Sovereign IO Layer

The agent-facing file surface: read, write, edit, search — every verb externally graded, capability-partitioned, portable to NishiOS at the seam.

YES Can an agent read files safely? nx_fs refuses secret material by construction — graded EXCEED vs cat + Claude Read.

YES Can an agent write and edit? nx_fs_write lands atomically and edits with a uniqueness contract — byte-identical with coreutils and Claude Edit, and it refused /dev/sda with a valid capability.

YES Can it publish this very page? nx_site_publish placed this file — prior version preserved, path traversal refused.

Published through the organ it describes, then verified browser-grade from a WAN vantage. Machine detail lives in the coverage map and bench registry, not on this page.