AGPL-3.0-or-later · forever.

the error register

NIKA-SEC-011

preview-commit divergence — the commit digest recomputed at the sink over the exact bytes about to fire differs from the preview digest computed at resolution (one bit of rendered argv · a permuted context field · a mutated tool argument) · the step refuses fail-closed and the receipt carries divergence:{preview, commit} — judged = executed at the action scale (NEP-0015 · F-P6). A typed refusal, one of 103 the registry names: stable code, spec category, the transient flag the retry machinery reads. The engine stamps this page's address on the finding itself. Route on the code, never on prose. Machines read the catalog.

  • security_errorcategorya security policy refused the effect
  • stablea retry cannot helpfix the file, not the timing
  • 11of 14 in NIKA-SECprev / next walk the registry
  • 103registered codesthe normative floor · versioned

hear it from the binary

nika explain NIKA-SEC-011 answers offline with the failure, the fix shape and this page's address: the same text the check finding carries. A code is a contract: never renamed, never repurposed, safe to route on in on_codes and retry policy.

cross-references

no word or tool room names this code yet; the registry row is the whole story today.

Break a file on purpose in the playground and watch the code arrive typed. The boundary teaches the security family. Read the spec →