cmd/

nova-check runs the record-layer checks described in SPEC.md: boot attestation, link integrity, the kernel size budget, and the self/machinery separation.

nova-fuse is the ingestion fuse: two emergency powers over the reading of untrusted input, kept in one JSON state file (the box) whose path comes from --box on every verb.

nova-self-talk classifies first-person self-claims in prose: sentences about what the writer permanently IS or permanently CANNOT do.