IFT-TS Roadmaps and Reports

2026-10-19 IFT-TS weekly

17 min read

0
Teams
0
GitHub Links
Link Types:GitHubInternal (roadmap.vac.dev)ExternalTask ID

IFT-TS 2026/10/19

top highlights

  • NIM team released Nimble 0.26.1 with fixes for command injection and dependency resolution.
  • P2P team released nim-lsquic 0.11.2.
  • INFRA team advanced fixes for the LEZ 0.3.1 testnet release.

team highlights

  • BI: Migrating GitHub extraction to the new Airbyte Kubernetes environment.
  • BI: Created a Status SDK command-line interface for Hermes integration.
  • BI: Updated the Logos communication funnel dashboard from feedback.
  • BI: Building a Movement Team dashboard from Logos Circle CRM data.
  • DST: Enabled P2P to start lab runs from GitHub using configurations in their own repository.
  • DST: Expanded Status group reliability analysis, plots, and benchmark scenarios.
  • DST: Fixed Shadow runs to support two binaries and report failures correctly.
  • INFRA: Advanced fixes for the LEZ 0.3.1 testnet release.
  • INFRA: Fixed slow website loads caused by an Nginx cache misconfiguration.
  • INFRA: Upgraded Jenkins controllers to address vulnerabilities.
  • INFRA: Added an OAuth proxy to secure Airbyte login.
  • INFRA: Fixed Nimbus builds and node resyncing on macOS.
  • NIM: Released Nimble 0.26.1 with fixes for command injection and dependency resolution.
  • NIM: Reduced nimsuggest query overhead by up to 250 milliseconds.
  • NIM: Added faster hexadecimal conversion and UTF-8 validation to nim-stew.
  • P2P: Released nim-lsquic 0.11.2.
  • P2P: Added Mix packet authentication checks.
  • P2P: Advanced gossipsub topic streams.
  • P2P: Added an initial network lab project and experiments for automated DST runs.
  • P2P: Fixed nim-ffi caller-thread initialization.
  • QA: Expanded Basecamp module inspector tests.
  • QA: Added composed code audits, findings history, and Notion support to the source-level QA prototype.
  • QA: Added Logos Delivery bug reproduction tests and reported peer discovery, filtering, and lifecycle issues.
  • QA: Added Status desktop bridge, swap, language-switching, and group-chat mention tests.
  • QA: Found and investigated Status mobile iOS upgrade blocker and added Android thread tests.
  • SEC: Reported 11 Logos Chat and 24 Logos Delivery security findings.
  • SEC: Reported five Logos Storage security findings.
  • SEC: Reported four Logos Blockchain findings, including one high-severity issue.
  • SEC: Ran a finance signer-unavailable exercise with backup signatories.
  • TKE: Simplified the Logos token buyback-and-make model and started collecting data.
  • TKE: Reviewed validator incentives and proposed a solution for the community node program.
  • TKE: Reviewed the privacy model with the Blockchain team and proposed parameter choices.
  • TKE: Researched liquidity programs on other blockchains.
  • WEB: Added the Logos media calendar.
  • WEB: Opened a Logos Zines catalogue with five editions, PDF readers, and print guidance.
  • WEB: Added local-events newsletter signup rules.
  • WEB: Added city labels and automated emails for local-event subscribers in the newsletter administration tool.

ift-ts:bi:

ift-ts:dst:

ift-ts:infra:

  • develp
    • Setup of Email, GitHub, and CloudFlare for new business development hire
    • Fixed missing ClickHouse plugin in Grafana needed for some dashboards
    • Fixed nixpkgs bump GitHub workflow failing on missing keys
  • lido
    • Completed Lido validators metrics Q3/26 survey
    • Debugging of Tailscale no hops issues causing midnight alerts
    • Ongoing work to prepare for Lido CSM 0x02 mainnet launch
    • Continued deployments of timing games to more Lido hosts
  • nimbus
    • Resolved checkout issues in nimbus-eth1 caused by DS Nix upgrade
    • Lowered logs retention on Nimbus ElasticSearch cluster to accommodate growth
    • Improve timer settings for ERA files generation
    • Fixed builds and resyncing of Nimbus nodes on macOS host
    • Research into failing REST API tests on MacOS Jenkins hosts
    • Limited Nimbus BN restarts by adding update wrapper script
    • Fixes for nimbus-eth1 benchmark builds
  • logos
    • Finishing touches and fixes for LEZ 0.3.1 release for testnet
    • Fixed broken Indexer and Sequencer ports in legacy testnet LEZ
    • Discussion on CI pipelines and configuration with LEZ devs
    • Investigation of unresponsive delivery nodes on logos.dev fleet
    • Work on baking more configuration into Logos Docker images
    • Enabled Kademlia discovery plugin on logos.dev delivery nodes
  • status
    • Continued work on Status Bot User Engagement features
    • Refactoring of Status SDK for use with Status Bot
    • Deployed new wakucanary for status fleets
    • Debugged E2E issues caused by new Glibc version
  • sites
    • Deployment of new proxy hosts in multiple locations
    • Fixed Nginx cache misconfiguration causing slow site loads
    • Renewed certificate for keycard.tech domain
    • Fixed CSP issues with logos website podcast streaming
  • other notes
    • Bootstrapped new hosts for Blockchain testnet deployments
  • ci
    • Upgraded Jenkins master instances to address vulnerabilities
    • Upgraded Jenkins Lib repo across orgs to fix Groovy issues
    • Removal of Blue Ocean Jenkins plugins in favor of Graph View plugin
    • Ongoing work to enforce Require signed commits GH enterprise policy
    • Ongoing work to deploy and use new cache.nix.free.technology Attic Nix cache
    • Ongoing research into Tart micro VMs for MacOS Jenkins slave hosts
    • Research into xtool for cross compiling iOS apps from Linux
    • Addressed nim-libp2p GitHub workflow cache limit changes
  • hq
    • Added reloading of Prometheus configuration instead of restarting
    • Research into monitoring Alertmanager and Prometheus via Push canary
    • Work on splitting Consul ACL policies to separate them by fleet
  • bi
    • Host upgrades to Ubuntu 24.04, decommissioning of ask LLM host
    • Added OAuth proxy to Airbyte to improve login security
    • Ongoing work to clean up GitHub data synchronization process

ift-ts:nim:

ift-ts:p2p:

ift-ts:qa:

ift-ts:sec:

  • ift:2026q4-ir-vulma:vulnerability-management
    • Atomic-swaps audit #191 Highs (A-05, K-01, A-08) and #190 / #142 followed up with the lez-programs and blockchain teams
    • Fix tracking since 2026-10-05: LEZ Highs #181 (unsigned WriteSegment squat) and #186 (FFI free crash) closed 2026-10-08; #118 closed 2026-10-05; #71 closed 2026-10-15; #251 (faucet stake grab) and #252 (Blend clear-text fallback) closed the day they were filed
    • Re-crawl of audit-reports: 72 findings since 2026-10-05 (#192–#263) — 34 High, 35 Medium; 44 in logos-delivery, 11 in logos-chat, 9 in logos-blockchain, 5 in logos-storage-nim
  • ift:2026q4-ssdlc:pr-security-reviews
    • Threads authorization pass, incl. nested-thread rejection status-go #7884 and thread side panel / cards status-app #22687, #22608
    • Share-sheet and vendored OpenSSL checks (#21771, #21769, #22593)
  • ift:2026q4-iam-operations:access-revalidation-and-cleanup
    • CODEOWNERS / branch-protection / org-team sweep for leavers
  • ift:2026q4-tr-continuity-plan:exercise-and-refine-ir-runbooks
    • Signer-unavailable exercise run with the backup signatories
  • ift:2026q4-internal-audit:logos-messaging-security-review
  • ift:2026q4-internal-audit:logos-storage-security-review
    • 5 x findings on logos-storage-nim #257-#261
  • ift:2026q4-internal-audit:logos-blockchain-security-review
    • Updated the external audit scope
    • 1 x high finding #253
    • 3 x medium findings #254 - #256

ift-ts:tke:

  • ift-ts:tke:logos-token:value-accrual
    • simplified the buyback-and-make model and started the data collection process
  • ift-ts:tke:liquidity:other-programs
    • researched similar programs in other blockchains
  • ift-ts:tke:community:node-program-validators
    • reviewed the incentivization mechanism and proposed a solution
    • discussed the referral program objectives
  • ift-ts:tke:privacy:empowering
    • synced with the Blockchain team about the new model
    • reviewed the whole model
    • proposed a parametrization of the model

ift-ts:web:

Graph View