Vac 2025/11/03

highlights

  • P2P: QUIC stabilization merged timeout and send fixes.
  • P2P: Docker harness for QUIC node testing is underway.
  • P2P: C-bindings now handle requests with threaded workers.
  • P2P: Maintenance work tightened dependencies and test stability across nim-libp2p.
  • Tokenomics: Coordinated Logos token funding plans with leadership and ecodev.
  • Tokenomics: Built the Devconnect voting workshop app while arranging travel logistics.
  • Tokenomics: Advanced dynamic stake estimation and Karma incentive planning.
  • QA: RLN fuzzing and adversarial suites remained in review with follow-up issues tracked.
  • QA: Status Desktop QA shipped Windows timeout fixes and language coverage improvements.
  • QA: Status Mobile CI added BrowserStack and Jenkins wiring toward multi-device automation.
  • QA: Interop testing exercised nwaku v0.37 successfully.
  • DST: RLN deployment prep closed with crash reports queued for Waku review.
  • DST: Status chat benchmarks progressed while probing bootstrap filter behaviour.
  • DST: Deployment refactor PRs advanced builder classes and regression tooling.
  • DST: nwaku v0.37 regression tests exposed bandwidth and logging gaps.
  • SC: Status L2 documentation refresh merged new RLN guide updates.
  • SC: Distributed slashing research compared mitigation approaches.
  • SC: StakeManager tests were reorganized for audit preparation.
  • ACZ: Zerokit FFI rework progressed with README updates and wasm split.
  • ACZ: RLN shared database prototype built with sea_orm and PostgreSQL hstore.
  • ACZ: Logos discovery RFC refined distance logic and PoC tests.
  • ACZ: Multi-steward RLN documentation advanced before team OOO.
  • RFC: Slot builder RFC drafting neared first-review readiness.
  • RFC: Codex-store and marketplace RFCs advanced via open PRs.
  • RFC: Planning kicked off for block exchange and community history RFCs.
  • RFC: RFC index maintenance kept review queues moving.
  • Nim: Nimble 1.0 merged instrumentation and setup improvements across multiple PRs.
  • Nim: Command-line parser upgrades continued with option flattening work.
  • Nim: Team gathered nwaku feedback to guide upcoming refinements.
  • Security: Web3 security essentials content neared release after new checklist reviews.
  • Security: Secure signing workflows tested onboarding, hardware assignments, and Ubuntu VM builds.
  • Security: Falcon CrowdStrike trial launched alongside code and dependency audits.
  • Security: Admin automation advanced unified audits and finance notification workflows.
  • Web: SN Hub discovery, links, and withdraw PRs are queued for merge.
  • Web: Spaces Calendar and Circles map prototypes now use live data.
  • Web: Maintenance covered Cloudinary overages and Devconnect landing updates.
  • Web: SN Hub staking flows stabilized ahead of the karma rollout.
  • Infra: LokiJS logging backend was upgraded with new dashboards and tuning.
  • Infra: Jenkins agents were containerized and a Mac M4 host bootstrapped.
  • Infra: Status mobile releases gained signed binaries and updated app IDs.
  • Infra: Nimbus fleets prepared for the Fusaka fork with unified binaries.
  • BI: Townhall presentation support wrapped for the upcoming session.
  • BI: Logos Discord dashboard was finalized for comms reporting.
  • BI: Circle data API now feeds the new logos.co site.
  • BI: RAG monitoring dashboards progressed despite Qdrant and Ollama issues.
  • Nescience: Wallet CLI refactor and config path updates were merged.
  • Nescience: Wallet personalization work began on the testnet repository.

vac:p2p:

vac:tke:

  • admin
    • Prepared the TKE monthly report, the SC LearnUps presentation, and Devconnect materials.
    • OOO: 1 CC day.
  • vac:tke:ift:logos-token
    • Coordinated next steps with leadership and the ecodev team on funding and sales recommendations.
  • vac:tke:status:karma-incentives
    • Started framing asset strategy discussions pending Cyp’s write-up.
  • vac:tke:ift:tokenomics-research-forum:voting-workshop
    • Built the voting workshop app for Funding the Commons @ Devconnect.
  • vac:tke:ift:support-to-ift-units::price-prediction
    • Addressed Finance feedback and questions on the price prediction model.
  • vac:tke:nomos:stress-test::dyn-stake-estimation
    • Reviewed dynamic stake estimation version 2 with the team.
  • vac:tke:status:cf
    • Met with Ned to explore new directions and NFT options.
  • vac:tke:ift:logos-token::logos-token-sales
    • Presented the latest recommendations for Logos token sales structures.

vac:qa:

  • vac:qa:waku:2025q4-waku-testing:maintenance
    • Tested harbor.status.im/wakuorg/nwaku:v0.37.0-rc.4 within the interop suite.
  • vac:qa:waku:2025q4-rln-smart-contract-testing:property-based
  • vac:qa:waku:2025q4-rln-smart-contract-testing:security-adversarial
  • vac:qa:vac:2025q4-nim-libp2p-testing:quic
  • vac:qa:status:2025q4-status-qa-desktop:maintenance
  • vac:qa:status:2025q4-status-qa-desktop:release-testing
  • vac:qa:status:2025q4-status-qa-mobile:test-ci
  • vac:qa:status:2025q4-status-qa-mobile:port-tests
    • Prepared wallet add/remove account automation awaiting upstream dependencies.

vac:dst:

  • vac:dst:vac:2025q4-libp2p-evaluation:regression-testing
    • Ran QUIC experiments, cross-checked go-libp2p behaviour, and documented findings in Quic-9dc03f0e while coordinating with P2P.
  • vac:dst:waku:2025q4-waku-scaling:twn-supports-rln-tree
    • Finalised RLN deployment setup, analysed crash reports in RLN issues, and opened PR 166 as a draft.
  • vac:dst:status:2025q4-status-evaluation:chat-protocol-benchmarks-followup
    • Synced with Status on the bootstrap filter issue and next investigation steps.
  • vac:dst:ift:2025q4-dst-tooling:complete-deployment-refactor
    • Submitted PR 168 and PR 169 to refactor deployment classes and clean Helm templates.
  • vac:dst:waku:2025q4-waku-scaling:optimise-browser-bootstrapping
    • Deployed bootstrap, lightpush server, and client nodes; diagnosed Docker image regressions in PR 170.
  • vac:dst:ift:2025q4-dst-tooling:general-tooling
    • Addressed review feedback on PR 164.
  • vac:dst:waku:2025q4-waku-evaluation:regression-testing
  • vac:dst:vac:2025q4-libp2p-evaluation:rust-libp2p-node
    • Integrated the Rust node into the test harness and continued repository onboarding.

vac:sc:

  • vac:sc:status-l2:2025q4-audit-preparation:review-documentation
  • vac:sc:status-l2:2025q4-pre-audit-protocol-enhancements:distributed-slashing
    • Reviewed slashing race condition research and explored alternative mitigation designs.
  • vac:sc:status-l2:2025q4-audit-preparation:organize-tests
    • Restructured StakeManager tests in PR 58 to improve clarity.

vac:acz:

  • vac:acz:ift:2025q4-zerokit:ffi-rework
    • Kept PR 337 in progress, documented FFI usage, and split wasm changes into a follow-up.
  • vac:acz:ift:2025q4-zerokit:wasm-ffi-rework
    • Continued PR 352 with the new rln-wasm-utils implementation and experiments on the wasm port.
  • vac:acz:ift:2025q4-zerokit:zerokit-maintaining
    • Patched parallel test failures via commit a198960 and merged PR 349 to trim ruint sub-dependencies.
  • vac:acz:ift:2025q4-rln-status-l2:maintaining
  • vac:acz:ift:2025q4-rln-spec-final
  • vac:acz:ift:2025q4-rln-status-l2:shared-db
    • Prototyped the shared DB in a private repo using sea_orm and PostgreSQL hstore.
  • vac:acz:ift:2025q4-discovery:draft-rfc
    • Refined distance logic, expanded the discovery PoC tests in PR 1, and drafted the VAC forum post.
  • vac:acz:ift:2025q4-de-mls-tesnet:multi-steward-rfc
    • Addressed reviewer feedback in PR 193 for multi-steward support.
  • vac:acz:ift:2025q4-rln-status-l2:rln-public-website

vac:rfc:

  • vac:rfc:codex:2025q4-rfc-iteration:slot-builder
    • Continued drafting with a first version targeted for next week.
  • vac:rfc:codex:2025q4-rfc-iteration:store
    • Extended the store RFC and opened PR 207 for review.
  • vac:rfc:codex:2025q4-rfc-iteration:marketplace
    • Progressed marketplace Phase 2 and submitted PR 208; noted future modules for purchase and sales flows.

vac:nim:

  • vac:nim:ift:2025q4-nimble:nimble-1.0.0
    • Merged PR 1507, PR 1506, PR 1505, and PR 1503 to optimise nimblesat tooling, conditional imports, recursive instrumentation, and setup execution.
  • vac:nim:ift:2025q4-nim-core-libs:command-line-parsers
    • Advanced option flattening via PR 118 while referencing follow-up Issue 114.

vac:sec:

  • vac:sec:ift:2025q4-awareness-program:web3-security-essentials
    • Reviewed additional checklists for backup, defi, development and job search security.
    • Release pending.
  • vac:sec:ift:2025q4-secure-signing-process-training:signatory-onboarding-run
    • Tested the onboarding process with finance.
  • vac:sec:ift:2025q4-treasury-continuity-plan:implement-backup-requirements
    • Reviewed and assigned devices (primary/backup).
  • vac:sec:ift:2025q4-secure-signing-env-deployment:build-a-secure-vm-for signing
    • Created a Ubuntu VM using UTM.
  • vac:sec:ift:2025q4-secure-signing-environment:endpoint-security-evaluation
    • Started a Falcon Crowdstrike trial.
  • vac:sec:ift:2025q4-cicd-security-review:status-design-reviews
    • Completed Status Desktop reverse engineering and dynamic library testing to verify sandbox boundary controls and binary integrity.
    • Finalized the Status Desktop audit report review, addressing required changes for Keycard-related fixes and confirming audit compliance.
  • vac:sec:ift:2025q4-vulma-and-ir:incidents
    • Expanded phishing detection coverage through enhanced domain feed integrations and behavioral scoring improvements.
    • Conducted in-depth log correlation to identify potential secondary access attempts stemming from the Waku exposure incident.
  • vac:sec:ift:2025q4-vulma-and-ir:remediation-tracking
    • Verified closure of high-severity CodeQL alerts and confirmed fix persistence through targeted regression testing.
    • Patched and rebuilt network and cryptographic dependencies impacted by new upstream CVEs, validating stability post-update.
    • Strengthened CI/CD artifact validation pipelines by enforcing full signature chain verification for all releases.
    • Merged prioritized Dependabot security updates and monitored post-merge performance and stability in staging environments.
  • vac:sec:ift:2025q4-finance-automation-enhancements
    • Continue to monitor Finance executions.
    • Provide support for missing POs.
    • Finalized Bank data synch notifications for CCs.
  • vac:sec:ift:2025q4-iam-operations:admin-audit
    • Created unified admin audit workflow for all platforms.
    • Started testing and solving connection and rate limiting issues.
  • vac:sec:ift:2025q4-Create hierarchy boards in Miro
    • Finalized all team boards.
    • Worked on issues with Miro limits for Nomos and Vac.
  • vac:sec:ift:2025q4-Migrate Sec workflows to n8n Sec Cloud
    • Fixed issues with Notion credentials, Google API.

vac:web:

  • vac:web:ift:2025q4-maintenance:maintenance
    • Traced Cloudinary overages and gathered Cats Fishing requirements.
    • Delivered Devconnect 2025 landing updates (PR 92, PR 90), refreshed event metadata (PR 91), and handled the PSF PSC migration (PR 8).
  • vac:web:ift:2025q4-logos-website:external-references
    • Reviewed agency proposals, organised the pre-signing meeting, and drafted tech guidelines.
  • vac:web:status:2025q4-status-app:upgrade-waku
    • Prepared the mobile release via PR 1620.
  • vac:web:status:2025q4-sn-hub:karma
    • Scoped requirements and accelerated the release timeline.
  • admin/misc
    • OOO: 3 CC days.
  • vac:web:status:2025q4-sn-hub:discovery
  • vac:web:keycard:2025q4-keycard-website:i18n
  • vac:web:ift:2025q4-logos-website:spaces-calendar
    • Built Spaces Calendar and Circles map integrations with data import, pagination, and visual previews via PR 21, PR 16, and PR 15.
  • vac:web:status:2025q4-status-website:i18n
    • Proofread Korean translations and proposed i18n handling improvements.
  • vac:web:status:2025q4-sn-hub:staking
    • Finalised auth, fixed staking/unstaking flows, and started the karma implementation.

vac:infra:

  • LIDO
    • LokiJS logs storage backend upgrade and performance tuning.
    • Grafana dashboard for LokiJS log collection service.
    • Migrated Keys API service from Docker to Systemd.
    • Improvements to dev shell and integration testing.
    • New dashboard for Validators performance monitoring.
    • Submitted quarterly LIDO Curated Operator Set Survey.
  • Develp
    • Aztec sequencer upgrade in attempt to fix testnet.
    • Upgrade of Obol Charon DVT node on Hoodi.
  • CI
    • Finished containerization of Jenkins agents and builds.
    • New Mac M4 host bootstrapped due to long Mac queues.
    • Cleanup of legacy per-repo GitHub runner Ansible role setup.
    • Fixed Qt deployment role on MacOS systems.
    • Fixed Windows Defender blocking Scoop package manager.
  • Status
    • Implemented signed releases of new mobile Android and iOS app.
    • Change of app ID for new mobile app to app.status.mobile.
    • Signing of AAB files for Google Play Store submissions.
    • Completed Desktop end-to-end test setup on Windows platform.
    • Implemented use of Windows 11 VMs for Desktop end-to-end testing.
  • Nimbus
    • Upgrades and preparations for Fusaka fork on Hoodi testnet.
    • Deployed new unified Nimbus binary usage for Eth1 nodes.
    • Prepared for unified Nimbus binary for beacon nodes.
    • Deployed new syncv3 branch for testing on Hoodi fleet.
    • Research into Commit-Boost as MEV-Boost replacement.
  • Waku
    • Deployed new image to waku.sandbox and fixed RLN flag issues.
  • Other
    • Deploying new Finance Vesting web app.
    • More Logos community channel bridging.
    • Validated backup restore for Radicle and added docs.
    • Decommissioned SpiffWorkflow production environment.
    • Ordering of new Codex Kubernetes cluster from InnovaHosting.
    • Cleanup of leftover Codex project Hetzner volumes.

vac:bi:

  • vac:bi:ift:2025q4-ift-townhall-content-helper
    • Townhall presentation.
  • vac:bi:ift:2025q4-comms-discord-stats
    • Finalize Logos dashboard.
  • vac:bi:ift:2025q4-vac-website
    • Provide API for circle data to new logos.co website.
  • vac:bi:rag:2025q4-rag-evaluation-pipeline
    • Dashboard for monitoring.
  • vac:bi:rag:2025q4-rag-context
    • Issues with Qdrant and new Ollama version.

vac:nescience:

  • vac:nes:state-separation-architecture-poc:ux-wallet
    • Finalized PR 141 on wallet CLI refactor.
    • Finalized PR 147 on default config paths.
    • Started PR 148 on wallet personalization.
  • vac:nes:2025q4:state-separation-architecture-poc:sequencer
    • Finished implementing the functionality for node recovery from stored blocks (PR).
  • vac:nes:2025q4:state-separation-architecture-poc:simple-tail-call
    • Finished implementing the tail call mechanism for public transactions (without PDA) (PR).