Vac 2025/08/11

highlights

  • P2P: Release v1.12.0 of nim-libp2p.
  • QA: Continued expansion of Status critical flows tests, including accounts service and schema validation refactor.
  • QA: Extended Waku interop REST API coverage, added rendezvous discovery and debug/admin API tests.
  • QA: Merged multiple nim-libp2p GossipSub performance PRs and began exploring Yamux testing.
  • QA: Completed multi-chain wallet testing in Keycard Shell, with retest scheduled on new OS.
  • QA: Validated Nwaku v0.36 deployment in Status staging fleet.
  • QA: Progressed Status Desktop maintenance, crash reproduction, and custom Waku node testing.
  • QA: Started RLN smart contract testing efforts.
  • DST: Discovered issue in Status functional tests.
  • ACZ: Consensus implementation is done, moving forward with tests.
  • ACZ: Publish the Zerokit perf blogpost on X.
  • RFC: Re-start looking into Codex.
  • NES: NSSA v0.1 protocol specs are ready and being implemented.
  • NES: NSSA sequencer specs are almost ready.
  • NES: Implemented cipher streams encryption using R0.

vac:p2p:

  • vac:p2p:ift:2025q3-nimlibp2p-maintenance:maintenance
  • vac:p2p:ift:2025q3-nimlibp2p-universal-connectivity-app
  • vac:p2p:ift:2025q3-nimlibp2p-mix:mix-core
    • [vacp2p/nim-libp2p#71] fix: do not encode a delay for last hop
    • Continue working on main-s2 branch of mix
      • Add missing procs required by Waku
      • Fix poc_gossipsub examples
    • Work on nwaku mix-main-s2 branch to update their code to use latest mix
    • vacp2p/dst-gossipsub-test-node#11 chore: use main-s2 branch
      • This branch contains latest changes from mix
  • vac:p2p:ift:2025q3-nimlibp2p-kad-dht:data-storage
    • putval RP just about ready for merge

vac:tke:

vac:qa:

vac:dst:

  • admin/misc
    • 1 CC sick leave on Thursday, Friday
    • 1 CC OOO entire Week
    • Call with Waku for setting Tailscale + Grafana + Victorialogs
    • Create DST Github Timeline 2025Q3 for tracking task dates.
    • Quick call with new CC going over the 10ksim repo
    • Call with Status from Status to check status scalability
      • Discussed several follow ups
      • Discovered issues in Status functional tests
    • Discuss with infra some issues in Grafana metrics
  • vac:dst:ift:2025q3-dst-research-destination:ethereum-foundation
    • Discuss next meeting with Probelabs
    • Prepare small presentation for proposal workflow idea
  • vac:dst:vac:2025q3-libp2p-evaluation:regression-testing
    • Retry analysis of nim-libp2p v1.12
    • Work on second Mix analysis
  • vac:dst:waku:2025q3-waku-evaluation:js-waku
    • Manual testing of some API endpoints (eg. publish message)
  • vac:dst:waku:2025q3-dst-tooling:general-tooling
    • get_store_messages.py cleanup
    • Added logging of events to experiments framework and use it to automatically generate time intervals for analysis script

vac:sc:

  • ift:2025q3-security-audits
    • Audited Malda protocol
  • ift:2025q3-sc-learnup-sessions
    • Working on lending protocol deep dive
  • vac:sc:ift:2025q3-fv-tools-research
    • tried Kontrol invariants and other features of it
  • vac:sc:status:2025q3-maintaining-status-contracts
  • admin/misc
    • Updated commitments/task according to recent changes
    • Call with TKE about logos token economics

vac:acz:

  • ift:2025q3-de-mls-tesnet:consensus-layer
    • Implemented consensus service and integrated with current de-mls code. Right now I did some mock yes vote for everyone for real app, but there is test which cover not mock case PR
  • ift:2025q3-libp2p-mix-testnet:update-rfc
    • Regarding PR #173, resumed refactor of section 8. And introduced destination embedding in the Sphinx packet.
  • ift:2025q3-libp2p-mix-testnet:libp2p-mix-repo
    • PR #71
      • Identified that delay was being incorrectly embedded in the final hop in main-s2 branch.
    • PR #72
      • Debugged Destination does not support mix error.
      • Identified that source address populated in Mix protocol instance doesn’t match the expected address.
  • acz:nes:2025q3-nescience-consulting:nomos-deep-dive
  • ift:2025q3-ift-zk-calls:ift-zk-call-2
  • vac:acz:nes:2025q3-nescience-consulting:key-protocol-spec
  • acz:nomos:2025q3-nomos-consulting:zk-consulting-nomos-2
  • ift:2025q3-rln-status-l2:sc-testing
    • Fixed the Docker build and published the Prover’s Docker image for Nadeem for end-to-end testing of the monorepo PR.
    • Got familiar with the changes in this PR to help Nadeem with the end-to-end testing.
  • ift:2025q3-zerokit:merkle-tree-revising
  • ift:2025q3-zerokit:perfomance-updates-blogpost
  • admin/misc
    • 2 cc is ooo for whole week

vac:rfc:

vac:sec:

  • ift:2025q3-wallet-policy-update:write-and-review-new-version
    • Drafted a runbook for onboarding new signatories (identity verification)
  • ift:2025q3-awareness-program:web3-security-essentials
    • Started sharing web3 news and IoC with the Finance team
  • ift:2025q3-multisig-secondary-interface-deployment:test-new-interface
    • Used Onchain Den with real transactions and documented results
  • ift:2025q3-security-automation:automatic-wallet-index-updates
    • Started the plan to integrate the multisig wallet validator to n8n
  • ift:2025q3-cicd-security-review:status-design-reviews
    • Discussed follow-up recommendations on wallet architecture issues raised during last week’s review
    • Manually traced CI/CD boundaries across top-5 components and link security gaps (Dependabot/CodeQL)
  • ift:2025q3-vulma-and-ir:incidents
    • Collected and archived phishing-related artifacts (email headers, wallet activity logs, message history)
    • Drafted response playbook (1-pager) from Keycard phishing case, covering detection and containment steps
  • ift:2025q3-vulma-and-ir:remediation-tracking
    • Manually validated top 10 unresolved CodeQL alerts across 3 repos and flag false positives
    • Wrote and shared mid-cycle summary of remediations (including trends, blockers, progress rate)
  • ift:2025q3-finance-automation
    • Continued improvement lists and mass PO’s for finance processes
  • ift:2025q3-iam-operations:remove-unnecessary-users
    • Finalized workflows and tests for log extraction from systems
    • Finalized workflows and tests for identifying, verifying leavers from systems
  • ift:2025q3-security-automation:automatic-wallet-index-updates
    • Drafted workflow for multisig wallet onchain validation

vac:nes:

  • vac:nes:2025q3:state-separation-architecture-poc:specs
  • state-separation-architecture-poc:wallet
  • vac:nes:2025q3:state-separation-architecture-poc:key-protocol
    • Implemented public part of NSSA v0.1 in the testnet (draft).

vac:nim:

  • ift:2025q3-nimble
    • Normalization (https://github.com/nim-lang/nimble/pull/1443)
      • Normalizes requirements
      • normalize should also take alias into account
      • progress
      • Use original requirements for installing packages
      • Internally normalizes deps
      • [OK] should ignore features specified in requires when using the vmparser
      • adds urls to the packageToDependency table
      • removes comment
      • Stores the package version table in SATResult. Uses it to do a lookup fallback
      • temporary comments an “easy” to fix test
      • [OK] cannot remove package with develop reverse dependency
      • [OK] can uninstall
      • [OK] Forge alias is generated inside lockfile
      • Removes normalizedRequirements lookup table
    • Normalization (https://github.com/nim-lang/nimble/pull/1442)
      • Expands SolvedPackages to hold the url and remove the need for the normalization lookup table
      • Progress
    • Normalize test (https://github.com/nim-lang/nimble/pull/1441)
      • Use original requirements for installing packages
      • Internally normalizes deps
      • [OK] should ignore features specified in requires when using the vmparser
      • Improves normalization
    • Normalize requirement exp (https://github.com/nim-lang/nimble/pull/1440)
      • Normalize also normalizes cases. Fix pkg local cache for tsat test
    • Normalizes requirements (https://github.com/nim-lang/nimble/pull/1439)
      • Update test data to match the new PackageInfoMinimal. Progress.
      • Fixes typo