Vac R&D Roadmaps and Reports

Search

SearchSearch

2025-12-08 Vac weekly

Dec 08, 2025, 10 min read

Vac 2025/12/08

highlights

  • DST: RLN tree scaling scenario now runs end-to-end on the new branch after token ratio adjustments, with final benchmarks queued.
  • DST: lsquic regression testing shows improved latency; flagged an underperforming lab node for follow-up with Wings.
  • DST: Browser bootstrapping client logging still fails to push (No peer available); config refactor PRs are underway.
  • DST: nwaku v0.37 store retrieval and bandwidth regressions are under investigation with detailed Notion reports and Discord threads.
  • DST: Vaclab local environment now excludes system namespaces, consolidates dashboards, and compares CNI stacks for the duplicate lab plan.
  • Infra: Completed Fusaka upgrade/recovery work and shipped a postmortem while expanding Geth diversity and validator monitoring.
  • Infra: Rolled out a new internal site inventory with improved Consul tagging and Watchtower upgrade.
  • Infra: Added Linux and Mac M4 Jenkins hosts after debugging Netdata memory issues and Windows VM licensing research.
  • Infra: Status CI now runs nwaku variants with improved Windows E2E stability and socket diagnostics.
  • Infra: Nimbus fleets had storage cleanup, sudo fixes, and prep for unified binaries.
  • Nescience: Documented privacy-preserving tail-call issues and proposed fixes for NSSA.
  • Nescience: Summarized private PDA design decisions and extracted NSSA cryptographic primitives for alignment with Logos.
  • Nescience: Advanced block-context designs and testnet readiness with multiple merged LSSA PRs plus wallet deployment tooling.
  • Nescience: Pushed documentation updates and program deployment commands toward testnet readiness.
  • Nim: Nimble 1.0 work continued with operator warning fixes and dependency log cleanup.
  • Nim: Confutils received multiple fixes for help/version output and unsigned int parsing issues.
  • Nim: intops gained 32-bit support, carrying operations, and tech design documentation to replace stint primitives.
  • Nim: Langserver docs now include inlay hint instructions; small unittest2 doc tweak submitted.
  • P2P: QUIC stabilization advanced with nat multi-port support, nimbus integration work, and lsquic assembly fixes across platforms.
  • P2P: C-bindings core gained start/stop/connect APIs plus peerInfo; pubsub support (pt1) is in progress.
  • P2P: Gossipsub robustness improvements landed across multiple PRs.
  • P2P: 2026Q1 commitments draft is open for review.
  • QA: Token-gated communities functional tests are under refactor with follow-up cases queued for merge.
  • QA: nim-libp2p flaky-test cleanup progressed with multiple PRs and chronicles follow-ups opened.
  • QA: Desktop QA shipped Windows E2E fixes and continued release testing; app load-time baselines are pending infra input.
  • QA: Mobile QA progressed multi-device support, ported Appium tests, and advanced Jenkins/BrowserStack CI work.
  • RFC: RFC index maintenance continued with review responses.
  • RFC: Waku opchan RFC drafting progressed toward first review.
  • RFC: Multiple Nomos RFC drafts advanced (message encapsulation/formatting, blend protocol, proof of quota, Codex prover, block exchange).
  • SC: StakeManager and StakeVault maintenance fixes landed, including paused-leave handling and migration safeguards.
  • SC: Audit finding reviews are ongoing with additional fixes planned (vault ownership limits, slasher penalties).
  • Security: OS hardening guidance refreshed; secure signing training progressed with legacy member onboarding.
  • Security: Cold signing environments advanced with Qubes OS deployment and offline verification planning.
  • Security: Treasury continuity tasks expanded device assignments and signing account revalidation.
  • Security: Status design reviews, npm malware sweeps, and CodeQL scans covered Waku/VAC/Status repos with dependency pinning and SBOM updates.
  • TKE: Price prediction model updates continued with latest feedback addressed.
  • TKE: Logos token digital twin modeling progressed with Machinations learning and stock/flow diagrams.
  • TKE: Reading on virtual economies fed into broader unit support work.
  • Web: SN Hub release PR is near merge with responsive fixes, new TVL displays, and staking/Karma flow updates.
  • Web: Wallet extension proxy work progressed (price proxy UI reviews, token shard updates) with mainnet deposits tested.
  • Web: Logos website streams gained calendar embeds, metrics fields, and CVE-driven Next.js upgrades across sites.
  • Web: Maintenance included Waku shard changes for Communities and privacy policy updates; CI improvements underway for non-Vercel contributors.

vac:dst:

vac:infra:

  • LIDO & ETH2
    • Fusaka Upgrade, Downtime, Recovery, and Postmortem
    • Deployed more Geth nodes for better EL client diversity
    • Renamed hosts to match the new multi-EL layout
    • Debugging of Nethermind sync issues due to false invalid blocks
    • Reth and Lighthouse upgrades for validator watcher service
    • Merged runbook for debugging missed proposals
    • Work on LIDO v3 stVault infrastructure deployment
  • HQ
    • Deployemtn of new internal site inventory
    • Improvements to Consul tags for internal site inventory
    • Watchtower upgrade to new fork with Docker API fixes
    • Fixed Onion site hosting Consul healthcheck script
    • Fixed inconsistent small SWAP sizes on Consul fleet
  • CI
    • Debugging of memory issues caused by Netdata on CI hosts
    • Research into licensing for Windows E2E VMs
    • Added new Linux and MacOS M4 hosts to Jenkins CI
  • STATUS
    • Setup of Nwaku versions of all status-go CI jobs
    • Impovements to Windows E2E test stability
    • Work on measuring Windows E2E test stage duration
    • Debugging socket issues on `notify.prod fleet
    • Renewed iOS certificates for legacy Status app
    • Discovered bad security practices in new mobile app setup
  • NIMBUS
    • Cleanup of Nimbus Portal and Mainnet fleet storage issues
    • Fixed Sudo configuration for Nimbus devs on fleets
  • SITES
    • Debugging of reported Discourse registration issues
    • Improvements to Keycard Shell deployment setup
    • Deployed new Logos Ecosystem website
  • PROXY
  • MISC
    • Renaming of Codex, Waku, and Nomos orgs and repositories
    • Research into CiviCRM deployment for Logos

vac:nescience:

  • state-separation-architecture-poc:privacy-tail-calls2
    • Drafted summaries of tail-call issues in privacy-preserving transactions and proposed mitigation approaches.
  • state-separation-architecture-poc:pda-research
    • Discussed private PDAs and captured decisions in a design summary.
  • state-separation-architecture-poc:crypto-primitives
    • Catalogued NSSA cryptographic primitives, rationale, and flexibility for broader Logos alignment.
  • state-separation-architecture-poc:block-context
    • Explored approaches to provide block context for NSSA programs (e.g., voting use cases).
  • state-separation-architecture-poc:testnet-readiness
  • state-separation-architecture-poc:documentation
    • Wrapped up the documentation task for the NSSA PoC.

vac:nim:

vac:p2p:

vac:qa:

vac:rfc:

vac:sc:

vac:sec:

  • vac:sec:ift:2025q4-awareness-program:web3-security-essentials
    • Reviewed and updated OS hardening guidelines.
  • vac:sec:ift:2025q4-secure-signing-process-training:signatory-onboarding-run
    • Continued onboarding legacy members.
  • vac:sec:ift:2025q4-secure-signing-env-deployment:build-a-secure-vm-for signing
    • Continued testing real transaction executions (adding new owners).
  • vac:sec:ift:2025q4-secure-signing-environment:endpoint-security-evaluation
    • Began AVG and ClamAV evaluation.
  • vac:sec:ift:2025q4-secure-signing-environment:build-cold-signing-workstation
    • Deployed a single-boot Qubes OS workstation (x86).
  • vac:sec:ift:2025q4-treasury-continuity-plan:implement-backup-requirements
    • Updated device assignment matrix and started IR procedures for UI outages.
  • vac:sec:ift:2025q4-treasury-continuity-plan:signing-accounts-revalidation
    • Started annual signing account revalidation.
  • admin/misc
    • Continued refining 2026-Q1 commitments and tasks.
  • vac:sec:ift:2025q4-cicd-security-review:status-design-reviews
    • Reviewed Status Desktop/Wallet PRs for crypto/sandbox safety, audited repos for insecure patterns, verified npm malware exposure, checked permissions, regenerated SBOMs, and validated dependency integrity.
  • vac:sec:ift:2025q4-vulma-and-ir:incidents
    • Investigated npm malware indicators, swept repos/builds for compromise, monitored alerts, and confirmed secret rotations.
  • vac:sec:ift:2025q4-vulma-and-ir:remediation-tracking
    • Deep security pass on Waku/VAC code, patched risky dependencies, ran CodeQL on routing/serialization/network surfaces, enforced pinned deps and signature validation, and coordinated fixes.

vac:tke:

  • vac:tke:ift:support-to-ift-units::price-prediction
    • Addressed latest comments and refreshed functions.
  • vac:tke:ift:logos-token:logos-digital-twin
    • Began Machinations work, designed the digital twin, and started stock/flow diagrams.
  • vac:tke:ift:support-to-ift-units:reading-by-jarrad
    • Read on virtual worlds and economies.

vac:web:

vac:bi:

  • Team mostly Out of office
  • Web Tracking: issue analysis for Keycard Shopify analytics
  • LLM: research on vLLM to replace Ollama

Graph View

Backlinks

  • No backlinks found