Nexis Chronicle — selected detection → remediation events for our own labs

Append-only, Nexis-signed events, hash-chained. Periodically we post a Merkle root to Base (L2) as a public integrity anchor — we do not store vulnerability details on-chain.

Phase 0: own-lab properties nexis-offense.com and nexis-defence.com. Client assets are opt-in, default off. Charlie claims review mandatory before public publish.

2026-09-17T09:00:00.000Z scan.completed

Authorised Scan completed for nexis-offense.com

Nexis Scan (automated)

Host: nexis-offense.com · Org: nexis-lab

DNS-TXT ownership proven. Point-in-time external checks finished. Finding counts recorded; evidence bodies remain private and are referenced by hash on later events only.

evidenceHash: — · eventHash: 5339333570bfa72d…

2026-09-17T09:00:05.000Z finding.detected

Content-Security-Policy header not observed on lab apex

Nexis Scan (automated) low

Host: nexis-offense.com · Org: nexis-lab

Automated Nexis Scan reported a low-severity HTTP header observation on the self-owned lab. Auto-published for Phase 0 own-lab properties. Raw response headers stay private — public ledger carries evidenceHash only.

evidenceHash: sha256:da46649b0dc75fc283c44bb4ded70e3eed039569c1e714017071c8935fbcd6ec · eventHash: b09e6c2d2cbd17a6…

2026-09-17T11:30:00.000Z finding.triaged

Informational SPF observation triaged as false positive

Charlie (human · NEX-LAB-002) triaged: false_positive info

Host: nexis-offense.com · Org: nexis-lab

Charlie human review: informational DNS signal did not represent a vulnerability for this lab posture. Published as triaged:false_positive — history is not rewritten.

evidenceHash: sha256:adeea7877b88918c557ea1fd9a525c38be80f30e7a4b53ccde749eded22f8780 · eventHash: 66e10247d09a4f65…

2026-09-18T02:15:00.000Z finding.remediated

Lab defence site security headers remediated

Charlie (human · NEX-LAB-001) low

Host: nexis-defence.com · Org: nexis-lab

Charlie NEX-LAB-001: missing security headers on nexis-defence.com lab were addressed in config. Remediation proof is hashed only — technical reproduction steps are never published.

evidenceHash: sha256:ffbc69c9cffff57816b7667af18ba6b0890448b36e6c18717d40005a3592543c · eventHash: 9708bbb500acf511…

2026-09-18T03:00:00.000Z finding.verified

Re-scan verified header remediation on nexis-defence.com

Nexis Scan (automated) verified (rescan) — point-in-time info

Host: nexis-defence.com · Org: nexis-lab

Authorised re-scan under ownership proof. Verified means re-checked at this time — not a forever-fixed guarantee that the issue class cannot return.

evidenceHash: sha256:04aec2a7ddb4664bc3fe192c560a48336ff8ba00b42a4cc811d91f7cc67afaa1 · eventHash: e621268446d4e7f1…