nanofil/nix/hello-fixture.nix
Hello's linked checked module, the program the Iris proof of GNU Hello is about (docs/logic.md, docs/formal.md's Campaign 7), regenerated from the real build and compared with the committed rocq/theories/HelloCode.v. generated builds nanofil-hello-O as hello.nix does (configure, flags and link unchanged), keeping each object's checked term as bench/trap-census.nix does, links the terms with rocq/link.pl from main and prints the result with rocq/gallina.pl. The check fails when the two differ, so the proof cannot go on describing a Hello nanofil no longer makes. To refresh the fixture: rocq/hello-fixture.sh --update. Only the files the compile, the census and the link read are its source, so an edit elsewhere in nanofil/ leaves the check's hash, and its cached result, unchanged (.github/workflows/nanofil-hello-fixture.yml runs it on the same files).
The census's capture: the wrapper still compiles each object with nanofil, and also saves its checked term.