Summary

Whitelist a Utility.batchAll preimage that atomically applies the runtime upgrade, sets the BEEFY prover reward, and clears the collator-selection invulnerables list — to be dispatched via the Whitelisted Caller track.

Whitelist call

• Preimage (encoded Utility.batchAll): 0x04020c00093aadd6f2bf73c8ed017da4ee3e09a47bcb6fee4ba2d8f4b471c785c3330a40c3150000610200407a10f35a00000000000000000000
• Preimage call hash (keccak-256, value passed to Whitelist.whitelist_call): 0x97a6551bc8276715de02a062365c501752dea656a29e74f9766f25bc326e9864
• Decoded call:

  Utility.batchAll([
    System.authorizeUpgrade(0x3aadd6f2bf73c8ed017da4ee3e09a47bcb6fee4ba2d8f4b471c785c3330a40c3),
    BeefyConsensusProofs.setProofReward(100_000_000_000_000),  // 100 BRIDGE
    CollatorSelection.setInvulnerables([]),                    // clear all invulnerables
  ])
  

Runtime info

• Release: nexus-v7300 (published 2026-05-25)
• Spec: nexus-7300 (nexus-0.tx1.au1), Metadata V14
• WASM: nexus_runtime-v7300.compact.compressed.wasm — 2,010,849 bytes (1.92 MiB)
• WASM Keccak-256: 0x3aadd6f2bf73c8ed017da4ee3e09a47bcb6fee4ba2d8f4b471c785c3330a40c3
• Toolchain: rustc 1.91.1 (ed61e7d7e 2025-11-07)

Changes in this release

• #909 [runtime] Move allowed BEEFY proof type gating into ismp-beefy
• #910 [tesseract] Refetch runtime version before each signed extrinsic
• #912 [runtime] Filter transfers of reputation token
• BeefyConsensusProofs.setProofReward(100_000_000_000_000) — set base BEEFY prover reward to 100 BRIDGE
• CollatorSelection.setInvulnerables([]) — remove all entries from the invulnerables list

Motivation

Maintenance and protocol hygiene release. BEEFY proof type gating moves into ismp-beefy for cleaner separation of concerns, reputation token transfers are filtered to prevent unintended flows, and tesseract is hardened to always use the current runtime version. The governance batch simultaneously sets the SP1 BEEFY prover base reward to 500 BRIDGE and clears the collator-selection invulnerables list.

Reproducibility

git checkout nexus-v7300
./scripts/build_release_runtime.sh nexus-runtime
# verify keccak-256 of the produced .compact.compressed.wasm matches
# 0x3aadd6f2bf73c8ed017da4ee3e09a47bcb6fee4ba2d8f4b471c785c3330a40c3

Enactment plan

1. Submit this preimage and Whitelist.whitelist_call(0xe1534720…3d820) via the Fellowship / Whitelisted Caller track.
2. Once whitelisted, dispatch via the companion referendum below.
3. Submit System.applyAuthorizedUpgrade(code) with the released WASM blob to complete the runtime swap.