioned decision set with an accountable reviewer · cell NO-MATRIX-ROW · gate NO-MATRIX-ROW

Contract	`_ABSENT_:applicability_decision_accept` · executor Workflow · unestimated u · stands on RV4, RV6
Definition of done	SOURCE-BOUND PLANNING CONTRACT 2026-09-24. Compose the existing contract and research-freshness owners. For a named entity, product, jurisdiction and intended use, retain each candidate engineering, security, safety, privacy or legal requirement with pinned primary source, edition, applicability rationale, responsible specialist, checked time and review decision. Output APPLICABLE, NOT_APPLICABLE_WITH_REASON, UNKNOWN or REQUIRES_QUALIFIED_REVIEW; a linked survey is never proof that every named law applies. Demonstrate a stale source triggers research while a current approved rule can be reused; a missing jurisdiction or reviewer stays unresolved, and the existing PM/Compare surface shows the required next action. Legal coordinates applicability review with technical and domain specialists; no compliance certification from a passing parser. Effort and financial return unestimated.
Matrix cell	NO-MATRIX-ROW — no matrix row carries `applicability_decision_accept`; the ranker reads this rung as unmapped and no cell can flip for it. Add the row and the join completes on the next publish.
Gate	the gate join needs a matrix row: no organ is named for this rung
Work log	no log row names this rung yet

dossiers=12 cells_joined=8 no_matrix_row=4 (sum 12) gates_recorded=0 gates_unrecorded=0 no_gate_declared=8 (sum 8 of cells_joined) evgates=UNSTAMPED

Capability comparisons

Compare the field, search individual capabilities and open their source and adoption evidence. Documented presence does not establish comparative quality.

Position map — centrality and distinctiveness

The four-quadrant map the field uses for brand strategy (Dawar and Bagga, HBR June 2015), re-derived from this matrix on every publish. Centrality is the share of the category's feature mass a player covers, each feature weighted by how many hold it; distinctiveness is the average lead over each rival on the rows the player holds; breadth is the depth-weighted share of the whole matrix (the bubble); depth is how deeply the rows held are held; momentum is the day-over-day move off the spine (green rising, red falling, grey until day two); the dashed path runs first day → previous day → today. Dividers are the category means. Axes are fitted to the field of play, so read the tick numerals, not the frame. Rival marks are documented presence, so a rival's position reads the record, never its quality. The picture grades its own readability below; the table beside it is the same data for a screen reader or a second method.

Rows. 12 feature rows mapped of 12 matrix rows; 0 substrate rows (kernels, bounds and instruments the plan's rungrole marks substrate) are the estate's scaffolding, not category features, and stay off the map

Views. 2D cut: centrality, distinctiveness · 3D cube: centrality, distinctiveness, breadth · axes registered: centrality, distinctiveness, breadth, depth, momentum · a board picks its own in knowledge/compare/review.cdmap (cut|x|y, cube|x|y|z); absent = the HBR defaults

bubble area = breadth · ring = momentum (green rising, red falling, grey until day two) · dashed = category means · axes fitted to the field of play: centrality 500–1000, distinctiveness 0–500 of 0–1000 permil (the full range put every player in one corner)
readability of the 2D cut, self-graded by the layout ruler: label overlaps 0 · labels over marks 0 · off-canvas 0 · unresolved labels 0 · mark overlaps 0 (a fact of the data: two players that close are that close) · data spread 653 permil of the plot · quadrant words unseated 0
text contrast, measured with wcag2-ratio (floors from contrast.conf), light theme: labels 16.24 (floor 4.50) · notes 16.24 (floor 4.50) · quadrant words 5.89 (floor 4.50) · tick numerals 5.89 (floor 4.50) · axis titles 5.59 (floor 4.50) · dark theme: labels 13.78 (floor 4.50) · quadrant words 5.55 (floor 4.50) · axis titles 5.97 (floor 4.50) · dark classes under their floor 0 (one figure serves both themes: a dark shortfall is a token to fix, never a class to hide) · classes refused under their floor 0 (a refused class is not drawn; the scale classes are measured, never hidden) · export: SVG PNG (receipt, rendered by the estate's own rasteriser from this page)

axes fitted: centrality 500–1000 · distinctiveness 0–500 · breadth 280–420 permil · farther bubbles are painted first, nearer ones over them · the floor shadow is each bubble's (x, y) at height 0
readability of the 3D cube, self-graded by the layout ruler: label overlaps 0 · labels over marks 0 · off-canvas 1 · unresolved labels 0 · mark overlaps 0 (a fact of the data: two players that close are that close) · data spread 434 permil of the plot

Nishi Snyk (code and licence scanning) FOSSA (open-source licence compliance) Black Duck SCA (licence and security audit) ServiceNow IRM (risk register / GRC)
10 panels over 5 registered axes, every pair once (the lower axis on x, the higher on y) · each panel fitted to its own field of play, first and last tick numerals shown · no labels in a small cut, the legend names the colours; the grade below reports the mark terms only (MM summed over the panels, spread averaged)
readability of the small multiples, self-graded by the layout ruler: label overlaps 0 · labels over marks 0 · off-canvas 0 · unresolved labels 0 · mark overlaps 9 (a fact of the data: two players that close are that close) · data spread 518 permil of the plot

Player	Quadrant	centrality	distinctiveness	breadth	depth	momentum	Rows held	Days on spine	First seen
Nishi	Unconventional	558	430	361	722	0 since 2026-09-23	6	10	2026-09-15
Snyk (code and licence scanning)	Mainstream	794	142	305	523	0 since 2026-09-23	7	10	2026-09-15
FOSSA (open-source licence compliance)	Mainstream	823	130	305	523	0 since 2026-09-23	7	10	2026-09-15
Black Duck SCA (licence and security audit)	Mainstream	911	135	333	500	0 since 2026-09-23	8	10	2026-09-15
ServiceNow IRM (risk register / GRC)	Unconventional	676	430	388	777	0 since 2026-09-23	6	10	2026-09-15

Day	Matrix rows reviewed	Players recorded
2026-09-15	12	5
2026-09-16	12	5
2026-09-17	12	5
2026-09-18	12	5
2026-09-19	12	5
2026-09-20	12	5
2026-09-21	12	5
2026-09-22	12	5
2026-09-23	12	5
2026-10-08	12	5

How to read this evidence. A Nishi source mark records whether the named symbol is declared in the selected source file. It does not establish working behavior or accepted delivery. A watching tag names an expected source entry; discovering it updates source coverage only. A dark tag means the file exists but the named symbol was not found: inspect the source and contract before assuming the capability is missing or renaming code. Peer codes are authored assessments; unassessed means no comparison is established, not absence. Qualification, deployment identity, runtime observations and acceptance must carry their own evidence. Adoption records the catalog's observed path through source, build, promotion, registration and invocation; libraries use importer evidence and gates use declared execution surfaces. A full catalog path does not establish quality, freshness or a successful user outcome. Partial and unknown states retain their stated next action. Census stamps: importers asof 1790637268, gate census asof 1790104131 (unix seconds; -1 = census absent).

Capability matrix — measured against source

◉ authored stronger claim; source present● present◐ partial○ absent? unassessed; excluded from relative comparison · click any capability for its evidence

Peer cell coverage: authored assessed 48, unassessed 0. Authored assessments are not verified outcomes.

Capability	Nishi	Snyk (code and licence scanning)	FOSSA (open-source licence compliance)	Black Duck SCA (licence and security audit)	ServiceNow IRM (risk register / GRC)
LAW SCAN
legacy durable formats, third-party executable paths and a missing licence tier found in SOURCE LITERALS, comments skipped Measured: `fl_scan` exists in `runtime/nx_formatlaw_lib.nx`, verified at emit. Snyk, FOSSA and Black Duck scan dependency manifests and licence headers (Part: none looks for durable-format path literals or third-party exec paths); ServiceNow IRM scans nothing (No). Ours reads three estate laws off the code itself, with exemptions declared (fetched evidence, fixtures, wire formats) and every finding located to file:line with its remedy. rival marks uncited — the Yes, Best or Part codes on this row are an observation read with no reference mark behind them Adoption: `LIB-WIRED importers=2 nonval=1` — fully adopted (top of its ladder). dossier Pros Implementing source symbol found; runtime acceptance separate; ahead of Snyk (code and licence scanning), FOSSA (open-source licence compliance), Black Duck SCA (licence and security audit), ServiceNow IRM (risk register / GRC); fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth)	●	◐	◐	◐	○
CENSUS
the whole source tree scanned, per-class counts with a kept-cap that announces itself as a prefix Measured: `flc_scan_path` exists in `runtime/nx_formatlaw.nx`, verified at emit. All three code scanners run tree-wide (Yes). Ours prints total and shown separately so a capped list can never be read as a population. rival marks uncited — the Yes, Best or Part codes on this row are an observation read with no reference mark behind them Adoption: `REGISTERED-UNAUTHORISED` — PARTIAL: registered, no cap ever minted; no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked). dossiernot adopted: registered, no cap ever minted; no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked) Pros Implementing source symbol found; runtime acceptance separate; ahead of ServiceNow IRM (risk register / GRC)Cons not adopted yet: registered, no cap ever minted; no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked)	●	●	●	●	○
WRITE-TIME PRE-FLIGHT: the same scanner at the instant a source is written (PreToolUse hook), advisory, never blocking Measured: `flc_report` exists in `runtime/nx_formatlaw.nx`, verified at emit. Snyk offers IDE plugins that flag on save (Part); FOSSA and Black Duck run in CI (No at authoring time); ServiceNow IRM has no authoring hook (No). Ours rides the laptop's PreToolUse/Write hook beside the memory and organ pre-flights. rival marks uncited — the Yes, Best or Part codes on this row are an observation read with no reference mark behind them Adoption: `REGISTERED-UNAUTHORISED` — PARTIAL: registered, no cap ever minted; no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked). not adopted: registered, no cap ever minted; no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked) Pros Implementing source symbol found; runtime acceptance separate; ahead of Snyk (code and licence scanning), FOSSA (open-source licence compliance), Black Duck SCA (licence and security audit), ServiceNow IRM (risk register / GRC)Cons not adopted yet: registered, no cap ever minted; no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked)	●	◐	○	○	○
REVIEW QUEUE
every finding is a provenanced 7-col plane row (id title sev status owner scope note), deduped by identity Measured: `flc_report` exists in `runtime/nx_formatlaw.nx`, verified at emit. Every rival keeps a findings queue (Yes); ServiceNow's issue register is the best of breed (Best). Ours is a sovereign store plane with append-only history the estate's board readers already read; the id is the FNV of file + literal + class so a re-scan files nothing twice. rival marks uncited — the Yes, Best or Part codes on this row are an observation read with no reference mark behind them Adoption: `REGISTERED-UNAUTHORISED` — PARTIAL: registered, no cap ever minted; no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked). not adopted: registered, no cap ever minted; no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked) Pros Implementing source symbol found; runtime acceptance separateCons behind ServiceNow IRM (risk register / GRC) (leads); not adopted yet: registered, no cap ever minted; no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked)	●	●	●	●	◉
RISK REGISTER
operator-owned threat enumeration with archetypes, actor classes, status and an exposure score Measured: `nx_risk_register_append` exists in `runtime/nx_risk_register.nx`, verified at emit. ServiceNow IRM is the field's register (Best); Black Duck carries risk scores per component (Part). Ours exists as a lib with sealed enums and additive-only append and is not yet fed by the queue. rival marks uncited — the Yes, Best or Part codes on this row are an observation read with no reference mark behind them Adoption: `LIB-GATE-ONLY importers=1` — PARTIAL: imported only by validation organs (gates, tests, benches): wire it into a shipping program. not adopted: imported only by validation organs (gates, tests, benches): wire it into a shipping program Pros Implementing source symbol found; runtime acceptance separate; ahead of Snyk (code and licence scanning), FOSSA (open-source licence compliance), Black Duck SCA (licence and security audit)Cons behind ServiceNow IRM (risk register / GRC) (leads); not adopted yet: imported only by validation organs (gates, tests, benches): wire it into a shipping program	●	○	○	◐	◉
PATENT REGISTER: offline patent-encumbrance table with a safe predicate (public-domain, expired, active, unknown=deny) Source present; authored stronger claim: `nx_patent_is_safe` in `runtime/nx_patent_check.nx`, verified at emit. None of the four rivals answers patent encumbrance per algorithm (No). Ours does, offline, default-deny -- but its table is a TSV under specs/ and it is consulted by nothing in the graphics or game pipeline yet (RV5, RV7). Adoption: `LIB-WIRED importers=3 nonval=2` — fully adopted (top of its ladder). Pros Source symbol found; stronger capability claim is authored; ahead of Snyk (code and licence scanning), FOSSA (open-source licence compliance), Black Duck SCA (licence and security audit), ServiceNow IRM (risk register / GRC); fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth)	◉	○	○	○	○
LICENCE SHIPPABILITY INTO THE QUEUE: nx_licgate verdicts over model and asset chains land as review rows DARK — `runtime/nx_licgate.nx` EXISTS but does not declare `lg_review_row`: something shipped at this path under another name, and this mark would read open forever. Repoint the contract to the real entry point (the plan rung AND this row) or rename the function; the flip follows on the next beat, and the `comparewatch-` plane row reads DARK until then. FOSSA and Black Duck grade licence compatibility per artifact (Yes), Snyk per dependency (Yes); ServiceNow tracks the obligation, not the chain (Part). Done-rule in review.plan RV8. rival marks uncited — the Yes, Best or Part codes on this row are an observation read with no reference mark behind them dossierwatching lg_review_row Pros none measured yetCons behind Snyk (code and licence scanning), FOSSA (open-source licence compliance), Black Duck SCA (licence and security audit), ServiceNow IRM (risk register / GRC); open contract; expected source declaration not established	○	●	●	●	◐
CONTRACT REGISTER: licences, contracts, patents and legal obligations as plane rows with party, term, expiry, owner and the artifacts they bind DARK — `runtime/nx_ipdock_lib.nx` EXISTS but does not declare `cr_register`: something shipped at this path under another name, and this mark would read open forever. Repoint the contract to the real entry point (the plan rung AND this row) or rename the function; the flip follows on the next beat, and the `comparewatch-` plane row reads DARK until then. ServiceNow IRM's policy and obligation register is the field bar (Best); FOSSA and Black Duck hold licence obligations per component (Part); Snyk none (No). Done-rule RV4: the register ties every row to the review finding that raised it and to the compare rung it gates. rival marks uncited — the Yes, Best or Part codes on this row are an observation read with no reference mark behind them dossierwatching cr_register Pros none measured yetCons behind FOSSA (open-source licence compliance), Black Duck SCA (licence and security audit), ServiceNow IRM (risk register / GRC) (leads); open contract; expected source declaration not established	○	○	◐	◐	◉
GATED /review SURFACE: nishifamily.com/review behind the OPAQUE wall renders the queue, the risk register and the contract register from the planes DARK — `runtime/nx_compare_gw.nx` EXISTS but does not declare `rv_gateway`: something shipped at this path under another name, and this mark would read open forever. Repoint the contract to the real entry point (the plan rung AND this row) or rename the function; the flip follows on the next beat, and the `comparewatch-` plane row reads DARK until then. Every rival ships a web console (Yes; ServiceNow Best). Ours is the compare_gw shape: loopback daemon, no-cookie session on the estate realm, HR level deny-by-default, one emitter over the planes. Done-rule RV3. rival marks uncited — the Yes, Best or Part codes on this row are an observation read with no reference mark behind them dossierwatching rv_gateway Pros none measured yetCons behind Snyk (code and licence scanning), FOSSA (open-source licence compliance), Black Duck SCA (licence and security audit), ServiceNow IRM (risk register / GRC) (leads); open contract; expected source declaration not established	○	●	●	●	◉
PATENT PLANE
the patent table migrated from specs/nx_patent_table.txt (TSV) into knowledge/store/patent- with provenance and hist DARK — `runtime/nx_patent_check.nx` EXISTS but does not declare `pat_plane`: something shipped at this path under another name, and this mark would read open forever. Repoint the contract to the real entry point (the plan rung AND this row) or rename the function; the flip follows on the next beat, and the `comparewatch-` plane row reads DARK until then. No rival carries a patent ledger at all (No). Done-rule RV5: the reader composes the plane, the TSV becomes a bootstrap fixture, every row cites its source. dossierwatching pat_plane Pros none measured yetCons open contract; expected source declaration not established	○	○	○	○	○
RESEARCH CURRENCY: every SOTA board cites at least one primary source dated within twelve months, ratcheted, named per domain Open — watching `buildroot/runtime/nx_compare_refs_gate.nx` : `rf_currency`, re-measured on every compare beat. Ship that symbol and this mark flips itself; the `comparewatch-` plane row flips with it. No rival measures the age of the evidence behind a claim (No). Done-rule RV6 (operator: research as of September 2026). dossierwatching rf_currency Pros none measured yetCons open contract; expected source declaration not established	○	○	○	○	○
IP CLEARANCE ON THE WORLD PIPELINE: every organ in the graphics, game-engine and procgen lanes carries a licence tier and its named algorithms are checked against the patent register before a rung is marked done DARK — `runtime/nx_formatlaw_lib.nx` EXISTS but does not declare `ip_pipeline_clear`: something shipped at this path under another name, and this mark would read open forever. Repoint the contract to the real entry point (the plan rung AND this row) or rename the function; the flip follows on the next beat, and the `comparewatch-` plane row reads DARK until then. Rivals clear dependencies and licences (Part) but not algorithms against patents (No on that half). Done-rule RV7 (operator: tooled for VR-hot or GTA-6 scale work while not hitting patents and licences). rival marks uncited — the Yes, Best or Part codes on this row are an observation read with no reference mark behind them dossierwatching ip_pipeline_clear Pros none measured yetCons behind Snyk (code and licence scanning), FOSSA (open-source licence compliance), Black Duck SCA (licence and security audit), ServiceNow IRM (risk register / GRC); open contract; expected source declaration not established	○	◐	◐	◐	◐

Rival-claim provenance. Every Yes, Best or Part mark in a rival column is a claim about someone else's product. A cited row carries a reference mark that resolves to a pinned mirror (the refs gate measures that); an uncited row is an observation read and is badged in its evidence until a reference lands. The badge is the receipt, never the proof: a mark proves a mirror exists, not that the mirror supports the code. The rows are counted below.

Rival claims, counted
Class	Count	Note
rows with rival marks	9	rows carrying a Yes, Best or Part in a rival column
cited	0	a reference mark resolves to a pinned mirror
uncited	9	an observation read, badged until a reference lands
rows, summed	9	RECONCILED: the parts sum to the total 9

Delivery and evidence

Inspect risks, technical debt, rendered observations, experiments and references. Read scope and limitations alongside every result.

Risk register

Risk	Likelihood x impact	Mitigation
The queue becomes a graveyard nobody reads	likely x high	RV3 puts it on a surface the operator opens; every row carries a remedy and an owner; the emitter renders the OPEN count on /compare/review so growth is visible.
A scanner false positive teaches everyone to ignore it	possible x high	the gate carries neg-controls for prose, exemptions and the scanner's own tables; the first census found and fixed two such shapes before any row was filed.

Release history and work log

The worked plan, on the board. Every leg appends what it measured, landed, retracted, learned and left queued, per rung, so a crash leaves the next seat a ledger here rather than a transcript to mine. Kinds: measure, land, retract, lesson, queue. Newest last.

When	Rung	Kind	Entry
2026-09-02	RV1	measure	NAS census 2026-09-02 (nx_formatlaw tree over buildroot/runtime + _hdl_build, 19176 files, coverage complete): flagged=9395 clean=9781 (sums to 19176); per-class F1 durable-legacy-format=822, F1J json-as-state=38, F2 third-party-exec-path=143, F3 no-license_tier=8890. Laptop tree the same day read 19277 files F1=818 F1J=39 F2=144 F3=8954: the two trees differ by 101 files and the class counts move with them, so the census is a property of the tree, not of the scanner.
2026-09-02	RV2	land	nx_formatlaw (eff53611, 129288 B) and nx_formatlaw_gate (916d31c0, 39768 B) PROMOTED and REGISTERED on the NAS through the laptop-built chunked staging lane (closure-hash identity then nx_content_put then /api/promote with expect_sha256); /api/gate_run nx_formatlaw_gate GREEN 26/26 on the NAS; knowledge/compare/review.gates written with that row, so the honesty board can count review as executed evidence instead of CLAIM-ONLY. The scanner never blocks: exit 1 means findings exist.
2026-09-02	RV3	queue	the review queue plane knowledge/store/review- is still UNSEEDED on the NAS: run nx_formatlaw review <actor> <files> over the F1/F1J/F2 offenders (1003 rows by the census) once the seg-store write storm clears (five concurrent nx_store_put whole-plane reseeds held the array in D-state today; loadgov LV15 is the fix).
2026-09-05	RV9	measure	found while using the estate as a third party on DanceXR (2026-09-05): the charsim viewer rows I landed carry rival codes for four titles typed from a vendor read; the refs gate reads 24/24 GREEN over them because it measures declared refs and marks, not rows -- a row that grades a rival with no mark at all is invisible to every instrument on the fleet, and that is the biggest hole between meaningful data and evidenced data on /compare
2026-09-05	RV9	land	the classifier rv_class/rv_code/rv_note_cited landed in nx_swcompare_lib and the once-per-page count in nx_swcompare_matrix (source, both under CAS); the badge, the page band, the api.json tally and the shape-gate teeth follow in the same lane; build through /api/build under admission, promote by expect_sha256, restage buildroot/_offc, then the regen beat publishes the first fleet-wide uncited count
2026-09-05	RV9	land	MATRIX LEG LIVE (2026-09-05): nx_swcompare_matrix built through /api/build to 371408 B and PROMOTED at sha 4f2744a5 with prev banked; nx_contentdiff live-vs-staged read lost_from_live=0, gained 5 runs, every one the new badge and band text (a strict superset); the promoted shape gate re-run against the just-built artifact stayed 11/11 GREEN, and the rebuilt shape gate with the four provenance teeth (T12 band count, T13 badge inside row A, two neg-controls on rows C and D) is queued behind build admission; the sota leg (the same rv_class over the sota grade rows) is still owed and is why this rung is not closed; the first fleet-wide uncited count appears in every matrix page's band and api.json tally on the next regen beat after buildroot/_offc is refreshed
2026-09-05	RV9	land	SOTA LEG SOURCE-LANDED (2026-09-05): nx_swcompare_lib gained rv_grade_claims (B, Y, ~ are positive claims in the letter dialect) and rv_class_grades beside rv_class so both generators share ONE note rule; nx_swcompare_sota counts rows/cited/uncited once after its binding-drift loop, prints them in the badge row beside bound/stale-under/unbacked and as rival_rows/rival_cited/rival_uncited in api.json; build queued behind admission, and a sibling seat measured the same day that /api/build served a STALE cached artifact 3x across changed sources while nx_sov_build_run's key MISSed and compiled fresh -- so the sota rebuild is taken through the sovereign lane and staged by hash before promote
2026-09-05	RV9	land	BOTH LEGS LIVE (2026-09-05): nx_swcompare_sota rebuilt through the sovereign lane in debug flavour (232064 B sha 9c7b2c5f; the release-flavour first cut tripped the promote guard on 186 symbol-name runs, all build metadata, lost_other=0 -- flavour, not loss), contentdiff live-vs-staged a strict superset (0 lost, 29 gained: the rival-claim badge counts and the sibling lane's mined-proposals band), PROMOTED with prev banked, offc-installed at both the serving root and buildroot/_offc where the regen forks it; the matrix leg was promoted earlier at 371408 B sha 4f2744a5; RV9's done-rule is met on the emitter side -- the fleet's first uncited count publishes on the next regen beat, and RV10 (expiry as data) is the open successor
2026-09-05	RV9	land	REFEREE LEG LIVE (2026-09-05): nx_swcompare_shape_gate rebuilt through the sovereign lane in debug flavour (43744 B sha 2ed80528; the mgmt lane had served the PRE-EDIT 41992 B twice), contentdiff live-vs-built lost exactly one run -- the old T11 tooth name, reworded when T11 grew to count rows C and D -- and gained the 12 fixture and tooth strings, behaveprobe live_rc=0 other_rc=0 DIFFERS STRONG, PROMOTED with allow_capability_loss=yes prev=1, offc-installed, run on the NAS: 15/15 GREEN with T12 (band prints rows 3 cited 1 uncited 2), T13 (row A carries the uncited badge in its own row), neg-control row C (no rival, no badge) and neg-control row D (cited, no badge) all PASS; RV9 now has emitter + sota leg + referee, the first fleet-wide uncited count publishes on the next regen beat; operator ACCEPT owed
2026-09-05	RV9	measure	FIRST PUBLISHED RIVAL-PROVENANCE NUMBER (2026-09-05): the compare beat ran at ts=1788632942 with all four generator forks FRESH (knowledge/status/compare_forkfresh.status checked=4 fresh=4 stale=0), i.e. after the refreshed buildroot/_offc twins, and the published sites/nishifamily/compare/browser/api.json now carries rival_rows=114 rival_cited=33 rival_uncited=81 -- on the browser board 710 permil of the rows that grade a rival carry no inline citation for that grade; this is ONE domain read by hand, not a fleet total, and the fleet rollup belongs to the emitter (hub or maturity board reading every api.json), which is the open successor to RV10; the uncited badge now renders inside each such row on the live page

On these two registers. Rows are declared in the domain's plan file and carry the debt id, which is the join key back to the sovereign debt plane — that plane, not this page, is the authority on state. Reconciling them automatically (the regen reading the plane and refreshing these rows) is a named, owed rung; until it lands, treat an id here as a pointer to look up, not a status to trust.

Honest verdict. MEASURED 2026-09-02 on the laptop authoring tree, full population and no sample: 19,277 NishiLang sources scanned by nx_formatlaw -- 818 durable legacy-format path literals (.tsv .csv .sqlite .yaml ...), 39 JSON-as-durable-state literals, 144 third-party executable paths in build or serving lanes, 8,954 sources without a license_tier declaration. The scanner is gate-proven 26/26 (planted classes fire, exemptions and prose stay silent, the count outlives its kept cap), rides every source write on the laptop as an advisory pre-flight, and files F1/F1J/F2 findings as 7-col rows into knowledge/store/review- with an identity that dedupes a re-scan. What is ABSENT is the surface: no gated /review page, no contract register plane, the patent table still a TSV, no research-currency ratchet, no licgate verdicts flowing into the queue. No perceptual or product win is claimed over any rival.

Person · product · place — not yet measured for this domain

Every compare carries this layer. Declare knowledge/compare/review.ppp (rows surface|nishi or c1..c4|label|url|connect naming OUR live surface and each rival's front door), run nx_ppp_probe domain review, and this section fills itself on the next beat: the same ruler on both sides — privacy and CX (third-party hosts, tracker classes, cookies, security headers), design and longevity (design hygiene, computed WCAG contrast, render-blocking resources, unsized media, script weight, theme and motion queries), findability (landmarks, skip link, on-site search, breadcrumb, headings, internal links).

Exclusive and shared capabilities

One capability is graded on one board; every other board references it. The fleet duplicate census (nx_rivalcensus dupes, on the fleetdupes clock row) reads every board's matrix and names each capability graded as a row on two or more boards, with a home derived from evidence: rung when exactly one board's plan contracts the symbol (that board is starred), gates when no plan contracts it and exactly one board's executed gate map runs the organ's gate (that board is plussed), ambiguous when several boards carry the deciding evidence (a decision for their seats), and none when no evidence decides it, with the reason beside it: unmapped (no board of the duplicate declares a gates map; declare the maps) or unproven (a map exists and runs none of the organ's gates; gate the organ on its proving board, or declare it a shared library by policy). A home elsewhere means this board should carry an @xrow reference to the home board's row rather than a graded row of its own; a home here means the other boards should. The table is this board's slice of one estate-wide census: the shape is shared, the rows are the board's.

This board grades 11 capabilities: 11 exclusive to it and 0 shared with other boards. Shared rows on this page: 0 = home here 0 + home elsewhere 0 + ambiguous 0 + undecided 0 + refused 0 (partition 0); undecided = unmapped 0 + unproven 0 + unevidenced 0; homonyms 0; since the previous census: new 0, resolved 0. Census FRESH age_s=7082.

Gaps from the record — what the estate does that no board carries

The record census (nx_goalmap record) reads the invoked-tool population and every plan queue row and files each organ or directive that NO matrix, plan or gates row names. A row here is a callout the boards missed: adjudicate it onto a board or declare it infrastructure. Census state STALE (age 1396187 s), sources read 4 of 7 declared — a BLIND census is a FLOOR: unread sources can only add rows.

kind	name	board	source	evidence

rows shown 0|this board's directives 0|estate-wide un-boarded organs 452 (listed in full on /compare/ecosystem)|census rows 639|malformed 0 (counted, never rendered)

generated by nx_swcompare_matrix (sovereign NishiLang organ) from knowledge/compare/review.matrix · source checks show implementation presence; runtime and user-outcome evidence are reported separately · JavaScript supports page controls