Vac 2025/12/01

highlights

  • QA: Status-go token-gated community tests advanced with PRs 7113, 7144, and 7162 covering wallet flows.
  • QA: Nim-libp2p flaky test cleanup progressed through test reorganisation and coverage improvements.
  • QA: Status Desktop Windows E2E maintenance addressed multiple failures and closed the dedicated e2e task.
  • QA: Mobile QA pushed multi-device support, ported desktop tests, and worked through CI feedback.
  • DST: Added richer metrics (CPU, memory, bandwidth) and new baselines to libp2p regression experiments, including yamux.
  • DST: TWN RLN tree deployment redeployed with contract changes; new register event issue under investigation.
  • DST: Chat protocol benchmarks isolated peer cache churn as a root cause; awaiting nwaku fix before retrying.
  • DST: Deployment tooling advanced with new plotting utilities, pod interaction refactors, and Waku store/bootstrap builders.
  • DST: Vaclab-local environment shipped via Rancher Desktop with Helm-based VictoriaMetrics/VictoriaLogs and documented setup.
  • DST: Ongoing nwaku v0.37 regression and bandwidth analyses highlighted store message gaps and rendezvous impacts.
  • Nim: Nimble 1.0 work added async download optimisations, cache deduplication, and package enumeration fixes in PR 1526.
  • Nim: Command-line parser flattening progressed across Nimbus repos with multiple confutils help output fixes.
  • Nim: CPU integer library gained 32-bit support, chaining tests, CI/docs, and benchmark planning.
  • Nim: Langserver documentation improved with inlay hint instructions while investigating duplicate diagnostics.
  • P2P: QUIC stabilization pushed multiple nim-lsquic fixes (assembly handling, timers, locks, read refactor).
  • P2P: QUIC stabilization WIP expanded with native UDP work and gossipsub mesh stability investigations.
  • P2P: Maintenance covered test RNG singleton and README updates in nim-libp2p.
  • P2P: Kad DHT interop work filed upstream spec deviations and merged bootstrap/client-mode improvements.
  • P2P: Nimbus QUIC integration kickoff planned alongside ongoing stabilization.
  • Tokenomics: Iterated on price prediction modelling and Finance feedback post-Devconnect.
  • Tokenomics: Resumed Logos token sales and digital twin planning, including Machinations learning and token distribution design.
  • Tokenomics: Advanced Nomos stress-test simulations with realistic demand and validator behaviour models.
  • Tokenomics: Briefed ex-Waku teams on strategy and engaged in PS Lisbon planning.
  • Tokenomics: Continued optimal control research and readings on virtual economies.
  • SC: RISC0 upskilling continued across the team via NSSA program studies and Solana program reviews.
  • SC: Exploration into EAS attestation patterns underway as a potential Nescience fit.
  • SC: Preparing 2026 Q1 commitments and supporting the Cyfrin audit for Status Network contracts.
  • Security: Status Desktop design review reproduced UXSS (Status-352) and validated mitigations across crypto interfaces and dependency chains.
  • Security: Endpoint security evaluations expanded with Bitdefender malware testing and scheduled scan reporting; cold signing Qubes OS build planned.
  • Security: Secure signing training added legacy members and continued transaction execution tests on secure VMs.
  • Security: Treasury continuity advanced with device assignment updates and incident response procedures for unsafe UI scenarios.
  • Security: Finance automation and admin audits progressed with webhook-based actions and consolidated n8n workflows.
  • Security: Supply-chain monitoring continued with npm malware sweeps, SBOM regeneration, and CodeQL targeting network/IPC surfaces.
  • Web: Status web upgrade tracked Waku dependency updates and CI access for non-Vercel contributors.
  • Web: SN Hub responsive fixes and deposit UI progressed toward merge alongside ongoing karma/staking work.
  • Web: Wallet extension price proxy refactor improved RPC handling with follow-up suspense optimisations.
  • Web: Logos website maintenance addressed layout bugs and analytics scoping; spaces calendar backend/frontend now underway.
  • Web: Community shard changes and Waku dependency bumps advanced across status-web and community-dapp.
  • Infra: Prepared Nimbus and Lido fleets for the Fusaka fork with upgraded tooling and reliability fixes.
  • Infra: Jenkins capacity expanded with a new Mac M4 host and improved workspace cleanup; iOS runtime install issues resolved.
  • Infra: Status desktop builds explored Flatpak packaging and fixed Keycard use on AppImage.
  • Infra: Multiple site deployments launched (ecosystem.logos.co, vesting tool) with cache tuning and inventory service rollout.
  • Infra: Nginx metrics and alerts added via Lua; continued migration/renaming of Waku/Codex repos.
  • BI: Fixed Discord/Logos/Keycard data extraction to avoid overwriting datasets.
  • RFC: RFC index maintenance responses kept review queues moving.
  • RFC: Slot builder RFC gained missing details ahead of next revision (rfc-index#209).
  • RFC: OpChan RFC drafting continued toward first full draft.
  • RFC: Nomos RFC drafts landed for Blend protocol, key types/generation, and proof of quota.
  • RFC: Q1 2026 commitments drafted for Codex and Nomos RFC work.
  • Nescience: Voting program specs delivered for simplified and token-enabled flows with follow-up discussions.
  • Nescience: Privacy-preserving tail-call research produced summaries and alternative approach proposals.
  • Nescience: PDA public accounts implemented with supporting token program changes; documentation push ongoing.
  • Nescience: Testnet readiness advanced with multiple PRs merged for seed recovery, readiness fixes, and wallet tooling.
  • Nescience: Wallet CLI refactors, personalization, and size-limit investigations queued; native token exploit documented.

vac:qa:

vac:dst:

vac:nim:

vac:p2p:

vac:tke:

  • admin
    • Monthly TKE report drafted; 3 days off (Devconnect weekends) and 1 day off (travel).
  • vac:tke:ift:support-to-ift-units::price-prediction
    • Caught up on latest developments and Finance feedback.
  • vac:tke:ift:logos-token::logos-token-sales
    • Synced on current status.
  • vac:tke:status:karma-incentives
    • Post-Devconnect sync.
  • vac:tke:ift:support-to-ift-units:ecodev-support
    • Reviewed BA offsite outputs.
  • vac:tke:ift:support-to-ift-units:reading-by-jarrad
    • Began virtual worlds/economies literature.
  • vac:tke:ift:tokenomics-research-forum::control
    • Worked on optimal control research.

vac:sc:

vac:sec:

  • vac:sec:ift:2025q4-awareness-program:web3-security-essentials
    • Added checklists for AV, firewall, and DNS security.
  • vac:sec:ift:2025q4-secure-signing-process-training:signatory-onboarding-run
    • Added legacy members (TR/IV).
  • vac:sec:ift:2025q4-secure-signing-env-deployment:build-a-secure-vm-for signing
    • Tested real transaction execution (payments).
  • vac:sec:ift:2025q4-secure-signing-environment:endpoint-security-evaluation
    • Tested Bitdefender detection using malware samples and phishing clones.
  • admin/misc
    • Drafted 2026Q1 commitments and tasks.
  • vac:sec:ift:2025q4-cicd-security-review:status-design-reviews
    • Reproduced Status Desktop UXSS, audited dynamic navigation/IPC, validated key-handling, fuzzed IPC handlers, and tightened GitHub token scopes.
  • vac:sec:ift:2025q4-vulma-and-ir:incidents
  • vac:sec:ift:2025q4-vulma-and-ir:remediation-tracking
    • Ran focused CodeQL scans, patched crypto/network CVEs, blocked new WebView dependencies, improved SBOM generation, and closed high/medium issues.
  • vac:sec:ift:2025q4-finance-automation-enhancements
    • Monitored Finance executions and provided support.
  • vac:sec:ift:2025q4-iam-operations:admin-audit
    • Shifted inactive CC notifications to email, built webhook-driven Notion admin actions (worked around Sec n8n cloud limits via self-hosted).
  • vac:sec:ift:2025q4-Migrate Sec workflows to n8n Sec Cloud
    • Deployed consolidated active workflows to reduce limits.
  • vac:sec:ift:2025q4-Create hierarchy boards in Miro
    • Fixed logic for connectors, new boards, and consolidated frames.

vac:web:

vac:infra:

  • LIDO & ETH2
    • Prepared for Fusaka fork, deployed secondary tooling for validator exits, investigated Nethermind sync issues, and fixed alert durations.
    • Progressed new LIDO fleet layout proposal.
  • HQ
    • Renewed Vault certificates, added SWAP alerts, increased SWAP on problematic hosts, investigated BI Postgres exporter timeouts, and advanced ElasticSearch cleanup automation.
  • CI
    • Added macm4-01 Jenkins host, improved workspace cleanup, and fixed iOS runtime installation via Brew.
  • STATUS
    • Fixed Keycard issues on Linux AppImage, experimented with Flatpak builds, researched Windows 11 IoT licensing for E2E VMs, and finished Status control node setup (backups pending).
    • Added Logos community bridge and refined Desktop E2E job parameters.
  • NIMBUS
    • Prepared for Fusaka fork, repaired mounts/network interfaces, debugged memory leaks, deployed Commit-boost, and investigated block delays on heavy validator hosts; decommissioned Aztec testnet nodes.
  • SITES
  • PROXY
    • Added Nginx metrics via Lua with alerting.
  • MISC
    • Continued migrating/renaming Waku and Codex repos to logos-co.

vac:bi:

  • admin/misc
    • Team out of office; resolved Discord extraction overwriting Logos/Keycard data.

vac:rfc:

vac:nescience:

  • vac:nes:state-separation-architecture-poc:voting
  • vac:nes:state-separation-architecture-poc:privacy-tail-calls2
  • other
    • Calls on Logos blockchain priorities and engineering needs.
  • vac:nes:state-separation-architecture-poc:seed-recovery
  • vac:nes:state-separation-architecture-poc:testnet-readiness
  • vac:nes:2025q4:state-separation-architecture-poc:pda-public-accounts
    • Implemented PDAs for public accounts (PR 204) with helper token change (PR 203); discussed voting specs.
  • vac:nes:2025q4:state-separation-architecture-poc:documentation
    • Documentation work and sprint planning.
  • vac:nes:2025q4:state-separation-architecture-poc:testnet-readiness
    • Wallet account list command merged (PR 198); wallet refactor and pinata improvements (PR 205); discussed testnet machine setup (PR 195).
  • Other
    • Address renaming and toolchain/formatter improvements (PR 184, PR 195).
  • vac:acz:nes:2025q4-nescience-consulting:simple-amm
    • Simple AMM implementation finished (PR 152).
  • vac:acz:nes:2025q4-nescience-consulting:native-token-exploit
  • nes:2025q4-nescience-consulting:nfts