Vac 2025/11/03

highlights

  • P2P: QUIC stabilization merged timeout and send fixes.
  • P2P: Docker harness for QUIC node testing is underway.
  • P2P: C-bindings now handle requests with threaded workers.
  • P2P: Maintenance work tightened dependencies and test stability across nim-libp2p.
  • Tokenomics: Coordinated Logos token funding plans with leadership and ecodev.
  • Tokenomics: Built the Devconnect voting workshop app while arranging travel logistics.
  • Tokenomics: Advanced dynamic stake estimation and Karma incentive planning.
  • QA: RLN fuzzing and adversarial suites remained in review with follow-up issues tracked.
  • QA: Status Desktop QA shipped Windows timeout fixes and language coverage improvements.
  • QA: Status Mobile CI added BrowserStack and Jenkins wiring toward multi-device automation.
  • QA: Interop testing exercised nwaku v0.37 successfully.
  • DST: RLN deployment prep closed with crash reports queued for Waku review.
  • DST: Status chat benchmarks progressed while probing bootstrap filter behaviour.
  • DST: Deployment refactor PRs advanced builder classes and regression tooling.
  • DST: nwaku v0.37 regression tests exposed bandwidth and logging gaps.
  • SC: Status L2 documentation refresh merged new RLN guide updates.
  • SC: Distributed slashing research compared mitigation approaches.
  • SC: StakeManager tests were reorganized for audit preparation.
  • ACZ: Zerokit FFI rework progressed with README updates and wasm split.
  • ACZ: RLN shared database prototype built with sea_orm and PostgreSQL hstore.
  • ACZ: Logos discovery RFC refined distance logic and PoC tests.
  • ACZ: Multi-steward RLN documentation advanced before team OOO.
  • RFC: Slot builder RFC drafting neared first-review readiness.
  • RFC: Codex-store and marketplace RFCs advanced via open PRs.
  • RFC: Planning kicked off for block exchange and community history RFCs.
  • RFC: RFC index maintenance kept review queues moving.
  • Nim: Nimble 1.0 merged instrumentation and setup improvements across multiple PRs.
  • Nim: Command-line parser upgrades continued with option flattening work.
  • Nim: Team gathered nwaku feedback to guide upcoming refinements.
  • Security: Web3 security essentials content neared release after new checklist reviews.
  • Security: Secure signing workflows tested onboarding, hardware assignments, and Ubuntu VM builds.
  • Security: Falcon CrowdStrike trial launched alongside code and dependency audits.
  • Security: Admin automation advanced unified audits and finance notification workflows.
  • Web: SN Hub discovery, links, and withdraw PRs are queued for merge.
  • Web: Spaces Calendar and Circles map prototypes now use live data.
  • Web: Maintenance covered Cloudinary overages and Devconnect landing updates.
  • Web: SN Hub staking flows stabilized ahead of the karma rollout.
  • Infra: LokiJS logging backend was upgraded with new dashboards and tuning.
  • Infra: Jenkins agents were containerized and a Mac M4 host bootstrapped.
  • Infra: Status mobile releases gained signed binaries and updated app IDs.
  • Infra: Nimbus fleets prepared for the Fusaka fork with unified binaries.
  • BI: Townhall presentation support wrapped for the upcoming session.
  • BI: Logos Discord dashboard was finalized for comms reporting.
  • BI: Circle data API now feeds the new logos.co site.
  • BI: RAG monitoring dashboards progressed despite Qdrant and Ollama issues.
  • Nescience: Wallet CLI refactor and config path updates were merged.
  • Nescience: Wallet personalization work began on the testnet repository.

vac:p2p:

vac:tke:

  • admin
    • Prepared the TKE monthly report, the SC LearnUps presentation, and Devconnect materials.
    • OOO: 1 CC day.
  • vac:tke:ift:logos-token
    • Coordinated next steps with leadership and the ecodev team on funding and sales recommendations.
  • vac:tke:status:karma-incentives
    • Started framing asset strategy discussions pending Cyp’s write-up.
  • vac:tke:ift:tokenomics-research-forum:voting-workshop
    • Built the voting workshop app for Funding the Commons @ Devconnect.
  • vac:tke:ift:support-to-ift-units::price-prediction
    • Addressed Finance feedback and questions on the price prediction model.
  • vac:tke:nomos:stress-test::dyn-stake-estimation
    • Reviewed dynamic stake estimation version 2 with the team.
  • vac:tke:status:cf
    • Met with Ned to explore new directions and NFT options.
  • vac:tke:ift:logos-token::logos-token-sales
    • Presented the latest recommendations for Logos token sales structures.

vac:qa:

vac:dst:

vac:sc:

vac:acz:

vac:rfc:

vac:nim:

vac:sec:

  • vac:sec:ift:2025q4-awareness-program:web3-security-essentials
    • Reviewed additional checklists for backup, defi, development and job search security.
    • Release pending.
  • vac:sec:ift:2025q4-secure-signing-process-training:signatory-onboarding-run
    • Tested the onboarding process with finance.
  • vac:sec:ift:2025q4-treasury-continuity-plan:implement-backup-requirements
    • Reviewed and assigned devices (primary/backup).
  • vac:sec:ift:2025q4-secure-signing-env-deployment:build-a-secure-vm-for signing
    • Created a Ubuntu VM using UTM.
  • vac:sec:ift:2025q4-secure-signing-environment:endpoint-security-evaluation
    • Started a Falcon Crowdstrike trial.
  • vac:sec:ift:2025q4-cicd-security-review:status-design-reviews
    • Completed Status Desktop reverse engineering and dynamic library testing to verify sandbox boundary controls and binary integrity.
    • Finalized the Status Desktop audit report review, addressing required changes for Keycard-related fixes and confirming audit compliance.
  • vac:sec:ift:2025q4-vulma-and-ir:incidents
    • Expanded phishing detection coverage through enhanced domain feed integrations and behavioral scoring improvements.
    • Conducted in-depth log correlation to identify potential secondary access attempts stemming from the Waku exposure incident.
  • vac:sec:ift:2025q4-vulma-and-ir:remediation-tracking
    • Verified closure of high-severity CodeQL alerts and confirmed fix persistence through targeted regression testing.
    • Patched and rebuilt network and cryptographic dependencies impacted by new upstream CVEs, validating stability post-update.
    • Strengthened CI/CD artifact validation pipelines by enforcing full signature chain verification for all releases.
    • Merged prioritized Dependabot security updates and monitored post-merge performance and stability in staging environments.
  • vac:sec:ift:2025q4-finance-automation-enhancements
    • Continue to monitor Finance executions.
    • Provide support for missing POs.
    • Finalized Bank data synch notifications for CCs.
  • vac:sec:ift:2025q4-iam-operations:admin-audit
    • Created unified admin audit workflow for all platforms.
    • Started testing and solving connection and rate limiting issues.
  • vac:sec:ift:2025q4-Create hierarchy boards in Miro
    • Finalized all team boards.
    • Worked on issues with Miro limits for Nomos and Vac.
  • vac:sec:ift:2025q4-Migrate Sec workflows to n8n Sec Cloud
    • Fixed issues with Notion credentials, Google API.

vac:web:

vac:infra:

  • LIDO
    • LokiJS logs storage backend upgrade and performance tuning.
    • Grafana dashboard for LokiJS log collection service.
    • Migrated Keys API service from Docker to Systemd.
    • Improvements to dev shell and integration testing.
    • New dashboard for Validators performance monitoring.
    • Submitted quarterly LIDO Curated Operator Set Survey.
  • Develp
    • Aztec sequencer upgrade in attempt to fix testnet.
    • Upgrade of Obol Charon DVT node on Hoodi.
  • CI
    • Finished containerization of Jenkins agents and builds.
    • New Mac M4 host bootstrapped due to long Mac queues.
    • Cleanup of legacy per-repo GitHub runner Ansible role setup.
    • Fixed Qt deployment role on MacOS systems.
    • Fixed Windows Defender blocking Scoop package manager.
  • Status
    • Implemented signed releases of new mobile Android and iOS app.
    • Change of app ID for new mobile app to app.status.mobile.
    • Signing of AAB files for Google Play Store submissions.
    • Completed Desktop end-to-end test setup on Windows platform.
    • Implemented use of Windows 11 VMs for Desktop end-to-end testing.
  • Nimbus
    • Upgrades and preparations for Fusaka fork on Hoodi testnet.
    • Deployed new unified Nimbus binary usage for Eth1 nodes.
    • Prepared for unified Nimbus binary for beacon nodes.
    • Deployed new syncv3 branch for testing on Hoodi fleet.
    • Research into Commit-Boost as MEV-Boost replacement.
  • Waku
    • Deployed new image to waku.sandbox and fixed RLN flag issues.
  • Other
    • Deploying new Finance Vesting web app.
    • More Logos community channel bridging.
    • Validated backup restore for Radicle and added docs.
    • Decommissioned SpiffWorkflow production environment.
    • Ordering of new Codex Kubernetes cluster from InnovaHosting.
    • Cleanup of leftover Codex project Hetzner volumes.

vac:bi:

vac:nescience:

  • vac:nes:state-separation-architecture-poc:ux-wallet
    • Finalized PR 141 on wallet CLI refactor.
    • Finalized PR 147 on default config paths.
    • Started PR 148 on wallet personalization.
  • vac:nes:2025q4:state-separation-architecture-poc:sequencer
    • Finished implementing the functionality for node recovery from stored blocks (PR).
  • vac:nes:2025q4:state-separation-architecture-poc:simple-tail-call
    • Finished implementing the tail call mechanism for public transactions (without PDA) (PR).