Search results

Chain-log/block subscription with an unconfigured chain_id fails open instead of failing at boot

Status: Open.

#65 In nullislabs/nexum-runtime;

· lgahdl opened on Jul 29, 2026

module.toml component hash field is parsed but never verified against the loaded .wasm bytes

Status: Open.

#64 In nullislabs/nexum-runtime;

· lgahdl opened on Jul 29, 2026

HTTP capability allowlist is hostname-based and pre-resolution — no DNS-rebinding/IP-pinning defense

Status: Open.

#63 In nullislabs/nexum-runtime;

· lgahdl opened on Jul 29, 2026

Chain-log poller reconnect resumes past the last delivered block, missing reorgs during a disconnect window

Status: Open.

#62 In nullislabs/nexum-runtime;

· lgahdl opened on Jul 29, 2026

Cross-module local-store namespace collision when module names are identical (no uniqueness check at boot)

Status: Open.

#61 In nullislabs/nexum-runtime;

· lgahdl opened on Jul 29, 2026

Capability escape: omitting [capabilities] from module.toml grants unrestricted host-import access

Status: Open.

#60 In nullislabs/nexum-runtime;

· lgahdl opened on Jul 29, 2026

Add Claude Code hooks and an AGENTS.md contract

Status: Open.

#58 In nullislabs/nexum-runtime;

· mfw78 opened on Jul 29, 2026

host: atomic apply batch verb for local-store, per-call durability model

Status: Open.

#11 In nullislabs/nexum-runtime;

· mfw78 opened on Jul 25, 2026

host: generic conditional-write verb on local-store (deferred)

Status: Open.

#12 In nullislabs/nexum-runtime;

· mfw78 opened on Jul 24, 2026

modules: derive the subscribed topic from code instead of restating it in the manifest

Status: Open.

#49 In nullislabs/nexum-runtime;

· mfw78 opened on Jul 23, 2026

errors: right-size seam error types and wire From conversions

Status: Open.

#50 In nullislabs/nexum-runtime;

· mfw78 opened on Jul 22, 2026

types: adopt derive_more for newtype boilerplate

Status: Open.

#48 In nullislabs/nexum-runtime;

· mfw78 opened on Jul 22, 2026