Summary

Whitelist the authorize_upgrade preimage on the Nexus runtime so it can be dispatched via the Whitelisted Caller track, applying runtime upgrade nexus-v6900.

Whitelist call

• Preimage (encoded System.authorizeUpgrade): 0x000902cd8c1fb79c6a4b3d316ba14032cd125bdb01ced1e5ff9b7c6418a717f2c5cf
• Preimage call hash (keccak-256, the value passed to Whitelist.whitelist_call): 0x2318756cbce11dadb647782edc2d046f45b5056f9f5f78ad2ebb2c5e45033af4
• Decoded call: System.authorizeUpgrade(codeHash = 0x02cd8c1fb79c6a4b3d316ba14032cd125bdb01ced1e5ff9b7c6418a717f2c5cf)
• Decode/verify: https://polkadot.js.org/apps/?rpc=wss%3A%2F%2Fnexus.rpc.polytope.technology#/extrinsics/decode/0x000902cd8c1fb79c6a4b3d316ba14032cd125bdb01ced1e5ff9b7c6418a717f2c5cf

Runtime info

• Release: nexus-v6900 (published 2026-05-14)
• Spec: nexus-6900 (nexus-0.tx1.au1), Metadata V14
• WASM: nexus_runtime-v6900.compact.compressed.wasm — 2,007,609 bytes (1.92 MiB)
• WASM Keccak-256: 0x02cd8c1fb79c6a4b3d316ba14032cd125bdb01ced1e5ff9b7c6418a717f2c5cf (matches codeHash above)
• Toolchain: rustc 1.91.1 (ed61e7d7e 2025-11-07)

Changes in this release

• #834 [runtime] Fix ABI encoding/decoding in pallet-bandwidth
• #835 [runtime] Remove token gateway pallets
• #836 [runtime] Introduce pallet-beefy-consensus proofs to the Nexus runtime

Motivation

Routine maintenance upgrade. The release ships a correctness fix in pallet-bandwidth's ABI codec, removes the now-deprecated token-gateway pallets from runtime state, and adds BEEFY consensus proof verification to support cross-chain BEEFY-backed messaging on Nexus.

Reproducibility

The runtime WASM is reproducible from the tagged commit:

git checkout nexus-v6900
./scripts/build_release_runtime.sh nexus-runtime
# verify keccak-256 of the produced .compact.compressed.wasm matches
# 0x02cd8c1fb79c6a4b3d316ba14032cd125bdb01ced1e5ff9b7c6418a717f2c5cf

Enactment plan

1. Submit this preimage and Whitelist.whitelist_call(0x2318756c…33af4) via the Technical Committee.
2. Once whitelisted, Submit the governance proposal to dispatch the preimage to call System.authorizeUpgrade(0x02cd8c1f…c5cf) on the Whitelisted caller track.
3. After the proposal is executed, submit System.applyAuthorizedUpgrade(code) with the released WASM blob to enact.