IFT-TS Roadmaps and Reports

2026-07-20 IFT-TS weekly

13 min read

0
Teams
0
GitHub Links
Link Types:GitHubInternal (roadmap.vac.dev)ExternalTask ID

IFT-TS 2026/07/20

top highlights

  • NIM team released Nimble 0.24.1 after landing compatibility, dependency, resolver, and binary-packaging fixes.
  • INFRA team upgraded Cortex from 1.18.1 to 1.21.1 and improved its logging, dashboards, and metrics reliability.
  • SEC team closed two high-severity audit findings covering multisig thresholds and channel-key index validation.

team highlights

  • DST: Diagnosed service-discovery stalls, bootstrap delays, and invalid-ticket warnings with the anoncomms team.
  • DST: Deployed the DST dashboard and improved monitoring-stack scalability and resource allocation.
  • DST: Found a potential nim-libp2p gossipsub mesh issue through cluster vs Shadow simulator comparison regression testing.
  • INFRA: Fixed Nimbus Sepolia hosting, QUIC defaults, host naming, and investigated memory and disk growth.
  • INFRA: Improved Logos node recovery and monitoring and began CLI signing and notarization.
  • INFRA: Migrated get.status.app to Caddy-Git and deployed the Logos E-Learning site.
  • INFRA: Upgraded Cortex to 1.21.1 and improved logging, dashboards, and metrics ingestion.
  • INFRA: Prepared the Logos GitHub Enterprise migration and upgraded CI services and ARM build capacity.
  • NIM: Released Nimble 0.24.1 and updated Nim to use the new version.
  • NIM: Improved taskpools with external-thread submissions, broader tests, and allocation and event-notifier work.
  • NIM: Made the Nim Docker Hub images official.
  • P2P: Completed the nine-part nim-libp2p migration to nim-ffi cbindings.
  • P2P: Completed mobile cross-compilation support.
  • P2P: Merged Android and iOS simulator and FFI-target support.
  • P2P: Replaced nim-nat-traversal with nim-libplum in NATService.
  • P2P: Advanced Kademlia service-discovery behavior with routing, lookup, eviction, and interoperability fixes.
  • QA: Expanded reliable-channel API coverage through additional scenarios and reported confirmed unreliable behavior.
  • QA: Expanded Status Desktop CPU and RAM benchmark collection and charting.
  • QA: Added Windows benchmark baselines, account variants, spread bands, and system information.
  • QA: Investigated high Status Mobile memory usage and enabled profiling builds.
  • QA: Advanced in-repository and module-level Logos Delivery E2E test migration.
  • SEC: Closed two high-severity audit findings and continued remediation of open high and critical findings.
  • SEC: Began the libchat audit, reported a missing delegate identifier, and started reviewing de-MLS.
  • SEC: Restored Finance automations after an instance restart and verified BBHR and Iplicit synchronization.
  • TKE: Sketched the EcoDev node-program implementation plan.
  • TKE: Continued XPrize submission reviews, awards, KPI planning, and budgeting.
  • WEB: Restored Vercel and Status build downloads and unblocked the dockerized website deployment.
  • WEB: Implemented the new Logos roadmap design and copy.
  • WEB: Advanced the Logos media migration with search, interactive articles, and responsive layouts.
  • WEB: Added search to the Status blog.
  • WEB: Added structured data to status.app pages.
  • WEB: Added mnemonic account discovery and advanced in-wallet multi-account creation.

ift-ts:dst:

ift-ts:infra:

  • lido
    • Updated documentation after the Mainnet key migration.
    • Researched enabling the slashing database for Web3Signer.
  • nimbus
    • Restored missing Sepolia ERA files and their public hosting.
    • Fixed Nimbus nodes broken by QUIC being enabled by default.
    • Corrected the old nimbus.eth1 host name temporarily used for Obol on Hoodi.
    • Debugged unconstrained memory growth in a recent Nimbus-eth2 release.
    • Investigated unconstrained Nimbus-eth1 disk-space growth.
  • logos
    • Fixed restart backoff in the Logos Blockchain Docker Compose setup.
    • Fixed the OpenMetrics sidecar service using the wrong port.
    • Added an entrypoint script so Logos modules restart after failures.
    • Added missing license files and legal disclaimers to Logos repositories.
    • Began Logos CLI signing and notarization work.
  • status
    • Helped fix randomized listening ports used by the status-go node.
    • Continued work to merge the deterministic-build F-Droid merge request.
  • sites
    • Migrated get.status.app to self-hosted Caddy-Git.
    • Debugged Umami issues on the newly self-hosted get.status.app site.
    • Deployed the Logos E-Learning platform website and awaited its database dump.
    • Debugged a missing webhook for status-web builds.
    • Added Mailgun configuration for the Logos Stewards website.
    • Completed DNS TXT verification for the Keycard domain.
  • office
    • Adjusted administrator permissions for the default public Matrix space.
    • Investigated a private Matrix space for Adam and the Finance team.
  • misc
    • Fixed a Signal bridge failure caused by deregistration.
    • Fixed duplicate keys in the infra-pass repository.
  • hq
    • Upgraded Cortex from 1.18.1 to the 1.21.1 release.
    • Investigated Cortex querier query-duration issues.
    • Enabled JSON logs and created a Cortex Kibana dashboard.
    • Resolved multiple Prometheus metrics push failures.
    • Identified broken metric labels from the GitHub exporter and Waku Sonar.
  • ci
    • Prepared the GitHub Enterprise migration for Logos organizations.
    • Upgraded the GitHub Actions exporter with the start/stop bug fix.
    • Fixed linux-05 Docker socket permissions.
    • Increased the vacp2p GitHub Actions cache limit to 30 GB.
    • Upgraded Jenkins to the newest stable release and updated its plugins.
    • Upgraded Java JRE for the new Jenkins Agent version.
    • Fixed Nix-Darwin activation failures caused by Homebrew errors.
    • Restored the missing Squish license on linux-05.
    • Installed the missing Allure 2.x release for Status E2E.
    • Deployed a Scaleway ARM host for ARM build testing.

ift-ts:nim:

ift-ts:p2p:

ift-ts:qa:

ift-ts:sec:

  • ift:2026q3-vulma-and-ir:alert-triage-and-remediation
  • ift:2026q3-cicd-security-review:code-review-activities
    • Reviewed and merged status-go#7613, bumping the SDS stack, and status-go#7616, allowing media-server port overrides.
    • Reviewed open status-go changes #7607, #7580, #7475, #7461, and #7452, carrying them to W30.
    • Reviewed and merged status-app#21481, cleaning up browser profiles.
    • Reviewed open status-app changes #21455, #21421, and #20971, carrying them to W30.
    • Continued the status-go, status-app, and keycard-shell review rotation; no new Keycard changes arrived.
  • ift:2026q3-cicd-security-review:keycard-audit-follow-up
    • Continued validating open Keycard findings audit-reports#95 and #93.
    • Synced with the Keycard team on the remaining items.
  • ift:2026q3-policy-and-process:access-and-policy-management
    • Reviewed pending PAT requests and iterated on the security checklist and Copilot policy.
    • Continued logos-lambda-prizes organization hardening and VPN review support.
  • ift:2026q3-vulma-and-ir:incident-response-and-bounty-triage
  • ift:2026q3-threat-intelligence:supply-chain-attack-research
    • Continued monitoring npm, OAuth, and CI-tool supply-chain campaigns and folded indicators into defensive recommendations.
  • ift:2026q3-internal-audits:logos-and-keycard-followup
    • Continued the Logos Blockchain and Status Keycard internal audit cadence.
    • Followed through on audit-reports#95, #85, and #84.
  • ift:2026q3-finance-automation-bug fixing & support
    • Monitored Finance executions daily and provided support and bug fixes.
    • Verified workflows after the instance restart and confirmed BBHR and Iplicit were synchronized.
  • ift:2026q3-security-automation:refine -app-catalogue-update-from-expensify
    • Monitored duplicate-data scenarios daily.
  • ift:2026q3 - Investigation into migration from Discord to Element for n8n workflows
    • Awaited a decision from Infra.
  • ift:2026q3-Investigation into KYB/KYC for new contributor profiles
    • Awaited final review from People Operations and Legal.
    • Continued integration with the Vercel application used by People Operations.
    • Continued GDPR and DPA analysis with Legal.
  • ift:2026q3-security-admin
    • Finalized Bitwarden access for Security cloud-instance credentials.
    • Reviewed pending Q3 tasks.
  • ift:2026q3-internal-audit:logos-messaging-security-review
    • Began auditing libchat and reported the missing delegate_id finding in audit-reports#108.
    • Confirmed the missing identifier is a known unimplemented item.
    • Began reviewing the de-MLS protocol and discussed PrivateV1.

ift-ts:tke:

  • admin
    • Updated the TKE NCTs.
    • OOO: 3 CC days.
  • vac:tke:blockchain:pow:tokenomics
    • Discussed the design with the Blockchain team.
  • vac:tke:ift:ecodev:node-program
    • Sketched an implementation plan for the program.
  • vac:tke:keycard:incentives:snt
    • Discussed constraints and objectives with stakeholders.
  • vac:tke:ift:ecodev:cost-transparency
    • Reviewed the work, provided feedback, revisited results, and analyzed next steps.
  • vac:tke:ift:support-to-ift-units:governance
    • Reviewed the work and next steps with the Legal team.
  • vac:tke:ift:ecodev:xprize
    • Continued reviewing submissions, synchronized on and awarded additional prizes, and planned KPIs and budgets.
  • vac:tke:ift:ecodev:rfp
    • Reviewed recent developments.
  • vac:tke:ift:ecodev:wrapped-assets
    • Reviewed business-development progress and supported research and case studies.

ift-ts:web:

Graph View