Vac 2025/12/29
highlights
- BI: Renamed GitHub sources and fixed dbt model issues to stabilize synchronization pipelines for reporting.
- BI: Started LLM benchmarks across models and tooling to inform future RAG evaluation decisions for the team.
- BI: Finished finance dashboard dbt models and began building dashboard views for weekly internal reporting.
- DST: Status-go chat protocol benchmark setup nearly finished, with runs and data collection queued next week.
- DST: Added go-libp2p test node Prometheus metrics, aligning names for shared Grafana dashboards across teams.
- DST: Implemented Vaclab bandwidth-aware scheduler and documented scheduling logic with validation results in a Notion write-up.
- Infra: Investigated missed validator proposals, updated cachix, and added ultrasound to Hoodi MEV-Boost list updates.
- Infra: Continued Status mobile signing and Nix build work, unblocking iOS updates and Android PR signing.
- Infra: Cleaned DigitalOcean space after security alert and documented CiviCRM backup procedure for office ops.
- Nim: Landed Nimble fixes for package list reading, parser warnings, and bootstrap config paths updates.
- Nim: Advanced confutils updates and core fixes while tracking closure iterator traceback issues in Nim.
- Nim: Progressed intops refactor and langserver shutdown debugging with new PRs and issue analysis work.
- P2P: Advanced IPv6 support with CI interop updates, address work, and transport review follow-through across repos.
- P2P: Shipped maintenance PRs improving docs, interop cosmetics, and flaky test behavior for nim-libp2p core.
- P2P: Continued QUIC stabilization with nim-lsquic CI improvements and dependency cleanup for Windows builds support.
- QA: Expanded Status-go wallet testing with token-gated community cases and tracked new blocker issues for releases.
- QA: Addressed Status Desktop maintenance items including join-community, crash, and E2E regression fixes this week.
- QA: Closed emoji reactions, local backup, and Qt6 migration activities in the desktop QA track.
- RFC: Drafted mantle specification work for Nomos and opened the initial RFC index PR this week.
- RFC: Produced bootstrap sync draft for Nomos and shared the specification PR for early review.
- RFC: Completed RFC index maintenance responses while drafting LIPs definitions and follow-up items from calls.
- SC: Fixed KarmaAirdrop delegatee validation to prevent invalid first-claim delegatees in production flows and tests.
- SC: Addressed PoseidonHasher modulo handling and StakeManager emergency pause signaling changes across contracts this week.
- SC: Advanced contract maintenance with MP variable removal and RLN CI asm-keccak256 rule bypass updates.
- Security: Continued secure signing environment documentation and annual signing account revalidation work for treasury process.
- Security: Completed broad security code reviews across PRs, CI changes, and dependency updates this week.
- Security: Performed proactive Vulma/IR reviews, including CodeQL follow-ups and incident remediation support across teams recently.
- TKE: Continued Logos digital twin modeling in Machinations to refine stock-and-flow diagrams for planning work.
- TKE: Updated the Logos token sales spreadsheet and reviewed EcoDev support status for Q1 planning.
- TKE: Continued reading on virtual worlds and economies to inform research support work this quarter.
- Web: Released WETH vault updates and multiple Status Hub fixes while debugging TVL on VPN.
- Web: Built Karma UI updates and investigated Vercel bot protection impacts during Status Hub TVL debugging.
- Web: Progressed SEO and maintenance work, including contribution portal updates and press engine fixes this week.
vac:bi:
vac:bi:ift:2025q4-github-extractions- Renamed sources and fixed dbt model issues for GitHub synchronization.
vac:bi:ift:2025q4-llm-rag- Started LLM benchmarks across models and tools.
vac:bi:ift:2025q4-finance-dashboard- Finished dbt models and started the finance dashboard.
vac:dst:
admin/misc- Revisited lab documentation and planned future changes.
- OOO: 7 CC days.
vac:dst:status:2025q4-status-evaluation:chat-protocol-benchmarks-followup- Continued status-go benchmarks; setup nearly finished, pending runs and data collection.
- Planned a future PR adding async functionality for status interop tests.
vac:dst:ift:2025q4-dst-tooling:general-tooling- Added Prometheus metrics for the go-libp2p test node.
- go-libp2p metrics are directly available; pubsub metrics required callback aggregation.
- Metric names aligned with nim exports for shared Grafana dashboards.
- Tested on the shadow simulator; K8s testing still pending.
- dst-libp2p-test-node#13 added pubsub metrics for the go-libp2p test node.
- Added Prometheus metrics for the go-libp2p test node.
vac:dst:ift:2025q4-dst-tooling:local-stack-analysis- Ran more libp2p test node deployments and reviewed Grafana and Victoria UIs.
- Reset Rancher Desktop on the guest OS and planned a shift to the host OS.
vac:dst:ift:2025q4-dst-lab:lab-duplication- vaclab-k8s-plugins#2 implemented the bandwidth-aware scheduler with multiple extension points.
- Enforced workload locality scoring, refined admission control defaults, and created a Helm chart.
- Fixed a bandwidth operator bug and added a Helm chart; vaclab-k8s-plugins commit 2b9accf.
- Tested the Vaclab operator and scheduler on a local Kubernetes cluster.
- Added Vaclab Scheduler documentation with diagrams, validation results, and walkthrough (Notion: Vaclab 2.0 - Bandwidth-Aware Scheduling).
vac:infra:
lido & ethereum validator- Investigated missed proposal.
- Updated cachix.
- Added ultrasound to the Hoodi MEV-Boost list.
misc- Cleaned DigitalOcean space following a security alert.
status- Fixed broken Status Go update for the iOS signing PR.
- Continued Android PR signing work.
- Worked on the Nix build.
office- Documented the CiviCRM backup procedure.
vac:nim:
vac:nim:ift:2025q4-nimble:nimble-1.0.0- nimble#1545 Fixes infinite reading of official package list.
- nimble#1544 Filters declarative parser warnings to solution packages only.
- nimble#1543 Adds paths to nimble.nim.cfg to circumvent skipParentConfig when bootstrapping.
- Adds paths to nimble.nim.cfg for bootstrapping.
- Fixes typo.
- Adds new line to config file.
- nimble#1538 Adds Nim by default to the lock file.
- Fixes locking when
useSystemNimis present. - Only adds Nim to the lock file when root explicitly requires Nim.
- Fixes an issue where the solver was not running in some cases.
- Fixes locking when
- Investigated Web3 issues.
vac:nim:ift:2025q4-nim-core-libs:command-line-parsers- nim-confutils#123 Fix #112; add results.Opt support.
- nimbus-eth2#7826 Use confutils
obsoletefor deprecated beacon node conf options. - nim-confutils#138 Fix #60; display default subcommand desc in help message.
vac:nim:ift:2025q4-nim-core-libs:misc- nim#25320 Fix #24670; closure iterator wrong line info traceback under ORC.
vac:nim:ift:2025q4-nim-core-libs:cpu-integer-library- nim-intops#8 Worked on merging the refactoring PR.
- Pinged Jacek on Discord; holiday timing slowed review.
- nim-intops#9 Worked on merging the book PR.
- nim-intops#11 Added benchmarks.
- Added universal benchmark harness code.
- Covered the add module with benchmarks.
- nim-intops#8 Worked on merging the refactoring PR.
vac:nim:ift:2025q4-nim-ide-tooling:langserver-maintenance- langserver#372 Worked on graceful shutdown for nimsuggest.
- Closed the previous PR after deeper debugging.
- langserver#377 Opened a new PR with a refined fix.
- langserver#351 Added a detailed issue explanation.
- langserver#372 Worked on graceful shutdown for nimsuggest.
vac:p2p:
admin/misc- OOO: 10 CC days.
vac:p2p:ift:2025q4-nimlibp2p-ipv6:testing- nim-libp2p#1985 CI interop: use IPv6.
vac:p2p:ift:2025q4-nimlibp2p-ipv6:addresses- Implemented address work alongside related PRs.
vac:p2p:ift:2025q4-nimlibp2p-ipv6:transport- Continued PR review for IPv6 transport changes.
vac:p2p:ift:2025q4-nimlibp2p-maintenance:maintenance- nim-libp2p#1986 Interop cosmetics.
- nim-libp2p#1989 Improve docs and README structure.
- nim-libp2p#1983 Improve flaky test behavior.
vac:p2p:ift:2025q4-nimlibp2p-quic:stabilization- nim-lsquic#51 chore(nimble): task improvements.
- nim-lsquic#48 chore: remove duplicate Nim deps.
- nim-lsquic#49 CI: add ORC check.
- nim-lsquic#50 CI: add linters.
- nim-lsquic#46 Revert: use makefile for Windows.
vac:qa:
vac:qa:status:2025q4-status-go-functional-testing:wallet- status-go#7215 Token gated communities test TC 7128 refactoring.
- status-go#7187 Token gated communities test TC 7129 PoC.
- status-app#19620 Unable to join community with “anyone can become member” permission.
- status-go#7258 Linux_arm64 not supported by choosenim in docker build.
admin/misc- OOO: 17 CC days.
vac:qa:status:2025q4-status-qa-desktop:maintenance- status-app#19644 Add object name for join community button.
- status-app#19390 Windows failure for minting community tokens test.
- status-app#19643 Community shows 0 members when joining from the Portal.
- status-app#19631 Windows crash on login.
- status-app#19641 Cannot send ETH after importing seed to a clean app.
- status-app#19642 Add clearing group chat history.
- status-app#19630 Fix community link verifications.
vac:qa:status:2025q4-status-qa-desktop:emoji-reactions- Closed remaining activities.
vac:qa:status:2025q4-status-qa-desktop:local-backup- Closed remaining activities.
vac:qa:status:2025q4-status-qa-desktop:qt6-migration- Closed remaining activities.
vac:rfc:
vac:rfc:nomos:2025q4-rfc-iteration:mantle-specification- rfc-index#245 Draft specification.
vac:rfc:nomos:2025q4-rfc-iteration:bootstrap-sync- rfc-index#244 Draft specification.
vac:rfc:ift:2025q4-rfc-index-maintenance:maintenance- Responded to current PRs and addressed feedback.
- Drafted a LIPs definition document and other follow-up items from the call.
vac:sc:
vac:sc:status-l2:2025q4-maintaining-status-l2-contracts:maintenance- status-network-monorepo#122 fix(KarmaAirdrop): ensure valid delegatees on first claim.
- status-network-monorepo#123 fix(PoseidonHasher): apply modulo Q to input.
- status-network-monorepo#121 fix(CI): ignore asm-keccak256 rule in RLN contract.
- status-network-monorepo#120 fix(StakeManager): signal paused state when emergency mode is enabled.
- status-network-monorepo#119 refactor/remove MP vars.
vac:sec:
ift:2025q4-secure-signing-environment:build-cold-signing-workstation- Continued refining documentation about the secure signing environment.
ift:2025q4-treasury-continuity-plan:signing-accounts-revalidation- Continued annual revalidation of signing accounts (request for signing).
ift:2025q4-treasury-continuity-plan:implement-backup-requirements- Tested local safe environment multisig (prepare tx for rejection).
ift:2025q4-cicd-security-review:code-reviews- Reviewed newly opened IFT PRs for security feature usage, key handling, and secret lifecycle boundaries (status-go#7237).
- Audited dApp PRs for navigation logic, origin enforcement, permission checks, and sandbox escape regressions.
- Reviewed storage and persistence changes across Nimbus, Logos, and Keycard for plaintext handling risks.
- Examined dependency update PRs for supply-chain risk and unexpected post-install behavior.
- Reviewed CI and GitHub Actions changes for permission scope increases, token usage, and secret exposure.
ift:2025q4-vulma-and-ir:proactive-review- Reviewed dependency diffs across Status, Waku, and VAC repos for malicious indicators.
- Validated security-related PR mitigations, including dependabot alerts.
- Re-checked serialization, auth, and parsing anti-patterns in new code.
- Reviewed build logs and CI outputs for anomalous dependency resolution or network activity.
- Investigated the Trust Wallet incident (report).
ift:2025q4-vulma-and-ir:follow-ups- Re-reviewed CodeQL findings after recent merges.
- Performed secondary reviews on PRs labeled security or infra.
- Coordinated with maintainers on high-risk PRs to unblock reviews.
- Investigated and supported remediation of the Status-361 S3 bucket incident (report).
admin/misc- OOO: 5 CC days.
vac:tke:
admin- OOO: 7 CC days.
vac:tke:ift:logos-token:logos-digital-twin- Continued implementing Logos stock and flow diagrams in Machinations.
vac:tke:ift:logos-token::logos-token-sales- Updated the spreadsheet.
vac:tke:ift:support-to-ift-units::ecodev-support- Reviewed current state.
vac:tke:ift:support-to-ift-units:reading-by-jarrad- Continued reading about virtual worlds and economies.
vac:web:
vac:web:status:2025q4-sn-hub- status-web#898 Released WETH vault.
- status-web#902 Debugged TVL on VPN.
- status-web#917 Fixed opengraph data.
- status-web#920 Fixed opengraph data.
- status-web#918 Updated promo bar copy.
- status-web#897 Added promo bar.
admin/misc- roadmap#345 Opened and ordered GitHub issues.
- OOO: 8 CC days.
vac:web:status:2025q4-sn-hub:karma- status-web#916 Added KarmaButton component and removed the testnet tag.
- status-web#902 Debugged TVL on VPN; Vercel bot protection blocked requests.
- Tried bypassing Vercel bot protection with local
/apiendpoints without success.
- Tried bypassing Vercel bot protection with local
vac:web:status:2025q4-status-website:seo- status-web#895 Implemented technical SEO for status.app, status.network, and hub.status.network.
vac:web:ift:2025q4-psf-website:website- admin-acid.logos.co#29 Implemented auto-reply email template for forms.
vac:web:ift:2025q4-maintenance:maintenance- contribute.logos.co#349 Contribute portal copy updates.
- admin-acid.logos.co#28 Admin-acid leaderboard implementation.
- press.logos.co: removed credential build arguments to move the image to a public registry (logos-press-engine#251).
- Updated Take Action link and checked develop deployment (logos-press-engine#250).
vac:web:status:2025q4-status-wallet-extension- status-web#697 Integrate LI.FI provider and investigate swap tx not added to mempool.
vac:web:ift:2025q4-logos-contributions-portal:contribution-guidelines- contribute.logos.co#31 Reviewed Translate Resources content to French.
- contribute.logos.co#30 Merged activists page 404 fix for non-English languages.
- contribute.logos.co#35 Fixed activists page content mismatch in Korean and French.
vac:web:ift:2025q4-logos-website:social-proof- data-docs#137 Followed up on BI fix for circles data correctness.