2025-11-24 Vac weekly

Vac 2025/11/24 §

highlights §

• QA: Status-go wallet gated community test is close to completion with multiple related issues triaged.
• QA: Nim-libp2p QA reduced QUIC flakiness and refreshed the QUIC test plan scope.
• QA: Desktop QA maintained release coverage and added app load-time measurements.
• QA: Mobile QA progressed desktop test porting and continued mobile release checks.
• QA: Waku interop admin tests were fixed upstream.
• DST: LSQUIC regression analysis compared five commits, covering leaks, latency, and connection behaviour.
• DST: TWN RLN scaling uncovered gas and rate-limit mismatches during Anvil testing.
• DST: Status chat benchmarks resolved bootstrap blocking but still struggle to discover filter-enabled relays.
• DST: Deployment refactor PRs for 10ksim merged and spawned a follow-up feature list.
• DST: Browser bootstrapping tests updated Waku deps and Kubernetes config while tackling random disconnects.
• DST: nwaku v0.37 regression tests progressed alongside merged Rust test node support.
• Nim: Nimble download pipeline now uses releases.json and thread-safe async helpers for cloning and fetching.
• Nim: Parallel Nimble builds advanced with CI race condition fixes.
• Nim: Confutils added results.Opt support, improved help output, and option flattening.
• Nim: New nim-intops library delivers overflow/carry/saturating arithmetic with tests and README.
• P2P: LSQUIC leak fix and send-loop stabilizations landed alongside muxer handling tweaks.
• P2P: QUIC Nimbus integration kicked off.
• P2P: Kad DHT gained client mode, bootstrap refinements, and interop coverage.
• P2P: Maintainer tooling added RNG singleton tests while C bindings work resumes.
• P2P: Travel and illness reduced capacity for part of the team.
• TKE: Devconnect participation wrapped; follow-ups with ecodev and leadership pending.
• TKE: Iterating on finance feedback for price prediction modelling.
• TKE: Syncing Karma incentives and Logos token sale plans post-event.
• TKE: Exploring attestations as a potential Logos product and optimal control research.
• SC: Team resumed after Devconnect with RISC0 upskilling focus.
• SC: Cyfrin audit partnership finalized to support Status L2.
• SC: Status L2 contract maintenance planning underway with auditors.
• ACZ: DE-MLS hashgraph extraction continues toward a standalone library and API.
• ACZ: Zerokit wasm FFI rework under active review, with memory and example fixes merged.
• ACZ: RLN shared database PR received cross-review and follow-up discussions.
• ACZ: Discovery registrar/spec work added thread safety, signature verification, and integration tests.
• ACZ: NSSA consulting supported AMM testing and NFT approach reviews.
• ACZ: RLN Status L2 maintenance tracked alloy issue follow-ups.
• RFC: Community history RFC drafted and opened for review.
• RFC: Block exchange RFC merged with a follow-up improvement PR in flight.
• RFC: Blend protocol draft prepared for ongoing review.
• RFC: Slot builder RFC queued for completeness updates.
• RFC: opChan RFC initial drafting underway.
• Security: Web3 security essentials expanded with new checklists.
• Security: Secure signing environment tested across Keystone USB passthrough and QR signing.
• Security: Endpoint security evaluated Falcon and Bitdefender with malware simulation planned.
• Security: Status Desktop design reviews deepened around message signing, IPC, and dependency hygiene.
• Security: Incident response advanced correlation for Status-352 and rotated secrets verification.
• Security: Admin automation extended GitHub/Notion audits and finance sync logic.
• Web: SN Hub MVP release PR opened with TVL overview requests underway.
• Web: Cloudinary cost reductions delivered via asset optimizations and firewall controls.
• Web: Logos site enhancements shipped role-aware email forms and spaces calendar PoC with tracking.
• Web: Status wallet extension wired to market and ETH RPC proxies, updating privacy policy accordingly.
• Web: Waku dependency updates progressed across status-web and community-dapp.
• Web: Maintenance covered Cloudinary contract updates and admin tooling cleanup.
• Infra: Team was at Devconnect; limited updates shared.
• BI: Entire team onsite at Devconnect; started Superset analytics dashboard and Discord data extraction.
• Nescience: Drafted a self-contained voting program and merged wallet UX fixes while AMM testing continues.

vac:qa: §

• vac:qa:waku:2025q4-waku-testing:maintenance
  • Fixed admin tests via PR 140.
• status:2025q4-status-go-functional-testing:wallet
  • Advanced token-gated communities test and triaged admin role, stopMessenger, and fake token address issues.
• vac:2025q4-nim-libp2p-testing:flaky-tests
  • Stabilised autotls, mix, transport certificate generation, and rng singleton tests across PRs 1905, 1896, 1894.
• vac:2025q4-nim-libp2p-testing:test-plans
  • Updated the QUIC plan to focus on nim-libp2p coverage.
• vac:qa:status:2025q4-status-qa-desktop:maintenance
  • Restored custom derivation path handling, improved Qt minimize usage, and investigated CI failures.
• vac:qa:status:2025q4-status-qa-desktop:release-testing
  • Monitored Korean translation breakage and quit-app regression.
• vac:qa:status:2025q4-status-qa-desktop:app-load-time
  • Added swap modal measurement tracking in PR 19333.
• vac:qa:status:2025q4-status-qa-mobile:port-tests
  • Continued 1x1 chat porting and added accessibility IDs.
• vac:qa:status:2025q4-status-qa-mobile:release-testing
  • Investigated Android 14 account creation failure.

vac:dst: §

• vac:dst:vac:2025q4-libp2p-evaluation:regression-testing
  • Analyzed five new lsquic commits for leaks, latency, and connection/stream behaviour; coordinated with P2P and documented findings.
• vac:dst:waku:2025q4-waku-scaling:twn-supports-rln-tree
  • Mitigated gas issues with --disable-min-priority-fee and identified contract ratelimit mismatch against Sepolia values.
• vac:dst:status:2025q4-status-evaluation:chat-protocol-benchmarks-followup
  • Fixed bootstrap blocking for light nodes; remaining issue is discovering relay nodes offering filter.
• vac:dst:ift:2025q4-dst-tooling:complete-deployment-refactor
  • Merged PRs 172 and 173 to generalize deployment classes and add regression builders; captured follow-up feature list.
• vac:dst:waku:2025q4-waku-scaling:optimise-browser-bootstrapping
  • Updated js-waku dependencies, fixed Kubernetes disconnects, and drafted PR 170 while experimenting with random disconnects.
• vac:dst:waku:2025q4-waku-evaluation:regression-testing
  • Continued nwaku v0.37 performance comparisons and bandwidth analysis.
• vac:dst:ift:2025q4-dst-tooling:general-tooling
  • Updated nim-libp2p test node for mix protocol and expanded latency analysis scripts; ran mixed-node shadow experiments.
• vac:dst:vac:2025q4-libp2p-evaluation:rust-libp2p-node
  • Merged the Rust test node PR for harness integration.
• vac:dst:waku:2025q4-waku-scaling:optimise-browser-bootstrapping
  • Identified js-waku client logging gaps blocking richer diagnostics.

vac:nim: §

• vac:nim:ift:2025q4-nimble:nimble-1.0.0
  • Hardened package download path with async git/tarball operations and thread-safety refactors; switched binaries source to releases.json; progressed parallel builds with CI race fixes.
• vac:nim:ift:2025q4-nim-core-libs:command-line-parsers
  • Added results.Opt support, multiple help output fixes, and option flattening across confutils/toml serialization PRs.
• vac:nim:ift:2025q4-nim-core-libs:cpu-integer-library
  • Created nim-intops repo with overflow/carry/saturating add/sub, widening mul, tests, and initial docs; completed onboarding material.

vac:p2p: §

• vac:p2p:ift:2025q4-nimlibp2p-quic:stabilization
  • Fixed readInto leak in PR 23; merged send loop optimizations, muxer handling, and ManyQueue/test splits across PRs 21, 19, 1885, 13, 12, 16, 15, 17.
• vac:p2p:ift:2025q4-nimlibp2p-quic:nimbus
  • Began QUIC integration work for Nimbus.
• vac:p2p:ift:2025q4-nimlibp2p-maintenance:maintenance
  • Added RNG singleton test coverage in PR 1895.
• vac:p2p:ift:2025q4-nimlibp2p-cbindings:core
  • Devconnect presentation and roadmap discussions set up next steps.
• vac:p2p:ift:2025q4-nimlibp2p-kad-dht:interop
  • Added bootstrap on switch start, client mode support, and interop tests via PRs 1906, 1908, 1903, 1907, 1902.
• vac:p2p:ift:2025q4-nimlibp2p-kad-dht:discovery
  • Removed unused discovery interface and aligned expectations with Waku.
• admin/misc
  • Devconnect attendance and roadmap presentation.

vac:tke: §

• admin
  • Devconnect attendance and 5 CC days off.

vac:sc: §

• admin/misc
  • Devconnect attendance and audit partner setup.
• vac:sc:logos:2025q4-risc0-upskilling
  • RISC0 learning and experimentation.

vac:acz: §

• vac:acz:ift:2025q4-de-mls-tesnet:de-mls-maintaining
  • Continued separating hashgraph consensus into its own library.
• vac:acz:ift:2025q4-zerokit:wasm-ffi-rework
  • Reviewed PR 352, merged rln-wasm-utils, fixed Node.js example, and addressed review comments.
• vac:acz:ift:2025q4-zerokit:public-api-rework
  • Reworked RLN structures for FFI/wasm, unified proof types, and updated serialization utilities.
• vac:acz:ift:2025q4-zerokit:zerokit-maintaining
  • Merged memory leak fixes in PR 354 and reviewed wasm FFI changes.
• vac:acz:ift:2025q4-rln-status-l2:shared-db
  • Reviewed private repo changes and coordinated follow-ups for the monorepo PR.
• vac:acz:ift:2025q4-rln-status-l2:maintaining
  • Followed up on Alloy issue 2744.
• vac:acz:ift:2025q4-discovery:draft-rfc
  • Reviewed discovery PoC PR 1 and RFC PR 212.
• vac:acz:ift:2025q4-discovery:registrar-module
  • Added synchronization and signature verification in the PoC.
• vac:acz:ift:2025q4-discovery:logos-disc-specs
  • Addressed review comments on the Logos discovery specs.
• vac:acz:ift:2025q4-discovery:integration-validation
  • Added integration tests and configurable parameters for large-scale runs.
• vac:acz:nes:2025q4-nescience-consulting:simple-amm
  • Progressed PR 152 with AMM state-level tests.
• vac:acz:nes:2025q4-nescience-consulting:nfts
  • Reviewed Solana-inspired NFT approach for NSSAv0.2.
• vac:acz:nes:2025q4-nescience-consulting:light-users
  • Reviewed light user design doc.
• admin/misc
  • OOO: 4 CC days.

vac:rfc: §

• vac:rfc:codex:2025q4-rfc-iteration:community-history
  • Opened first draft in PR 214.
• vac:rfc:ift:2025q4-rfc-index-maintenance:maintenance
  • Responded to open reviews.
• vac:rfc:waku:2025q4-rfc-iteration:opchan
  • Started drafting.
• vac:rfc:codex:2025q4-rfc-iteration:block-exchange
  • Merged initial version (PR 211) and opened improvements in PR 215.
• vac:rfc:nomos:2025q4-rfc-iteration:blend-protocol
  • Drafted the blend protocol in PR 213.
• admin/misc
  • Q1 2026 commitments drafting paused while focusing on RFCs.

vac:sec: §

• vac:sec:ift:2025q4-awareness-program:web3-security-essentials
  • Added new defi, development, and job search checklists.
• vac:sec:ift:2025q4-secure-signing-env-deployment:build-a-secure-vm-for signing
  • Tested Keystone USB passthrough and QR signing flows.
• vac:sec:ift:2025q4-secure-signing-environment:endpoint-security-evaluation
  • Completed Falcon trial and deployed Bitdefender on test devices.
• vac:sec:ift:2025q4-cicd-security-review:status-design-reviews
  • Reviewed Desktop/Wallet signing flows, SBOM diffs, and access lists across security tools.
• vac:sec:ift:2025q4-vulma-and-ir:incidents
  • Investigated Status-352 via Jenkins config checks and built credential misuse correlation queries.
• vac:sec:ift:2025q4-vulma-and-ir:remediation-tracking
  • Revalidated CodeQL scans and patched npm/network CVEs with retesting.
• vac:sec:ift:2025q4-finance-automation-enhancements
  • Enhanced bank data synchronization.
• vac:sec:ift:2025q4-iam-operations:admin-audit
  • Tested GitHub admin/member checks and Notion webhook-driven admin actions.
• vac:sec:ift:2025q4-Create hierarchy boards in Miro
  • Tested consolidated frame logic and new board generation.
• vac:sec:ift:2025q4-Migrate Sec workflows to n8n Sec Cloud
  • Fixed Notion credential and Google API issues.
• admin/misc
  • Drafted 2026Q1 commitments and tasks.

vac:web: §

• vac:web:status:2025q4-sn-hub
  • Prepared MVP release (PR 827) and requested TVL overview integration.
• vac:web:ift:2025q4-maintenance:maintenance
  • Adjusted Cloudinary contract plan; reviewed staking page skeleton; updated Waku dependencies (status-web PR 847, community-dapp PR 118); proposed Logos role collection (PR 10) and removed Status admin tool (PR 859); added search to SpacesTable (PR 24); investigated status.app /c[slug] Waku data fetch issue; reviewed Cloudinary usage reduction PR 858.
• admin/misc
  • OOO: 1 CC day; led reviews.
• vac:web:status:2025q4-status-wallet-extension:price-proxy
  • Unblocked tasks via PR 860 and progressed price proxy implementation replacing Cryptocompare/Infura with market and ETH RPC proxies; updated privacy policy PR 21.
• vac:web:status:2025q4-status-website:maintenance
  • Reduced Cloudinary usage by optimizing assets, removing unused media, and adding firewall rules; analyzed traffic/bandwidth.
• vac:web:ift:2025q4-logos-website:layout
  • Added role selection and Umami tracking for email forms; delivered spaces calendar PoC and responsive updates.
• vac:web:ift:2025q4-logos-website:components
  • Added button subtext field via PR 11.

vac:infra: §

• admin/misc
  • Devconnect attendance.

vac:bi: §

• admin/misc
  • Devconnect participation.
• vac:bi:ift:2025q4-comms-discord-stats
  • Extracted Discord data for Keycard.
• vac:bi:ift:2025q4-vac-website
  • Began website analytics dashboard in Superset.
• vac:bi:rag:2025q4-rag-context
  • Explored Open RAG options for Logos with Corey.

vac:nescience: §

• other
  • Planning calls, docs review, and onboarding tasks.
• state-separation-architecture-poc:voting
  • Drafted a simplified self-contained voting program.
• state-separation-architecture-poc:ux-wallet
  • Merged PRs 147 and 148; continued wallet improvements.
• state-separation-architecture-poc:issues
  • Opened PR 166 for borsh derivation changes.
• state-separation-architecture-poc:seed-recovery
  • Resolved threads on PR 149.
• vac:nes:2025q4:state-separation-architecture-poc:privacy-tail-calls
  • Implemented privacy-preserving tail calls in PR 151.
• vac:nes:2025q4:state-separation-architecture-poc:multi-chain-calls
  • Fixed tail-call account dropping bug in PR 161.
• vac:nes:2025q4:state-separation-architecture-poc:pda-public-accounts
  • Planned PDA public account work.
• vac:acz:nes:2025q4-nescience-consulting:simple-amm
  • Continued PR 152 with AMM state-level tests.
• vac:acz:nes:2025q4-nescience-consulting:nfts
  • Investigated Solana NFT model and proposed simplified NSSA approach.
• vac:acz:nes:2025q4-nescience-consulting:light-users
  • Reviewed light users document.