2026-08-03 IFT-TS weekly

IFT-TS 2026/08/03

top highlights

• NIM team advanced CDDL parsing and protobuf-edition support across Nim serialization libraries.
• QA team expanded Logos Basecamp package-lifecycle coverage and reported two package-manager defects.
• WEB team started Status Wallet Extension dApp connection RPC parity work.
• TKE team advanced LEZ fee-market experiments with new parameters and improved validator-economics documentation.

team highlights

• DST: Identified state-redeployment analysis bugs and structural issues in local CSV processing for anoncomms scenarios.
• DST: Updated tooling for parsed VictoriaLogs fields and continued integration work for Logos Delivery nodes.
• DST: Added live VacLab node resource and topology data to the DST dashboard.
• DST: Reduced RLN proof generation time by about 31% through Kubernetes CPU pinning.
• DST: Completed three adverse-condition nim-libp2p regression scenarios and documented the expanded campaign.
• NIM: Improved Nimble special-version resolution, cache keys, and GitHub authentication.
• NIM: Advanced CDDL parsing and protobuf-edition support across Nim serialization libraries.
• NIM: Added optional-parameter support to Presto and API links to Chronos HTTP examples.
• NIM: Updated the official Nim Docker images.
• P2P: Improved nim-lsquic throughput, CPU use, memory use, and packet-path efficiency.
• P2P: Completed the Logos Core learning materials with a demo chat app and runtime log filtering.
• P2P: Advanced Kademlia lookup convergence, reachability modes, provider announcements, and stream reuse.
• P2P: Advanced the typed nim-ffi C ABI migration across Logos Delivery and nim-libp2p.
• QA: Expanded Logos Basecamp package-lifecycle coverage and reported two package-manager defects.
• QA: Confirmed two Reliable Channel fixes and added three more E2E scenarios.
• QA: Expanded nim-lsquic tracker, TLS, routing, and stream-locking coverage.
• QA: Reported Status Desktop release-testing crashes, hangs, slow loads, and mobile menu failures.
• QA: Added Status Desktop Keycard simulator infrastructure and reported three integration failures.
• QA: Advanced Logos Delivery module API and E2E test integration.
• SEC: Completed the Logos repository migration into the logos-co organization.
• SEC: Reviewed and merged security-sensitive Status Go and Status App changes.
• SEC: Continued follow-up on critical and high-severity audit findings.
• SEC: Identified the Finance Safe multiviewer’s new E2EE and per-Safe routing as sensitive review surfaces.
• SEC: Started threat modeling Cryptarchia, Mantle execution, P2P, and Blend.
• SEC: Reported two Logos Execution Zone findings that the development team resolved.
• TKE: Continued reviewing the token-sale mechanism and considered value accrual beyond buyback and burn.
• TKE: Advanced LEZ fee-market experiments with new parameters and improved validator-economics documentation.
• TKE: Continued the value-accrual mechanism document and explored the economics of culture growth.
• WEB: Started Status Wallet Extension dApp connection RPC parity work.
• WEB: Advanced Logos newsletter form forwarding, subscription opt-ins, welcome replies, and data-based auto-replies.

ift-ts:dst:

• admin/misc
  • Continued task tracking, reviews, meetings, and coordination on upcoming nim-libp2p changes.
  • Opened roadmap#505, creating the DST task.
  • OOO: 1 CC day.
• ift-ts:dst:logos:2026q3-blockchain-evaluation:devnets
  • Discussed the new devnet with the Logos Blockchain team and identified pull requests still to be included.
• ift-ts:dst:logos:2026q3-anoncomms-evaluation:service-discovery-scenarios
  • Found a results-checking bug in the toy scenario: deleting and redeploying the same StatefulSet caused analysis data to be removed incorrectly.
  • Proposed assigning each redeployment a StatefulSet or pod identifier and merging it into the data frame through extra_values.
  • Identified potential structural problems in local CSV analysis.
• ift-ts:dst:logos:2026q3-messaging-evaluation:logos-delivery-node
  • Adapted to VictoriaLogs parsing JSON fields instead of retaining the complete JSON in _msg, which affects VictoriaReader comparisons against the WakuTracer regular expression.
  • Updated the nWaku delivery-node notes.
  • Continued discussion of making --entry-layer=kernel the default in the CreateNode API.
• ift-ts:dst:ift:2026q2-dst-tooling:general-tooling
  • Merged 10ksim#344, updating WakuExperiment.
  • Merged 10ksim#369, using a local random-number generator for parametrized Logos Core tests.
  • Merged 10ksim#365, grouping data paths for metrics plotting.
  • Continued 10ksim#367, adding time-interval values to metadata.
  • Continued 10ksim#363, allowing non-primitive objects in experiment CLI arguments.
• ift-ts:dst:ift:2026q3-dst-tooling:dashboard-improvements
  • Continued 10ksim#355, adding thumbnail caching and preventing box plots from crossing the y-axis.
  • Updated the development dashboard for review.
  • Opened 10ksim#372, adding VacLab node resources and topology to the dashboard backend.
  • Added live Prometheus node data to the Resources and Network frontend page.
• ift-ts:dst:ift:2026q3-dst-lab:analyze-current-stack
  • Updated Mix-node CPU and memory requests and limits to provide Guaranteed quality of service.
  • Merged vaclab-2#44, adding CPU and RAM usage panels to the Mix dashboard.
  • Opened vaclab-2#45, configuring the static Kubernetes CPU manager for core pinning.
  • Applied the configuration to metal-01 for performance validation and deployed the updated dashboard backend and development frontend.
• ift-ts:dst:ift:2026q3-dst-tooling:slow-proof-analysis
  • Enabled CPU pinning on metal-01 and assigned one dedicated core to each Mix node.
  • Measured average RLN proof generation at 195 ms, about 31% lower than without pinning.
  • Updated the RLN proof-generation debugging notes.
• ift-ts:dst:ift:2026q3-libp2p-evaluation:regression-testing
  • Corrected the QUIC partition scenario with an appropriate Kubernetes network policy.
  • Completed degraded-network, churn, and partition scenarios in 10ksim#366.
  • Defined the purpose, reported measures, and expected results for each scenario in the rulebook.
  • Ran the v2.2.0 regression with 50 KB messages across all three muxers and updated the regression report.
  • Defined a 15-run campaign covering Kubernetes and Shadow, three muxers, two message sizes, and three adverse-condition scenarios.
  • Merged 10ksim#362, generating latency plots from the regression pipeline.
  • Opened 10ksim#371, measuring only the settled portion of Shadow runs.
  • Merged 10ksim#370, moving box-plot legends outside the axes.
  • Merged dst-libp2p-test-node#42, documenting the Shadow QUIC engine-tick fix.

ift-ts:nim:

• ift-ts:nim:ift:2026q3-nimble:nimble-1.0.0
  • Opened nimble#1798, preferring the root package’s pinned special version.
  • Merged nimble#1792, assigning distinct cache keys to special versions.
  • Opened nimble#1788, collecting user information before opening a GitHub session.
  • Merged nimble#1787, avoiding warnings when the same special version appears twice.
  • Merged nimble#1784, fixing issue 1779.
  • Reviewed pull requests.
• ift-ts:nim:ift:2026q3-nim-core-libs:maintenance
  • Opened nim-cbor-serialization#41, adding the second version of the CDDL parser.
  • Merged nim-cbor-serialization#40, bumping the library to v0.4.2.
  • Merged nim-cbor-serialization#39, bumping NPH to v0.7.0.
  • Merged nim-cbor-serialization#38, fixing compile-time CDDL parsing for invalid types.
  • Merged nim-protobuf-serialization#113, bumping the library to v0.6.1.
  • Merged nim-protobuf-serialization#112, adding more protobuf-edition tests.
  • Merged nim-protobuf-serialization#109, adding the protobuf-editions pragma.
  • Addressed review comments on the nim track-based nimlangserver in langserver#434.
  • Drafted nimbus-eth2#8818, adopting the new Presto Opt usage.
  • Opened nim-presto#99, allowing Opt for optional parameters.
  • Opened nim-chronos#701, adding API links to HTTP applications.
• ift-ts:nim:ift:2026q3-nim-core-libs:protobuf-serialization-docs
  • Addressed review feedback on the protobuf serialization documentation.
• other notes
  • Updated the official Nim Docker images in official-images#21911.
  • Reported a PCRE issue in Nim.

ift-ts:p2p:

• ift-ts:p2p:ift:2026q3-nimlibp2p-maintenance:maintenance
  • Improved QUIC throughput, CPU use, and memory use across nim-lsquic and nim-libp2p.
  • Opened nimbus-eth2#8836, bumping lsquic to v0.8.0.
  • Merged nim-lsquic packet-path and stream-write improvements in #132, #131, #133, #125, #124, #123, #121, #120, #117, and #109.
  • Closed nim-lsquic#122, removing redundant per-packet work.
  • Opened nim-lsquic benchmark, UDP, and receive-path work in #129, #126, #130, and #127.
  • Opened nim-libp2p#2908, writing QUIC payloads through the lsquic pointer overload.
  • Merged nimbus-eth2#8811 and nim-libp2p#2889, bumping lsquic and BoringSSL.
  • Merged nim-lsquic#111 and #110, adding receive-buffer configuration and restoring sendmmsg.
  • Merged upstream lsquic#670, fixing MinGW build compatibility.
  • Merged nim-libp2p#2900, adopting protobuf editions without introducing a breaking change; superseded nim-libp2p#2893 and nim-protobuf-serialization#108.
  • Merged nim-libp2p#2884, exposing NAT configuration through the C bindings.
  • Merged CI and repository maintenance in nim-libp2p#2892, #2894, and #2895.
  • Merged nim-libp2p#2905, guarding the logging test on a dynamic Chronicles sink.
  • Continued py-libp2p#1407, improving pubsub disconnect hygiene and replay behavior.
  • Merged nim-libp2p#2897, importing tables in the Kademlia find test.
  • Continued nimbus-eth2#8809, adapting gossip validators to Opt[seq[byte]] payloads; it remained blocked on a new release.
  • Opened nim-libp2p#2883, adding address-based dialing to the C bindings.
• ift-ts:p2p:ift:2026q3-logos-core-learning-materials:toy-projects
  • Added a demo chat application and its CI build and smoke test in libp2p-module-demo-chat#1 and #3.
  • Merged runtime log filtering and configuration changes in logos-libp2p-module#95, nim-libp2p#2904, nim-libp2p#2899, and nim-libp2p#2896.
  • Merged logos-libp2p-module#96, exposing libp2p_ctx_new_private_key.
  • Merged logos-libp2p-module#94, documenting the demo project.
• ift-ts:p2p:ift:2026q3-logos-core-learning-materials:tutorials
  • Merged tutorial follow-ups in logos-libp2p-module#92.
• ift-ts:p2p:ift:2026q3-logos-core-learning-materials
  • Marked the Logos Core learning-materials work complete.
• ift-ts:p2p:ift:2026q3-logos-delivery-consulting:service-discovery-kad
  • Opened nim-libp2p changes to converge Kademlia lookups and confirm the closest peers, select client or server mode from reachability, announce providers optimistically, and reuse per-peer streams in #2903, #2910, #2911, and #2901.
  • Merged nim-libp2p#2902, batching reprovide operations by keyspace region.
  • Merged nim-libp2p#2864 and #2863, using continuous alpha-concurrency lookups and probing peers before routing-table insertion.
• ift-ts:p2p:ift:2026q3-logos-messaging-nim-ffi-integration:migration-path
  • Opened nim-ffi#143, defining a self-contained C header, event-listener ABI, documentation comments, and constructor and destructor guards.
  • Opened logos-delivery#4082, migrating liblogosdelivery to the nim-ffi v0.3.0 typed C ABI.
  • Opened nim-libp2p#2909, adopting nim-ffi v0.3.0-rc.1.
  • Merged logos-delivery#4070, adopting the per-listener event ABI.
  • Merged nim-libp2p#2891 and nim-ffi#141, carrying byte sequences as CBOR byte strings.
  • Merged logos-libp2p-module#77, adopting nim-ffi C bindings.
  • Merged nim-libp2p#2885, adopting nim-ffi v0.3.0.

ift-ts:qa:

• ift-ts:qa:logos:2026q3-logos-basecamp:maintenance
  • Merged logos-basecamp#293, adding coverage reports.
  • Merged logos-basecamp#298, testing the Basecamp package lifecycle.
  • Merged logos-basecamp#303, pinning release-test modules.
  • Opened logos-basecamp#300, testing Basecamp module unloading.
  • Reported an unresponsive Package Manager view after unloading package_manager_ui.
  • Reported that uiPluginFileInstalled is not emitted for QML-only packages.
• ift-ts:qa:logos:2026q3-lez-fuzz-testing:framework-maintenance
  • Merged lez-fuzzing#23, automating the weekly corpus update.
• ift-ts:qa:logos:2026q3-messaging-testing:reliable-channel-api-tests
  • Retested and closed logos-delivery#4065 and #4063 after confirming their fixes.
  • Opened logos-delivery-interop-tests#203, covering dropped wrong-content topics, bidirectional causal order, and late-joining receivers.
  • Documented a shutdown segmentation fault after restoring persisted channel state; it was closed as likely out of scope and left with the development team.
• ift-ts:qa:logos:2026q2-messaging-testing:maintenance
  • Merged logos-delivery-interop-tests#202, fixing CI reports and flaky tests.
  • Merged logos-delivery-interop-tests#207, updating python-dotenv from v1.0.1 to v1.2.2.
  • Opened logos-delivery-interop-tests#208, updating Requests from v2.31.0 to v2.33.0.
• ift-ts:qa:ift:2026q3-nim-libp2p-testing:quic-repo
  • Merged tracker and tracker-check improvements in nim-lsquic#106 and nim-libp2p#2886.
  • Merged nim-lsquic#114, testing the certificate verifier and TLS configuration.
  • Reported missing RFC 7301 length validation for ALPN protocol names.
  • Merged nim-lsquic#118, testing routing.
  • Merged nim-lsquic#128, testing stream read and write locking and timeout re-arming.
• ift-ts:qa:status:2026q3-status-qa-desktop:maintenance
  • Opened status-app#21727, porting testnet-popup tests from E2E to QML.
  • Merged Status Desktop E2E fixes in status-app#21731, #21719, and #21679.
  • Opened status-app#21728, tracking the remaining network and testnet modal tests to port to QML.
• ift-ts:qa:status:2026q3-status-qa-desktop:release-testing
  • Reported missing community mute controls on mobile and tablet in status-app#21720.
  • Reported a password-change hang in status-app#21733.
  • Closed status-app#21730, covering a null-keychain onboarding crash.
  • Reported slow initial asset and collectibles loading in status-app#21694 and #21732.
  • Reported a network-change crash in status-app#21704.
  • Closed status-app#21678, covering missing asset-detail balances.
• ift-ts:qa:status:2026q3-status-qa-desktop:e2e-keycard-mock
  • Merged status-app#21665, adding Keycard simulator infrastructure and an onboarding scenario.
  • Reported a login crash, a packaged-app startup failure, and an incomplete simulator restart.
• ift-ts:qa:status:2026q3-status-qa-desktop:windows-performance-tests
  • Merged status-app-benchmarks#24, polishing Flags badges and escalating chronic slowdowns.
  • Merged status-app-benchmarks#23, renaming the regression report to Flags and linking known issues.
  • Merged status-app-benchmarks#22, adding missing first-open asset statistics.
• ift-ts:qa:status:2026q3-status-qa-desktop:new-tests
  • Merged status-app#21545, adding wallet-account reordering tests.
  • Continued status-app#20806, adding sticker-sending chat tests.
• other notes
  • OOO: 5 CC days.
• ift-ts:qa:logos:2026q3-logos-messaging-integration:delivery-module-e2e
  • Merged logos-delivery-module#51, adding a Python E2E suite that drives delivery_module over RPC.
  • Merged logos-delivery#4052, running a Docker subset of the API and E2E wrapper tests in CI.
  • Opened logos-delivery#4077, porting the remaining wrapper tests from the interoperability repository.
• ift-ts:qa:status:2026q3-status-go-functional-testing:maintenance
  • Opened status-go#7669, stabilizing reliability node-pause functional tests.
  • Reported status-go#7668, covering historic-sync delays after reconnecting.

ift-ts:sec:

• admin
  • Reviewed workflows with Marius and updated the organization license.
  • Completed the Logos repository migration, consolidating IFT-relevant repositories under logos-co and clearing the recurring blocker.
  • Identified incomplete Notion access and permission handling for previous departures and flagged it for follow-up.
• ift:2026q3-vulma-and-ir:alert-triage-and-remediation
  • Continued triage across Dependabot, code scanning, and secret scanning.
• ift:2026q3-cicd-security-review:code-review-activities
  • Reviewed and merged status-go#7646 and #7658.
  • Reviewed open Status Go changes #7607, #7580, #7475, #7461, #7452, and #7653.
  • Reviewed and merged status-app#21595 and #21665.
  • Reviewed open Status App changes #21455, #21421, and #20971.
  • Noted the first Keycard pull requests merged in several weeks, status-keycard#123 and keycard-website#258, which contained JavaCard documentation fixes with no security impact.
  • Triaged the open keycard-shell#220 EIP-7702 dispatch gap.
• ift:2026q3-cicd-security-review:keycard-audit-follow-up
  • Continued validating open Keycard findings audit-reports#95 and #93.
  • Synced with the Keycard team on the remaining items.
• ift:2026q3-policy-and-process:access-and-policy-management
  • Reviewed pending PAT requests and iterated on the security checklist and Copilot policy.
  • Continued security hardening for the logos-lambda-prizes organization and supported team VPN review requests.
• ift:2026q3-vulma-and-ir:incident-response-and-bounty-triage
  • Received no new HackenProof reports.
  • Continued follow-up on open high- and critical-severity findings audit-reports#101, #85, and #84.
  • Identified untriaged findings audit-reports#112, #111, and #110 through the GitHub crawl.
  • Identified three additional untriaged Logos Execution Zone and Logos Blockchain findings: audit-reports#115, #114, and #113.
• ift:2026q3-threat-intelligence:supply-chain-attack-research
  • Continued monitoring npm, OAuth, and CI-tool supply-chain campaigns and incorporated indicators into IFT defensive recommendations.
• ift:2026q3-internal-audits:logos-and-keycard-followup
  • Continued the Logos Blockchain and Status Keycard internal-audit cadence.
  • Followed through on audit-reports#95, #85, and #84.
• ift:2026q3-secure-treasury-management:operational-continuity-management
  • Reported no new work in master-wallet-index, secure-multisig-signer, or treasurydata.
  • Reviewed a 13-commit finance-safe-multiviewer sprint that added Matrix E2EE, per-Safe rooms, transaction-lifecycle detection, and reliability fixes.
  • Identified E2EE key material and per-Safe routing as sensitive surfaces for a future security pass.
• ift:2026q3-finance-automation-bug fixing & support
  • Monitored Finance executions daily and provided support and bug fixes.
  • Investigated the July 27 Iplicit incident and verified synchronization, connectivity, and daily executions.
  • Reviewed and updated workflow documentation and uploaded it to GitHub.
• ift:2026q3-security-automation:refine -app-catalogue-update-from-expensify
  • Monitored duplicate-data scenarios daily.
• ift:2026q3-Investigation into KYB/KYC for new contributor profiles
  • Continued GDPR and DPA analysis with Legal.
• ift:2026q3-security-admin
  • Reviewed workflows related to GitHub repositories, assessed the effects of repository changes, and prepared a list of upgrades for after repository stabilization.
• ift:2026q3-pops-BGV enhancement and deployment for new CC profiles
  • Tested additional enhancements and prepared the workflow for deployment.
• ift:2026q3-internal-audit:logos-testnet-security-review
  • Started threat modeling Cryptarchia consensus, Mantle execution, P2P, and Blend.
  • Drafted audit-reports#113.
• ift:2026q3-internal-audit:logos-execution-zone-security-review
  • Reviewed the Logos Execution Zone module and reported audit-reports#114 and #115.
  • The development team resolved both findings, as recorded in the Discord thread.

ift-ts:tke:

• other notes
  • OOO: 1 CC day.
• vac:tke:ift:logos-token:token-sales
  • Continued reviewing the token-sale mechanism.
  • Considered value-accrual mechanisms beyond buyback and burn.
• vac:tke:blockchain:stress-test:lez-fee-market
  • Continued new LEZ fee-market experiments incorporating additional parameters and questions from Thomas.
  • Discussed the work with the Logos Execution Zone team.
  • Improved the validator-economics document.
• vac:tke:ift:logos-token:fundraise
  • Continued the value-accrual mechanism document.
  • Explored the economics of culture growth, connecting the economic work to Jarrad’s document.

ift-ts:web:

• ift-ts:web:status:2026q3-status-wallet-extension
  • Assessed and started the first pull request for dApp connection RPC-method parity.
  • Worked on persistent dApp permissions, gating and allowlists, permission methods, eth_signTypedData_v4, eth_sendTransaction, and multichain read routing.
• ift-ts:web:logos:2026q3-logos-website
  • Opened logos-web#121, forwarding submitted form data on newsletter signup.
  • Merged logos-web#119, subscribing funnel opt-ins to newsletters.
  • Merged admin-acid.logos.co#58, adding a welcome reply for the Logos newsletter.
  • Merged admin-acid.logos.co#59, sending replies based on submitted form data.