Vac 2025/08/18

highlights

  • QA: Progressed on Status Backend with accounts service tests (Phase 1) and framework improvements (schema validation refactor).
  • QA: Continued Status Desktop release testing and introduced app load time tracking tests.
  • QA: Completed GossipSub performance PR merges and advanced Yamux testing.
  • QA: Expanded Waku interop REST API coverage with admin endpoint tests.
  • DST: Discovered a bug in Grafana thanks to Infra team
  • SC: Participated in another security audit contest
  • RFC Most of planned Nomos RFCs got the green light and will be merged this week after a sanity check.

vac:p2p:

  • vac:p2p:ift:2025q3-nimlibp2p-mix:mix-core
    • vacp2p/mix#73 feat: create surbs
      • Continue work on SURBs
      • Focus this week was on sender side flow (entry)
      • Exit SIDE flow WIP
  • vac:p2p:ift:2025q3-nimlibp2p-kad-dht:bootstraping-and-lookup
  • vac:p2p:ift:2025q2-nimlibp2p-universal-connectivity-app
    • UI
      • Handle peers leaving and joining
      • text fields scrolling
      • text fields focusing
      • receiving messages
      • Ctrl+C handling (leave terminal untouched afterwards)
    • File exchange
      • send files
      • receive files
    • Fix key verification logic nim-libp2p#1618
  • vac:p2p:ift:2025q2-nimlibp2p-kad-dht:data-storage
    • putval pr merged, subject to the created follow-up
    • putval followup dht tyes refactor merged?
    • dht followup exception refinement almost merged
    • merged key-refactor to not track hash-state
      • dependency-inject hash-impl in “private” api to make this change testable
      • this was following a discussion about the where the decision responsibility for hash-impl lies
  • vac:p2p:ift:2025q3-nimlibp2p-maintenance:maintenance
    • vacp2p/nim-libp2p#1615 fix: don’t check for errors as close() will only contain futures that raise []
    • vacp2p/nim-libp2p#1616 fix: compilation warning on yamux due to using CatchableErr
    • investigated and fixing quic race condition when reading
      • fix: race condition when reading and receiving eof nim-quic#91
      • fix(framesorter): send eof always nim-quic#94
      • chore(perf): follow up for PR#1600 nim-libp2p#1620
      • solution is not complete; started refactoring quic states in attempt to simplify logic
    • fix(quic): race errors when stopping transport nim-libp2p#1614
    • submitted spec clarification pr
  • misc/admin
    • 2 cc 1d OoO

vac:tke:

vac:qa:

vac:dst:

  • admin/misc
  • vac:dst:vac:2025q3-libp2p-evaluation:regression-testing
    • Work in lab issues
  • vac:dst:ift:2025q3-dst-tooling:python-uv
  • vac:dst:waku:2025q3-dst-tooling:improve-tooling
  • vac:dst:ift:2025q3-dst-tooling:deployment-updates
  • vac:dst:waku:2025q3-waku-evaluation:js-waku
    • Upgraded getEnr.tpl and getAddress.tpl so it can be used to generate k8s deployment template for jswaku
    • jswaku nodes aren’t seeing other nodes (wip)
  • vac:dst:ift:2025q3-dst-tooling:shadow-integration-scaffold
    • worked with nimlibp2p deployments, played around with deployment yaml files, deployment scripts
    • Used K9s and kubeconfig to lookinto/access running pods/behavior

vac:sc:

vac:acz:

  • ift:2025q3-zerokit:zerokit-maintaining
    • Reviewed external PR for Contribution guide
  • ift:2025q3-de-mls-tesnet:consensus-layer
    • Working on consensus testing and code quality PR
  • ift:2025q3-zerokit:pmtree-config-builder
    • Improved the PmTreeConfig initialization process using the builder pattern PR.
  • ift:2025q3-rln-status-l2:maintaining
    • Created this issue issue for unimplemented user registration feature.
    • Extended timeout to prevent panic and separated the Anvil feature for the prover service’s testcase PR.
    • Added a CI workflow and resolved Clippy warnings for the prover service PR.
    • Updated dependency versions and reduced the build size for the prover PR.
    • Clippy cleanups - merged
    • Zeroize secret key - merged
  • ift:2025q3-rln-status-l2:sc-testing
  • ift:2025q2-zerokit:zerokit-maintaining
  • ift:2025q3-de-mls-tesnet:multi-steward-rfc
    • adressed PR feedbacks from rfc team
    • read the blog post on MLS and think on how we mitigate this centralization.
  • ift:2025q3-rln-status-l2:rln-spec-maintain
    • Think on how we can add decentralized slashing feature on our arhitecture.
  • nes:2025q3-nescience-consulting:key-protocol-spec
  • nes:2025q3-nescience-consulting:nomos-deep-dive
  • admin/misc
    • 1 cc is ooo for 1 day (bank holiday)
    • 1 cc is ooo for 3 days (sick leave)

vac:rfc:

vac:sec:

  • ift:2025q3-cicd-security-review:status-design-reviews
    • Triaged vulnerabilities and performed security testing as part of Status security review (issue#692)
    • Mapped CI/CD trust boundaries across top-5 components and linked findings w/ Dependabot/CodeQL
  • ift:2025q3-vulma-and-ir:incidents
    • Conducted interviews and gathered artifacts for SNT phishing case
  • ift:2025q3-finance-automation
    • Mass PO improvements
      • Ran different scenarios (http call from Iplicit) & identified 2 options
  • ift:2025q3-iam-operations:remove-unnecessary-users
    • Tested workflow for verifying inactive users in Notion
    • Tested workflow for verifying inactive users in Google
  • ift:2025q3-security-automation
    • Continued development for workflow for web3 security alerts

vac:nes:

  • vac:nes:2025q3:state-separation-architecture-poc:specs

  • state-separation-architecture-poc:wallet

    • Worked on PR 101 for wallet CLI expansion.
    • Finished PR 102 on structural improvements.
    • Read through Concrete key protocol specifications.
    • Started key protocol update(public part). PR 104
  • vac:nes:2025q3:state-separation-architecture-poc:specs-impl

    • Finished public part of NSSA v0.1 in the testnet (PR).
    • Start implementing privacy-preserving part of NSSA v0.1 specs in the testnet (draft).

vac:nim: