c22dev/mush8

Review signals: 1 hardcoded secret.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

Gitleaks found a possible hardcoded secret; value withheld. crates/nxhost/src/webpad.rs

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• The documented build script refuses unsupported operating systems with a clear diagnostic.: Real input produced the expected result: Mush8 builds on macOS only.

  Source: The script (should) installs what's missing (Homebrew, Rust...), then asks whether you want the Mac or the iOS version and walks you through the rest.

  Input: ./build.sh

  Expected: Mush8 builds on macOS only.

  Command: ./build.sh

  Observed: Mush8 builds on macOS only.

Examples

• README build quickstart cannot execute on this platform.: The documented operation was attempted. Actual output: Mush8 builds on macOS only. The README requirements specify Apple Silicon Mac, macOS 14 or later, and Xcode 26 or later; this guest runs Linux.

  Source: README.md / Building / ./build.sh

  Expected: documented command completes successfully

  Observed: The documented operation was attempted. Actual output: Mush8 builds on macOS only. The README requirements specify Apple Silicon Mac, macOS 14 or later, and Xcode 26 or later; this guest runs Linux.

Local or hosted: local

Build Mush8 with the documented build entry point

pwd && ls -la && sed -n '1,240p' README.md && python3 --version && id -u
cat Cargo.toml && rg -n "^name|cfg\(|target_os|macos|xcode|cargo test|Usage|cargo" crates build.sh make-app.sh make-ios.sh && rustc --version; cargo --version; command -v rustup || true; sed -n '1,180p' build.sh
ls -la .coldpass; grep -RInE 'cfg\(|target_os|cargo test|^name' crates | head -120; cargo test --workspace
rustup toolchain list; ls -la .coldpass
mkdir -p .coldpass; cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["./build.sh"],"cwd":"<guest-path>","expected_returncode":1,"expected_text":"Mush8 builds on macOS only."}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"The documented build script refuses unsupported operating systems with a clear diagnostic.","source":"[ "$(uname -s)" = Darwin ] || fail "Mush8 builds on macOS only."","probe_kind":"cli","argv":["./build.sh"],"cwd":"<guest-path>","expected_returncode":1,"expected_text":"Mush8 builds on macOS only."}]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"Run the documented Mac build entry point to verify its platform gate.","source":"README.md / Building","input":"./build.sh","expected":"Mush8 builds on macOS only.","argv":["./build.sh"],"cwd":"<guest-path>","expected_returncode":1,"expected_text":"Mush8 builds on macOS only."}]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Inspected README entry points and scripts; this is a locally launched native game build, with no product scheduler, loop trigger, or webhook cycle.","checks":[]}
EOF
./build.sh; echo build_rc=$?
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"The documented build script refuses unsupported operating systems with a clear diagnostic.","source":"The script (should) installs what's missing (Homebrew, Rust...), then asks whether you want the Mac or the iOS version and walks you through the rest.","input":"./build.sh","expected":"Mush8 builds on macOS only.","probe_kind":"cli","argv":["./build.sh"],"cwd":"<guest-path>","expected_returncode":1,"expected_text":"Mush8 builds on macOS only."}]
EOF
cat > .coldpass/report.json <<'EOF'
{"outcome":"blocked","fault_owner":"prerequisite","operation":"Build Mush8 with the documented build entry point","operation_scope":"./build.sh requires Apple Silicon macOS and Xcode 26; this guest is Linux. The documented test command also requires a newer Cargo supporting Rust 2024.","steps":["Read README.md requirements and Building sections.","Ran ./build.sh; it exited 1 with: Mush8 builds on macOS only.","Ran cargo test --workspace; Cargo 1.75.0 exited 101 because feature edition2024 is unsupported."],"deviations":["Linux guest cannot satisfy Apple Silicon/macOS/Xcode requirements.","Rustup is not installed in the guest; cargo 1.75.0 cannot parse workspace edition 2024 manifests."],"stuck_step":"Build/test execution on the documented target platform and toolchain","main_blocker":"No Apple Silicon macOS or Xcode 26 environment is available in this Linux guest.","plain_failure":"The project cannot be built or run in this Linux VM. Its build script requires macOS, and the tests are additionally blocked by the old Cargo version.","suggested_fix":"Run ./build.sh on an Apple Silicon Mac with Xcode 26 or later and a current Rust toolchain."}
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"README build quickstart cannot execute on this platform.","source":"README.md / Building / ./build.sh","reason":"The documented operation was attempted. Actual output: Mush8 builds on macOS only. The README requirements specify Apple Silicon Mac, macOS 14 or later, and Xcode 26 or later; this guest runs Linux."}]
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay