Vac 2026/01/05

highlights

  • BI: Started finance reporting upgrades with crypto price extraction and dashboard updates.
  • BI: Added Circle data sources and prototyped a Telegram connector for monitoring.
  • BI: Benchmarked OpenAI OSS 20B and prepared evidence.dev reporting.
  • DST: Closed chat protocol benchmark follow-up and found mixed contact request delays between light and relay nodes.
  • DST: Completed js-waku browser bootstrapping experiment and shipped a merged report PR.
  • DST: Added rust-libp2p test node Prometheus metrics and opened the upstream PR.
  • DST: Shipped Vaclab 2.0 scheduler and full-stack documentation with new deployment automation.
  • Infra: Windows E2E benchmark now runs during nightly status-app builds.
  • Infra: Fixed Nix build and libwaku packaging for logos messaging; validated in status-go tests.
  • Infra: Documented Gitea backup/restore and tested new Bridge image deployments.
  • Nim: Advanced Nimble 1.0.0 work with cache, tagging, and Docker improvements.
  • Nim: Landed multiple confutils parser fixes across nim-confutils and Nim PRs.
  • Nim: Prepared setup-nimble-action release while tracking pending PRs.
  • P2P: Documented common hurdles for nim-libp2p contributors.
  • P2P: Removed duplicate license file in nim-libp2p maintenance cleanup.
  • P2P: Started research on Gossipsub extensions and partial messages work.
  • QA: Expanded Status-go wallet testing with token-gated community cases and new issue tracking.
  • QA: Onboarded messaging network-conditions testing for new 2026q1 QA scope.
  • QA: Drafted nim-libp2p interop test plans and started Autonatv2 template PR.
  • QA: Continued status-go maintenance with SignalClient simplification tests.
  • RFC: Drafted Cryptarchia fork choice rule RFC and opened the PR for review.
  • RFC: Started wallet technical RFC drafting for Nomos.
  • RFC: Progressed rfc-index maintenance by responding to open reviews.
  • Sec: Completed year-end security code reviews across IFT, Status, and VAC repositories.
  • Sec: Followed up on incidents and validated remediation for late-cycle changes.
  • Sec: Cleared CodeQL and Dependabot backlogs and documented Q1 handoff risks.
  • TKE: Prepared monthly deliverables report and closed year-end admin wrap-up.
  • TKE: Continued Logos digital twin modeling in Machinations.
  • TKE: Continued virtual worlds and economies research support.
  • Web: Debugged Status Network Hub TVL-on-VPN issue and refined WETH vault flow.
  • Web: Implemented PS email form work and reviewed PSF website sign-up flow.
  • Web: Continued logos site social-proof follow-up and contribution guideline reviews.
  • Web: Delivered maintenance updates across logos.co and Contribute portal APIs.

vac:bi:

vac:dst:

vac:infra:

  • status-app
    • Windows E2E benchmark now runs during nightly builds.
    • Ran a dev environment survey.
    • Discussed ETH-RPC proxy needs for grove/nodefleet.
  • logos messaging nim
    • Fixed Nix build and added libwaku as a flake package; fixed Waku canary.
    • Switched to Nim from the Nimbus build system for the Nix build.
    • Tested libwaku in status-go tests; waiting on merge PR.
  • misc
    • Documented Gitea backup/restore procedure.
    • Drafted GitHub comment manager PR to hide previous commit builds after six.
    • Deployed sequencer-runner.
    • Tested a new Bridge image.
  • lido
    • Commit boost PR.
    • Hoodi missed proposal investigation.

vac:nim:

vac:p2p:

vac:qa:

vac:rfc:

vac:sec:

  • admin/misc
    • OOO: 10 CC days.
  • vac:sec:ift:2025q4-cicd-security-review:year-end-code-reviews
    • Reviewed year-end PRs across IFT, Status, and VAC with focus on security-critical changes.
    • Performed deep reviews of cryptography, key management, and secret handling paths.
    • Audited serialization, parsing, and validation logic for late-cycle edge cases.
    • Reviewed storage, persistence, and migration changes for unsafe defaults.
    • Reviewed dependency update PRs for supply-chain risks.
    • Reviewed CI, GitHub Actions, and release workflows for permission drift and secret exposure.
  • vac:sec:ift:2025q4-vulma-and-ir:year-end-incident-followups
    • Confirmed incident fixes were deployed and monitored.
    • Re-validated incident patches for regressions.
    • Reviewed Q4 ecosystem incidents for shared risk.
    • Reviewed logs and alerts for late-cycle anomalies.
  • vac:sec:ift:2025q4-vulma-and-ir:cleanup-and-carryover
    • Re-reviewed CodeQL and Dependabot findings for closure vs carryover.
    • Performed secondary reviews on security, infra, and hotfix PRs.
    • Identified high-risk areas for post-holiday follow-up and documented handoff context.
    • Coordinated with maintainers on merge vs deferral decisions for security-sensitive PRs.

vac:tke:

  • admin
    • Prepared the monthly report of deliverables.
    • OOO: 14 CC days.
  • vac:tke:ift:logos-token:logos-digital-twin
    • Continued implementing Logos stock and flow diagrams in Machinations.
  • vac:tke:ift:support-to-ift-units:reading-by-jarrad
    • Continued reading about virtual worlds and economies.

vac:web: