Public publish/subscribe feeds

const nodeId = encodeURIComponent("ReleaseNotes");
const feed = await fetch(`https://neuron.example/PubSub/${nodeId}`, {
  headers: { Accept: "application/rss+xml, application/xml;q=0.9" }
});

if (!feed.ok) throw new Error(`Feed failed: ${feed.status}`);
const rss = await feed.text();

​

Access behavior

• A missing subpath returns 400 Bad Request.
• An unknown node or item returns 404 Not Found.
• A node that is not open returns 403 Forbidden.
• Item bodies are returned as XML; the service does not convert arbitrary payloads to JSON.
• The feed orders items by most recent creation time and includes item links, publisher, dates, and stable object GUIDs.

​

Web nodes

​

Consumer rules

• Treat item XML as untrusted input and disable unsafe external entity processing.
• Use item IDs or feed GUIDs for deduplication.
• Poll with cache validators/backoff; do not assume an event stream.
• Follow item links only on the expected Neuron origin.
• Use authenticated XMPP PubSub for non-public data or publishing operations.