0
Teams
0
GitHub Links
Link Types:GitHubInternal (roadmap.vac.dev)ExternalTask ID

IFT-TS 2026/03/30

top highlights

  • SEC started LEZ security audit, built the interactive security checklist for IFT core contributors, and created the Security Guidelines page.
  • TKE prepared Logos model parameters with BI, defined a first LEZ fee-market model, and advanced investor-facing token work.
  • NIM landed new Nimble 0.22.3 release, progressing protobuf-serialization fixes and integration with libp2p, core-libs maintenance, and Chronos documentation.

team highlights

  • BI: Updated Status Apple Store metrics and linked them with Google Analytics 4 for campaign analytics.
  • BI: Refreshed Status Network monitoring and continued Logos app-download and GitHub release extraction work.
  • DST: Finished a scalable KAD-DHT evaluation plan and documented hop-collection and latency issues.
  • DST: Compared jemalloc-backed IBD and non-IBD blockchain nodes and documented continued memory-growth findings.
  • DST: Converted metrics and plotting from YAML to Python and cleaned up the deployment-analysis bridge work.
  • DST: Extended vaclab health monitoring with krew packaging, intra-node benchmarks, and new hardware dashboards.
  • NIM: Landed Nimble cleanup, backport, and patch-release work across the 1.0.0 stream.
  • NIM: Advanced protobuf serialization with default-option handling, conformance tests, negative-varint fixes, and RendezVous adoption work.
  • NIM: Continued core-libs maintenance through borrow/carry helpers, dependency bumps, and compiler or CLI fixes.
  • NIM: Progressed Chronos documentation and language-server integration fixes.
  • P2P: Merged a broad maintenance batch across nim-libp2p, nim-lsquic, and Nimbus QUIC support.
  • P2P: Added support for listening on many QUIC addresses ahead of the next maintenance stream.
  • P2P: Finished the gossipsub 1.4 preamble-extension refactor.
  • P2P: Added follow-up improvements to the gossipsub partial-messages extension.
  • QA: Continued token-gated community functional testing with review feedback and complexity-audit work.
  • QA: Progressed messaging maintenance through RLN refactoring and flaky-test fixes.
  • QA: Re-tested Logos Delivery Python bindings and documented missing APIs, publish failures, and metrics-thread issues.
  • QA: Advanced Status desktop and mobile E2E maintenance, including Activity Center tests and light-client messaging fixes.
  • QA: Added status-go maintenance changes and nim-libp2p transport-interop test-plan work.
  • RFC: Reviewed several RFC index pull requests and prepared the next 1/COSS update.
  • RFC: Continued adversary-spec updates and completed retrospective follow-up work.
  • SC: Updated exact-output swap work with overflow fixes and added supporting tests.
  • SC: Iterated on AMM completion work for PR 371 and LP delta fixes.
  • SC: Opened the initial lez-programs repository setup and continued ATA-program integration work.
  • SEC: Shared the draft LEZ security audit with the dev team.
  • SEC: Built the interactive security checklist for IFT core contributors.
  • SEC: Created the Security Guidelines page and requested production merge.
  • SEC: Continued repository-wide security reviews, Keycard remediation validation, and dependency or incident triage.
  • TKE: Prepared Logos model parameters with BI and continued deployment planning for the macroeconomic model.
  • TKE: Defined an initial LEZ fee-market model and advanced stablecoin and RFP review work.
  • TKE: Progressed fundraising and token work with investor-data-room drafting and LBP review.
  • TKE: Continued xPrize and broader ecodev process work, including Builder Hub shaping and RFP reviews.
  • WEB: Continued SN Hub Hoodi migration and opened proof-of-work RPC auth.
  • WEB: Fixed stake-page visibility and loading-state issues in SN Hub while keeping max-stake fixes under retest.
  • WEB: Progressed the wallet-extension dApp-connection flow.
  • WEB: Advanced the community-curation monorepo migration and Status Network blog updates.
  • WEB: Delivered maintenance and content work across free.technology, Logos sites, and Builder’s Hub.

ift-ts:bi:

  • ift-ts:bi:status:2026q1-uss-status
    • Updated Apple Store metrics and linked current data with Google Analytics 4 for campaign analytics.
    • Continued community-monitoring work on status-bot.
  • ift-ts:bi:status-network
    • Updated Status Network testnet monitoring in Grafana.
  • ift-ts:bi:keycard
    • Researched Shopify analytics updates.
  • ift-ts:bi:logos:2026q1-logos-github-monitoring
    • Continued extracting Logos app download and GitHub release data.
  • ift-ts:bi:finance
    • Fixed a small data issue.

ift-ts:dst:

ift-ts:nim:

ift-ts:p2p:

ift-ts:qa:

ift-ts:rfc:

ift-ts:sc:

ift-ts:sec:

  • ift:2026q1-awareness-program:web3-security-essentials
  • ift:2026q1-cicd-security-review:security-checklist-development
    • Built the interactive security checklist for IFT core contributors, covering communication security, Web3 wallets, AI and LLM safety, and privacy.
  • ift:2026q2-degoogling:sign-in-dependencies-review
    • Evaluated Okta and Auth0 providers and updated onboarding docs to encourage the deGoogling initiative.
  • ift:2026q1-iam-operations:defi-strategy-access-control
    • Executed the whitelisting request for updating Morpho Sentora settings.
  • ift:2026q1-cicd-security-review:pr-and-commit-reviews
    • Performed security reviews across IFT repositories, with focus on cryptography, key management, authentication flows, Keycard firmware, Waku protocol changes, and Status wallet signing flows.
  • ift:2026q1-cicd-security-review:keycard-remediation-validation
    • Continued validating Keycard audit fixes, reviewed new remediation PRs, and tested memory-safety and bounds-checking edge cases.
  • ift:2026q1-vulma-and-ir:dependency-and-alert-triage
    • Triaged new CodeQL and Dependabot alerts, assessed exploitability, and coordinated high-priority dependency updates.
  • ift:2026q1-vulma-and-ir:incident-monitoring
    • Monitored new security incidents, followed up on resolved ones, reviewed anomalies, and updated incident documentation.
  • ift:2026q1-vulma-and-ir:bug-bounty-triage
    • Triaged bug bounty submissions across Waku, Status, and IFT projects and coordinated validation and remediation.
  • ift:2026q1-finance-automation-bug fixing & support
    • Monitored Finance executions daily and verified expense PO generation.
  • ift:2026q1-security-automation:refine -app-catalogue-update-from-expensify
    • Monitored duplicate-data scenarios in the automated application-catalogue update flow.
  • ift:2026q1-security-automation:identify & post sec related news
    • Finalized the DigiBastion news-snippet workflow and investigated a source database for a trained AI agent.
  • ift:2026q1-lez-security-review:security-audit-onboarding
  • other notes
    • Conducted the Q1 Security retrospective and drafted or validated Q2 objectives and task breakdowns.

ift-ts:tke:

  • vac:tke:ift:support-to-ift-units:explore-bi
    • Prepared a spreadsheet with Logos model parameters and coordinated with BI on deployment of the macroeconomic model.
  • vac:tke:blockchain:stress-test:lez-fee-market
    • Defined the first fee-market version for LEZ.
  • vac:tke:ift:support-to-ift-units:logos-stablecoin
    • Reviewed the RAI and HAI model and notebook, and authored the stablecoin RFP.
  • vac:tke:ift:logos-token:fundraise
    • Met the new fundraising team member, caught up on the latest discussions, and wrote a Logos token doc for the investor data room.
  • vac:tke:ift:ecodev::private-dex
    • Reviewed the RFP on GitHub and Juan’s draft.
  • vac:tke:ift:ecodev::lending
    • Reviewed the RFP on GitHub.
  • vac:tke:ift:logos-token:lbp
    • Studied the LBP work and implementation.
  • vac:tke:ift:ecodev:xprize
    • Continued documenting the process, shaping the Builder Hub lambdaPrize section, coordinating new prizes, and detailing how Circles fits into lambdaPrize.
  • vac:tke:ift:ecodev
    • Reviewed RFPs.
  • other notes
    • OOO: 1 CC days.

ift-ts:web:

Manual review

  • ift-ts:p2p:ift:2026q2-nimlibp2p-maintenance:quic-maddrs: content/p2p/ift/2026q2-nimlibp2p-maintenance.md was not found.
  • ift-ts:sc:logos:2026q2-amm-program-completion:complete-pr-371: content/sc/logos/2026q2-amm-program-completion.md was not found.
  • ift-ts:sc:logos:2026q2-amm-program-completion:fix-remove-lp-delta: content/sc/logos/2026q2-amm-program-completion.md was not found.