IFT-TS 2026/07/06 §

top highlights §

• WEB team deployed cms.logos.co, refactored CMS content handling, updated Logos copy and assets, and advanced Field Guide and homepage changes.
• P2P team advanced nim-libp2p maintenance, CI, QUIC, peerstore, AutoTLS, nim-ffi integration, and Logos Core module fixes.
• QA team expanded LEZ fuzzing, LogosDelivery bindings, and nim-libp2p dual-stack coverage.

team highlights §

• BI: Tested a CRM option for Logos Circle and produced a first Logos Delivery dashboard version.
• BI: Improved Discord monitoring.
• BI: Investigated scam accounts for Status.
• BI: Prepared a Keycard A/B testing solution.
• BI: Maintained data warehouse pipelines and deployed a new Airbyte version.
• DST: Merged the rc13 deployment and completed Devnet 2.0 with Logos Core.
• DST: Advanced service-discovery export work for anoncomms.
• DST: Merged 10ksim general-tooling improvements and fixed analysis metric queries.
• DST: Advanced Logos Core integration changes and split the work into smaller PRs.
• DST: Built the DST dashboard backend and frontend, deployed the development version, and ran an end-to-end workflow.
• DST: Continued nim-libp2p regression testing, traced peer leaks, added Shadow results, and fixed analysis metrics.
• NIM: Advanced Nimble resolver, semver, install-state, and archive-extraction fixes.
• NIM: Improved JSON-RPC raises, notifications, and documentation.
• NIM: Continued Chronos HTTP download and redirect work.
• P2P: Continued nim-libp2p maintenance across QUIC, peerstore, AutoTLS, CI, pubsub, Nimbus, and mix validation.
• P2P: Reworked nim-libp2p CI and build caching.
• P2P: Advanced nim-ffi integration support for Logos messaging.
• P2P: Advanced the nim-ffi migration path for Logos messaging.
• P2P: Fixed Logos Core module encoding, service-discovery, marshaling, private-key, and sync bridge issues.
• QA: Advanced LEZ fuzzing coverage.
• QA: Fixed LogosDelivery bindings tests and recent CI failures.
• QA: Added Status functional tests and status-go maintenance coverage.
• QA: Expanded nim-libp2p dual-stack testing and surfaced several IPv6 and transport issues.
• QA: Advanced Status mobile gate health, wallet smoke, performance, accessibility, keycard, and maintenance coverage.
• SEC: Continued alert triage across Dependabot, code-scanning, and secret-scanning queues.
• SEC: Continued security review rotation for status-go, status-app, and keycard-shell.
• SEC: Continued keycard audit follow-up, access review, and supply-chain monitoring.
• SEC: Closed several high and medium audit-report findings while continuing triage of open high and critical items.
• SEC: Reported new Logos blockchain, execution-zone, and storage security findings from internal audit review.
• TKE: Defined the Logos token sale mechanism.
• TKE: Continued EcoDev market-validation outreach.
• TKE: Researched EcoDev node programs and Circles.
• TKE: Continued DWeb Camp campaign preparation.
• TKE: Concluded initial governance research.
• TKE: Drafted an RFP milestone scheme.
• WEB: Removed sample Cloudinary assets and continued Vercel migration unblocking.
• WEB: Restored Status legal docs, removed get.status.app crypto references, and fixed Status web E2E tests.
• WEB: Deployed cms.logos.co, refactored CMS content handling, updated Logos copy and assets, and advanced Field Guide and homepage changes.
• WEB: Advanced wallet-extension E2E infrastructure, swap and send suites, and LiFi fee handling.
• WEB: Advanced Logos CRM automation for Notion funnel profile emails.
• WEB: Drafted an AI review workflow pilot.

ift-ts:bi: §

• ift-ts:bi:logos
  • Tested a CRM option for Logos Circle.
  • Created a first version of the Logos Delivery dashboard.
• ift-ts:bi:ift
  • Improved Discord monitoring.
• ifs-ts:bi:status
  • Investigated scam accounts.
• ifs-ts:bi:keycard
  • Prepared an A/B testing solution.
• internal setup
  • Monitored the data warehouse.
  • Fixed several data synchronization issues.
  • Deployed a new Airbyte version.

ift-ts:dst: §

• admin/misc
  • Continued task tracking and reviews.
  • Finished Q3 commitments and merged roadmap#480.
  • Coordinated QUIC evaluation in logos-delivery.
  • Arranged flights to Georgia for the anoncomms-messaging offsite.
  • OOO: 2 CC days.
• ift-ts:dst:logos:2026q2-blockchain-evaluation:devnets
  • Merged 10ksim#311, adding deployment for rc 13.
  • Completed Devnet 2.0 with Logos Core.
  • Checked how much of the previous deployment can be reused.
• ift-ts:dst:ift:2026q2-dst-tooling:general-tooling
  • Merged 10ksim#306, splitting the base bridge and tests.
  • Opened 10ksim#308, defining analysis in BaseExperiment.
  • Merged 10ksim#304, allowing multiple deployments at once.
  • Merged 10ksim#310, improving experiment config CLI parameters.
  • Merged 10ksim#312, fixing libp2p memory and high-peer metric queries.
• ift-ts:dst:logos:2026q2-anoncomms-evaluation:service-discovery
  • Helped anoncomms export correct data.
  • Investigated t0 time when retrieving service-discovery data.
  • Changed information in the nim-libp2p codebase.
  • Continued draft 10ksim#309, improving the service-discovery experiment.
• ift-ts:dst:logos:2026q2-logos-core-evaluation:evaluation
  • Merged 10ksim#301, changing the Logos Core builder.
  • Continued 10ksim#292, separating the integration into smaller PRs after review.
  • Opened 10ksim#317, adding Logoscore framework changes.
  • Opened 10ksim#314, adding Logoscore deployment assets.
  • Opened 10ksim#318, adding Logoscore builders.
• ift-ts:dst:ift:2026q2-dst-lab:analyze-current-stack
  • Merged vaclab-2#39, adding testnet 0.2 scrape config and dashboards.
  • Created inline scrape config for testnet 0.2 nodes.
  • Created basic Grafana panels for mix and cover metrics observability.
• ift-ts:dst:ift:2026q2-dst-tooling:dashboard
  • Completed ExperimentProcessor, DatasetProcessor, and PanelProcessor.
  • Created and applied boxplot, timeseries, topN, and firstN transformation logic.
  • Applied ECharts conversions and stored generated datasets and panels.
  • Added POST and PUT handlers for experiment resources.
  • Created a basic React frontend.
  • Added Dockerfiles and deployed backend and frontend development versions in VacLab.
  • Ran an end-to-end workflow loading experiments from config.yaml.
  • Published the development dashboard at DST DASHBOARD V0.0.
  • Noted slow backend startup and experiment processing because embedded MontyDB does not support parallel inserts.
  • Noted that experiment pages load panels in batches and may need lazy loading.
• ift-ts:dst:ift:2026q2-libp2p-evaluation:regression-testing
  • Confirmed high open-stream counts in the report come from kad-dht and are expected.
  • Traced a pubsub peer leak reported against Nimbus back to a nim-libp2p change.
  • Reproduced the peer leak with a unit test.
  • Ran Shadow regression at 1000 nodes; mplex and yamux worked, while QUIC did not.
  • Added CPU breakdown and Shadow results to the v2.1.0 regression report.
  • Opened 10ksim#315, bringing back static ConnectTo mode for regression tests.
  • Opened draft 10ksim#316, selecting muxer and discovery for Shadow experiments.

ift-ts:nim: §

• ift-ts:nim:ift:2026q3-nimble:nimble-1.0.0
  • Opened nimble#1755, setting psInstalled for packages read from pkgs2 and adding missing files.
  • Merged nimble#1753, adding semver pre-release version ordering and parsing support.
  • Merged nimble#1751, introducing resolver min/max version selection and removing unused imports.
  • Merged nimble#1750, extracting Nim .tar.xz with tar when unxz is absent.
  • Reviewed PRs.
• ift-ts:nim:ift:2026q3-nim-core-libs:maintenance
  • Opened nim-json-rpc#281, fixing parsing for methods returning void.
  • Merged nim-json-rpc#283, restricting proxy server raises to JsonRpcError.
  • Merged nim-json-rpc#282, restricting client raises to JsonRpcError.
  • Merged nim-json-rpc#279, supporting notifications in RPC context for non-async methods.
  • Merged nim-json-rpc#263, adding the documentation book.
  • Opened nim-chronos#680, fixing the deprecated getAddress warning in Chronos.
  • Drafted nim-chronos#681, adding redirect support to send in Chronos.
• ift-ts:nim:ift:2026q3-nimble:chronos-http-downloads
  • Fixed a reviewer comment about race conditions in nimble#1746.

ift-ts:p2p: §

• ift-ts:p2p:ift:2026q3-nimlibp2p-maintenance:maintenance
  • Opened nim-libp2p#2751, avoiding deadlock when dropping peers from the stream handler.
  • Merged nimbus-eth2#8699, bumping libp2p to 2.1.3.
  • Merged nim-libp2p#2745, covering stale peer cleanup after dropped connection.
  • Merged nim-boringssl#11, testing PRs against nim-libp2p and nim-lsquic.
  • Merged nim-libp2p#2737, avoiding late Joined events after peer drop.
  • Merged nim-libp2p#2734, keeping connected peer addresses from expiring.
  • Merged nim-libp2p#2729, avoiding sink params for small RPC fields.
  • Merged nim-libp2p#2716, allowing selectable nim-libp2p refs for dependency bumps and disabling scheduled runs.
  • Merged nim-libp2p#2719, decoupling ACME RSA keys from libp2p identity schemes.
  • Opened nim-boringssl#10, updating the BoringSSL submodule and bindings.
  • Merged nimbus-eth2#8536, bumping libp2p to 2.1.2.
  • Merged nim-libp2p#2699, releasing AutoTLS certificate keys after CSR generation.
  • Merged boringssl#6, syncing BoringSSL upstream.
  • Merged nim-lsquic#96, fixing leaks.
  • Merged nim-libp2p#2687, removing chronicles import hacks from tests.
  • Merged nim-libp2p#2693, adding mm to job names.
  • Merged nim-libp2p#2647, adjusting incoming message validation order.
  • Merged nim-libp2p#2670, emitting Joined before trimming new peers.
  • Opened nim-libp2p-mix#26, validating alpha field elements.
• ift-ts:p2p:ift:2026q2-nimlibp2p-maintenance:maintenance
  • Merged nim-libp2p#2742, using the new switch builder with multiple addresses.
  • Merged nim-libp2p#2740, using captured variables for closures.
  • Merged nim-libp2p#2724, fixing duplicate IHAVE sending in gossipsub.
  • Reworked CI and build caching across daily jobs, cache behavior, line traces, test workflows, i386 workflow, and README badges.
• ift-ts:p2p:ift:2026q3-logos-messaging-nim-ffi-integration:integration-support
  • Opened nim-ffi#104, sharing FFIType IR and using a single type parser.
  • Opened nim-ffi#106, adding a CBOR-free scalar fast path for all-scalar abi = c procs.
  • Opened nim-ffi#107, slab-allocating event payloads instead of using c_malloc per dispatch.
  • Opened nim-ffi#108, adding configurable per-request handler timeout with a finite default.
  • Opened nim-ffi#109, emitting non-CBOR C examples.
  • Opened nim-ffi#110, adding a CBOR-free scalar fast path for abi=c procs.
  • Opened nim-ffi#111, deriving ffiEvent wire names, guarding generation ordering, and adding a real README.
  • Merged nim-ffi#103, regenerating stale echo C++ bindings and guarding them in check_bindings_cpp.
• ift-ts:p2p:ift:2026q3-logos-messaging-nim-ffi-integration:migration-path
  • Opened logos-libp2p-module#77, using nim-ffi cbindings.
  • Opened nim-libp2p#2681, migrating cbind to nim-ffi.
  • Merged nim-ffi#102, adding the C binding generator.
• ift-ts:p2p:ift:2026q3-logos-core-maintenance
  • Merged logos-libp2p-module#76, building the base64Decode lookup table once.
  • Merged logos-libp2p-module#75, encoding service data consistently in discovery lookup.
  • Merged logos-libp2p-module#74, removing a dead generatePrivateKeyRaw declaration.
  • Merged nim-libp2p#2717, returning an error on invalid private keys instead of generating random keys.
  • Merged logos-libp2p-module#73, extracting shared marshaling helpers into utils.
  • Merged logos-libp2p-module#65, deduplicating the sync-over-async bridge, splitting plugin.h, and surfacing init failure.
  • Merged logos-libp2p-module#70, bumping the QUIC ping connect deadline under TSan.
  • Merged logos-libp2p-module#64, adding configurable persistent private keys.
• misc/admin
  • Merged roadmap#486, adding the P2P maintenance commitment for Q3.
  • Merged logos-libp2p-module#71, running a libp2p node standalone via createNode and getNodeInfo.
  • Merged logos-libp2p-module#68, decoding XPR.
  • Merged nim-libp2p#2683, decoding and verifying XPR through cbind.

ift-ts:qa: §

• ift-ts:qa:logos:2026q2-lez-fuzz-testing:framework
  • Merged lez-fuzzing#13, automating weekly corpus updates.
  • Merged lez-fuzzing#14, testing transaction ordering independence.
  • Merged lez-fuzzing#15, adding model-based stateful lockstep tests.
• admin/misc
  • OOO: 6 CC days.
• ift-ts:qa:logos:2026q3-messaging-testing:logosdelivery-bindings-maintenance
  • Merged logos-delivery-interop-tests#195, fixing test S26.
  • Opened logos-delivery#4003, tracking the double ports shift issue.
  • Retested open issues fixed by developers.
• ift-ts:qa:status:2026q2-status-go-functional-testing:7132
  • Opened status-go#7584, adding and passing scenario 7132.
• ift-ts:qa:status:2026q2-status-go-functional-testing:7131
  • Updated status-go#7556 after review comments; merge remains blocked by CI.
• ift-ts:qa:logos:2026q3-messaging-testing:maintenance
  • Opened logos-delivery-interop-tests#196, addressing recent CI test failures.
• ift-ts:qa:ift:2026q3-nim-libp2p-testing:dual-stack-ipv4-ipv6
  • Merged nim-libp2p#2698, adding the first dual-stack transport tests.
  • Merged nim-libp2p#2704, adding the second dual-stack transport tests.
  • Merged nim-libp2p#2712, adding dual-stack IP address tests.
  • Merged nim-libp2p#2733, adding AutoNAT dual-stack tests.
  • Drafted nim-libp2p#2746, adding miscellaneous dual-stack tests.
  • Opened nim-libp2p#2703, tracking TCP port reuse binding the wrong address family.
  • Opened nim-libp2p#2710, tracking IPv6 private-address classification in AutoNAT.
  • Opened nim-libp2p#2711, tracking IPv6-only public hosts failing AutoTLS setup.
  • Opened nim-libp2p#2731, tracking AutoNAT v2 IPv6 amplification-prevention checks.
• ift-ts:qa:ift:2026q2-nim-libp2p-testing:maintenance
  • Merged nim-libp2p#2725, improving a hanging transport test.
  • Merged nim-libp2p#2714, testing multiple transport addresses.
  • Opened nim-libp2p#2713, tracking inconsistency when stopping pending accept.
• ift-ts:qa:status:2026q3-status-qa-mobile:gate-health
  • Raised and investigated status-app#21405, tracing it to a go-waku filter-server bug and sharing a write-up with developers.
  • Opened status-app#21402, probing master with the proposed status-go delivery fix.
• ift-ts:qa:status:2026q3-status-qa-mobile:journey-smokes
  • Built the first wallet-send smoke, green on device in status-app#21383.
  • Opened status-app#21392, exposing send-confirm values to accessibility.
• ift-ts:qa:status:2026q3-status-qa-mobile:performance
  • Completed the measurement side of the dashboard and awaited sign-off to close.
  • Tracked status-app#21086 and published mobile performance docs.
  • Opened follow-ups status-app#21382 and status-app#21381.
• ift-ts:qa:status:2026q3-status-qa-mobile:a11y-contract
  • Merged status-app#21368, exposing the edited-message indicator to accessibility.
  • Opened status-app#21377, detecting the edited-message indicator and un-xfailing test_edit.
• ift-ts:qa:status:2026q3-status-qa-mobile:keycard-ui
  • Drafted the keycard QA test plan for the new simulator-based stack.
• ift-ts:qa:status:2026q3-status-qa-mobile:maintenance
  • Merged status-app#21367, fixing context-menu and wallet-account gate tests.
  • Opened status-app#21071, logging xfail tests as XFAIL in console instead of FAILED.
  • Tracked status-app#21304, the mobile E2E maintenance epic.
• ift-ts:qa:status:2026q2-status-go-functional-testing:maintenance
  • Merged status-go#7582, reporting coverage to Codecov on PRs.
• ift-ts:qa:status:2026q2-status-qa-desktop:maintenance
  • Merged status-go#7561, using Docker-assigned ephemeral host ports in functional tests.
• ift-ts:qa:logos:2026q2-logos-messaging-integration:delivery-module-e2e
  • Opened logos-delivery-module#51, adding an E2E suite driving delivery_module over RPC.

ift-ts:sec: §

• ift:2026q3-vulma-and-ir:alert-triage-and-remediation
  • Continued triage on Dependabot, code scanning, and secret scanning queues.
• ift:2026q3-cicd-security-review:code-review-activities
  • Reviewed and merged status-go#7532, refactoring on-demand Status-owned StoreClient internals.
  • Reviewed status-go#7475, status-go#7461, and status-go#7452, carrying them to W28.
  • Reviewed and merged status-app#21347, bumping the status-keycard-qt lib.
  • Stayed on review rotation for status-go, status-app, and keycard-shell.
• ift:2026q3-cicd-security-review:keycard-audit-follow-up
  • Continued validation of open keycard audit findings audit-reports#95 and audit-reports#93.
  • Synced with the Keycard team on remaining items.
• ift:2026q3-policy-and-process:access-and-policy-management
  • Reviewed pending PAT requests and iterated on the security checklist and Copilot policy.
  • Continued logos-lambda-prizes org security hardening.
  • Continued supporting team VPN review requests.
• ift:2026q3-vulma-and-ir:incident-response-and-bounty-triage
  • Triaged and drove remediation for open audit reports audit-reports#103 and audit-reports#102.
  • Followed up on high and critical findings, closing audit-reports#91, audit-reports#81, audit-reports#104, and audit-reports#72.
  • Carried open high and critical findings audit-reports#101, audit-reports#96, audit-reports#90, audit-reports#85, and audit-reports#84 to W28.
  • Ran the HackenProof triage cycle and closed severity assignments for waku-79 and waku-78.
• ift:2026q3-threat-intelligence:supply-chain-attack-research
  • Continued monitoring npm, OAuth, and CI-tool supply-chain campaigns and folded IoCs into IFT defensive recommendations.
• ift:2026q3-internal-audits:logos-and-keycard-followup
  • Continued the logos-blockchain and status-keycard internal audit cadence.
  • Followed through on audit-reports#95, audit-reports#85, and audit-reports#84.
  • Confirmed audit-reports#81 was closed.
• ift:2026q1-finance-automation-bug fixing & support
  • Monitored Finance executions daily.
  • Provided support and bug fixing.
• ift:2026q1-security-automation:refine -app-catalogue-update-from-expensify
  • Monitored duplicate data scenarios daily.
• ift:2026q3 - Investigation into migration from Discord to Element for n8n workflows
  • Waited for a decision from Infra.
• ift:2026q3-Investigation into KYB/KYC for new contributor profiles
  • Finalized testing of the optimized BGV workflow with no sensitive data processed.
  • Worked on integration with the Vercel app used by PoPs.
  • Analyzed GDPR and DPA questions with Legal.
  • Continued SERP API DPA review.
• ift:2026q3-security-admin
  • Met with Mario to review handoff activities.
  • Defined next steps for the following week.
• ift:2026q3-internal-audit:logos-blockchain-security-review
  • Reviewed new commits.
  • Reported audit-reports#106 and audit-reports#107.
  • Tracked the Discord thread.
• ift:2026q3-internal-audit:logos-execution-zone-security-review
  • Reviewed new commits.
  • Reported high finding audit-reports#104.
  • Tracked the Discord thread.
• ift:2026q3-internal-audit:logos-storage-security-review
  • Reviewed new commits.
  • Reported medium finding audit-reports#105.
  • Tracked the Discord thread.

ift-ts:tke: §

• admin
  • OOO: 1 CC day.
• vac:tke:ift:logos-token:token-sales
  • Defined the token sale mechanism.
• vac:tke:ift:ecodev:market-validation
  • Continued helping EcoDev reach out to projects.
• vac:tke:ift:ecodev:node-program
  • Understood how Circles work.
  • Researched node programs in other chains.
• vac:tke:keycard:incentives
  • Understood requirements and discussed simple solutions.
• vac:tke:ift:support-to-ift-units:comms-ia-campaign
  • Continued DWeb Camp campaign research support.
  • Started preparing the DWeb Camp talk.
• vac:tke:ift:support-to-ift-units:governance
  • Concluded initial governance research.
• vac:tke:ift:ecodev:cost-transparency
  • Continued work on Jarrad’s prifi thesis.
• vac:tke:ift:ecodev:xprize
  • Continued reviewing submissions.
  • Synced with Movement on strategy for Circle LPs.
• vac:tke:ift:ecodev:rfp
  • Drafted a milestone-based scheme.
• vac:tke:ift:ecodev:wrapped-assets
  • Supported Rahul’s BD calls.
• vac:tke:ift:ecodev:ID-protocol
  • Chased Ricardo’s feedback.

ift-ts:web: §

• ift-ts:web:ift:2026q3-maintenance:maintenance
  • Removed sample Cloudinary assets.
  • Continued Vercel migration unblocking through Discord.
  • Opened roadmap#488, updating roadmap tasks and tags.
  • Continued Operator Sunset through Discord.
  • Drafted logos-web#92, piloting a dual-model PR review workflow.
  • OOO: 1 CC day.
• ift-ts:web:status:2026q3-status-website:copy-changes-section-reduction
  • Opened status-web#1248, restoring status.network legal docs.
  • Opened status-web#1248, removing get.status.app crypto references.
  • Opened status-web#1248, fixing E2E tests.
  • Merged status-web#1242, removing crypto-source content from get.status.app.
  • Troubleshot the Keycard blog.
• ift-ts:web:logos:2026q3-logos-website:selfhosting
  • Deployed cms.logos.co with the Infra team.
  • Refactored the CMS for better maintainability.
  • Updated miscellaneous copy and assets after requests from Comms, Legal, and Movement.
  • Opened logos-web#62, making @repo/content the source for home, get-started, and movement page copy.
  • Merged logos-web#68, adding Logos Field Guide and renaming Brand Kit to Design Guide.
  • Merged logos-web#71, fixing favicon visibility.
  • Merged logos-web#72, fixing Field Guide chapter links.
  • Merged logos-web#77, adding the node-operator guide CTA.
  • Merged logos-web#78, fixing CMS deployed server actions.
  • Merged logos-web#85, updating testnet legal copy and adding a highlight modal to the homepage.
  • Updated logos.co CSP to allow the CiviCRM Vercel development deployment through infra-sites#146.
  • Created an endpoint to send email from the Notion BD database through webhook, plus a UI for editing email templates.
  • Merged admin-acid.logos.co#51, adding Notion funnel profile emails.
  • Tracked infra-sites#147, adding new environment variables.
  • Merged logos-web#70, writing affiliated organizations to the Movement organization text field.
• ift-ts:web:status:2026q3-status-wallet-extension
  • Opened status-web#1245, adding shared infra for extension-based wallet tests.
  • Opened status-web#1246, adding wallet extension send and swap suites on Anvil forks.
  • Opened status-web#1247, honoring LiFi-quoted fees when signing swap transactions.