Summary

Execute the previously whitelisted System.authorizeUpgrade call via the Whitelisted Caller track to authorize runtime upgrade nexus-v6900 on Nexus. This proposal must follow successful enactment of the prior Fellowship whitelist referendum for the same call hash.

Dispatch call

• Outer call: Whitelist.dispatchWhitelistedCall(callHash, callEncodedLen, callWeightWitness) (pallet index 83, call index 2)
• Parameters:
  • callHash: 0x2318756cbce11dadb647782edc2d046f45b5056f9f5f78ad2ebb2c5e45033af4 (keccak-256 of the preimage; matches the hash whitelisted by the Fellowship)
  • callEncodedLen: 34 (byte length of the encoded System.authorizeUpgrade call)
  • callWeightWitness: weight of the inner System.authorizeUpgrade call — populate from the on-chain weight witness when constructing on polkadot.js
• Preimage to register on-chain (via Preimage.notePreimage): 0x000902cd8c1fb79c6a4b3d316ba14032cd125bdb01ced1e5ff9b7c6418a717f2c5cf
• Preimage decoded: System.authorizeUpgrade(codeHash = 0x02cd8c1fb79c6a4b3d316ba14032cd125bdb01ced1e5ff9b7c6418a717f2c5cf)
• Decode/verify preimage: https://polkadot.js.org/apps/?rpc=wss%3A%2F%2Fnexus.rpc.polytope.technology#/extrinsics/decode/0x000902cd8c1fb79c6a4b3d316ba14032cd125bdb01ced1e5ff9b7c6418a717f2c5cf

Track

• Origin: WhitelistedCaller
• Track: Whitelisted Caller (track id 1 on Nexus governance)

Runtime info

• Release: nexus-v6900 (published 2026-05-14)
• Spec: nexus-6900 (nexus-0.tx1.au1), Metadata V14
• WASM: nexus_runtime-v6900.compact.compressed.wasm — 2,007,609 bytes (1.92 MiB)
• WASM Keccak-256: 0x02cd8c1fb79c6a4b3d316ba14032cd125bdb01ced1e5ff9b7c6418a717f2c5cf
• Toolchain: rustc 1.91.1 (ed61e7d7e 2025-11-07)

Changes in this release

• #834 [runtime] Fix ABI encoding/decoding in pallet-bandwidth
• #835 [runtime] Remove token gateway pallets
• #836 [runtime] Introduce pallet-beefy-consensus proofs to the Nexus runtime

Motivation

The Fellowship has already whitelisted call hash 0x2318756c…33af4 (which encodes System.authorizeUpgrade for the v6900 WASM). This referendum authorizes the runtime to actually accept the upgrade by dispatching the whitelisted call from a WhitelistedCaller origin.

Verification steps for voters

1. Confirm a successful Fellowship whitelist referendum exists for call hash 0x2318756cbce11dadb647782edc2d046f45b5056f9f5f78ad2ebb2c5e45033af4.
2. Confirm the preimage 0x000902cd…c5cf is registered on-chain (Preimage.preimageFor / Preimage.statusFor) and decodes to System.authorizeUpgrade(0x02cd8c1f…c5cf).
3. Verify the keccak-256 of the published WASM (nexus_runtime-v6900.compact.compressed.wasm) equals 0x02cd8c1f…c5cf, either by downloading from the release or rebuilding from tag nexus-v6900:

   git checkout nexus-v6900
   ./scripts/build_release_runtime.sh nexus-runtime
   

Enactment plan

1. Submit the preimage 0x000902cd…c5cf via Preimage.notePreimage (if not already registered).
2. This referendum passes on the Whitelisted Caller track and dispatches System.authorizeUpgrade(0x02cd8c1f…c5cf), storing the authorization on-chain.
3. Any account then submits System.applyAuthorizedUpgrade(code) with the released WASM blob to swap the runtime.