Official NXS set. Source of truth for membership: nxs/categories.toml. Binaries produced by nxs/build.sh into nxs/bin/.

idBinaryCategoryExit 2 when
crash/auto-repronxs-auto-reprosafe, defaultCrash/hang reproducible
crash/save-notifynxs-save-notifysafe, default— (exit 0)
crash/differential-probenxs-differential-probeintrusiveDifferential anomaly
crash/state-diffnxs-state-diffintrusiveResponse signature divergence
crash/coverage-probenxs-coverage-probeintrusivePath diversity / mixed classes
crash/auth-bypassnxs-auth-bypassintrusiveUnauthorized-looking success (FTP/SMTP/HTTP)
crash/auth-escalationnxs-auth-escalationintrusiveElevated privilege / command success after anomaly
crash/chain-repronxs-chain-reprointrusiveChain escalation (leak, class transition, divergence)
hang/timeout-analyzernxs-timeout-analyzerhangHard hang confirmed
external/notify-webhooknxs-notify-webhookexternal— (HTTP notify)

Category sets

# nxs/categories.toml (summary)
default   = crash/auto-repro, crash/save-notify
safe      = same as default
crash     = auto-repro, differential-probe, save-notify, state-diff,
            coverage-probe, auth-bypass, auth-escalation, chain-repro
hang      = hang/timeout-analyzer
intrusive = differential-probe, state-diff, coverage-probe,
            auth-bypass, auth-escalation, chain-repro
external  = external/notify-webhook

Notes

  • auth-bypass vs auth-escalation — bypass probes unauthenticated entry; escalation tries elevated commands/paths after anomaly (FTP/SMTP/HTTP).
  • chain-repro — multi-shot prioritisation, controlled variants, high-leak artefacts (v1.1.0).
  • Webhook — set NXS_WEBHOOK_URL; pure-stdlib client is HTTP-only (TLS via local proxy or NXS_NOTIFY_CMD + curl from save-notify).
export NXS_WEBHOOK_URL=http://127.0.0.1:9000/hook
nexsiz ... --nxs external -v
./nxs/bin/nxs-notify-webhook --meta output/nxs-meta/….json --url http://…
Contract smoke

cd nxs && ./tests/e2e.sh — optional NXS_E2E_TARGET=127.0.0.1:21 for live target.