IFT-TS 2026/10/26
top highlights
- TKE team finalized model parameters for privacy work with the Blockchain team.
- BI team upgraded the Status engagement bot SDK.
team highlights
- BI: Updated the Logos communication funnel dashboard from feedback.
- BI: Building a Movement Team dashboard from CRM data.
- BI: Extracted and analysed Keycard OpenAI ads data.
- BI: Working on cross-chain swaps in the Status wallet.
- BI: Upgraded the Status engagement bot SDK.
- DST: Built a Logos Storage experiment using Mix.
- DST: Investigated Status message delays and MVDS behaviour.
- DST: Improved P2P lab-run logs and summaries.
- DST: Ran Logos Delivery Messaging API baselines with 100 and 1,000 nodes.
- NIM: Fixed nimlangserver workspace races.
- NIM: Fixed a nim-taskpools regression affecting garbage-collected task results.
- NIM: Wrote the second nim-lint specification and implemented initial features.
- P2P: Advanced nim-lsquic to 0.11.3.
- P2P: Added GossipSub topic-stream transport and lifecycle handling.
- P2P: Completed scheduled network-lab runs that open issues when nodes fail.
- P2P: Added 48-hour Nimbus health checks on the Hoodi fleet for labelled PRs.
- P2P: Added experimental Waggle object dissemination and Rust interoperability in an open PR.
- P2P: Fixed nim-ffi dispatch when a listener is removed during its callback.
- QA: Reported Logos Blockchain missing signature validation check.
- QA: Expanded Basecamp repository-management tests.
- QA: Added Status desktop community-token tests.
- QA: Checked Status mobile 2.39.2 swaps and bridges on iOS; both passed.
- QA: Added status-go community-token tests.
- QA: Ran Basecamp 0.3.0 release checks on macOS and Linux.
- SEC: Enrolled multiple repos into Anthropic oss scanner program.
- SEC: Flagged the go-sqlcipher branch pin during security review.
- SEC: Prepared LEZ external audit scope doc.
- SEC: Recommended replacing the LEZ referral program’s trusted oracle with an on-chain vote.
- SEC: Followed up Logos Messaging audit findings; fixes remain outstanding.
- TKE: Continued collecting Logos token value-accrual data.
- TKE: Formalized a project-management approach for the liquidity working group.
- TKE: Proposed a decay rate for indirect validator referrals.
- TKE: Finalized model parameters for privacy work with the Blockchain team.
- TKE: Reviewed liquid-staking parameters.
- WEB: Advanced the Basecamp landing-page redesign with responsive layouts.
- WEB: Added the Logos zine catalogue and PDF readers.
- WEB: Completed redirects from blog.logos.co to logos.co/media.
- WEB: Advanced admin-acid security hardening in an open PR.
- WEB: Fixed AI documentation sync requests for Web team reviews.
- WEB: Deployed local-event emails to city subscribers.
ift-ts:bi:
ift-ts:bi:logos:2026q4-logos-communication-funnel- Updated the dashboard according to feedback.
- Working on improving YouTube data extraction.
ift-ts:bi:logos:2026q4-logos-circle-crm-upgrade- Working on a Movement Team dashboard based on CRM data.
ift-ts:bi:keycard:2026q4-keycard-continuous-monitoring:openai-ads- Extracted and analysed OpenAI ads data.
ift-ts:bi:status:2026q4-status-sdb-upgrade(deduced)- Working on cross-chain swap functionality in the wallet.
ift-ts:bi:status:2026q4-status-engagement-bot-upgrade- Upgraded the SDK version and improved the general structure.
ift-ts:dst:
other notes- Task tracking and reviews
- messaging-annoncoms offsite
- Discuss with messaging
- Priorities: Messaging API -> v0.40 regression -> chat -> store sync
- Discuss with annoncoms
- Comparison vs discv5 using messaging
- Discuss with storage
- Mix can be added in storage scenarios
- Implemented storage scenario example
- Discovered non intended behavior in the code
- Discuss with status about benchmarks
- Discuss with messaging
ift-ts:dst:logos:2026q4-storage-evaluation:filesharing-client-mix- Implemented new scenario using storage and mix
- Refactor requester to enable utilities needed for storage scenario
ift-ts:dst:status:2026q4-status-evaluation:reliability- Talked with Jo about observed delays
- Investigated MVDS behavior and envelopes
- Github PR: Add plots #47
ift-ts:dst:ift:2026q4-libp2p-evaluation:automatic-reporting- Added the P2P team’s second round of requests: log files named after the nodes, clearer run summary wording, and an optional tag that switches the image of every group.
ift-ts:dst:logos:2026q4-messaging-evaluation:messaging-api- Built an experiment that drives the logos delivery node only through its Messaging API.
- Added a Messaging API send route to pod-api-requester.
- Stopped pod-api-requester from sending a body with GET requests, which made the node cut some of its responses.
- Ran the Messaging API baseline with 100 and then 1000 nodes, and drafted the results report.
- Added the standard bandwidth, memory and connection plots to the Messaging API analysis.
ift-ts:nim:
ift-ts:nim:ift:2026q4-nim-core-libs:nimlangserver- nim-lang/langserver#496 Check project after external edit
- nim-lang/langserver#495 Fix restart nimsuggest on configuration changes
- nim-lang/langserver#494 Fix workspace race conditions
- nim-lang/langserver#493 Avoid showing chk file result for an old file edit
- nim-lang/langserver#498 Lazy nimble project resolve
- nim-lang/Nim#26494 nimsuggest2: thin proxy that runs each query as a one-shot IC process (PoC)
ift-ts:nim:ift:2026q4-nim-core-libs:maintenance- status-im/nim-taskpools#75 Fix #67; “Allow GC type task result” regression
- status-im/nim-taskpools#76 CI speed up
- status-im/nim-taskpools#77 Workaround data race in
examplethread join - status-im/nimbus-common-workflow#37 Add
nim/doc&nim/toolsto cache - Chronos: Do not run examples against Nim 1.6
ift-ts:nim:ift:2026q4-nim-core-libs:nim-lint- Wrote spec and prototype v1, got a lot of comments from vladika (and some from arnethduck and tersec)
- Wrote spec v2.
- Implemented initial features in this design, including skipPaths.
ift-ts:p2p:
ift-ts:p2p:ift:2026q4-nimlibp2p-gossipsub-topic-streams- iftech/nim-libp2p#3327 test(gossipsub): add topic streams interoperability
- iftech/nim-libp2p#3273 feat(gossipsub): harden topic stream lifecycle
- iftech/nim-libp2p#3271 feat(gossipsub): add topic stream transport
- iftech/nim-libp2p#3272 feat(gossipsub): integrate topic streams
ift-ts:p2p:ift:2026q4-nimlibp2p-maintenance- iftech/nim-libp2p#3334 test: remove superfluous tests and fix tests that could not fail
- iftech/nim-lsquic#186 chore(lsquic): update upstream and bump version to 0.11.3
- iftech/nim-libp2p#3302 feat(opt): compare options with plain values
- status-im/nimbus-eth2#9340 chore: bump nim-libp2p and nim-boringssl
- iftech/nim-lsquic#185 refactor(udp): use Chronos direct datagram I/O
- status-im/nim-chronos#752 feat(datagram): add synchronous receive delivery and direct batch sends
- iftech/nim-libp2p#3313 refactor(transport): retry recoverable accept failures internally
- iftech/nim-libp2p#3301 fix(crypto): adjust shuffle index sampling
- iftech/nim-libp2p#3299 fix(gossipsub): use configured PX acceptance threshold
- iftech/nim-libp2p#3321 chore(deps): update nim-boringssl to 0.0.14
- iftech/nim-boringssl#25 chore(boringssl): update submodule and bindings
- iftech/boringssl#11 chore: sync BoringSSL upstream
- iftech/nim-libp2p#3294 fix(tor): align accept handling with TCP
- iftech/nim-libp2p#3295 fix(pubsub): initialize message sequence counters
- iftech/nim-libp2p#3292 fix(protobuf): enforce duration bounds
- iftech/nim-libp2p#3290 fix(asn1): validate one-byte bit string length
- iftech/nim-libp2p#3289 fix(asn1): refine length validation
- iftech/nim-libp2p#3300 fix(wstransport): validate dial hostnames
- iftech/nim-libp2p#3291 fix(cid): validate decoded input
- iftech/nim-libp2p#3298 fix(multihash): refine digest comparison
- iftech/nim-libp2p#3296 fix(crypto): bound RSA public key parameters
- iftech/nim-libp2p#3293 fix(dialer): refine dnsaddr result selection
- iftech/nim-libp2p#3297 fix(gossipsub): normalize bandwidth timing estimates
- iftech/nim-libp2p#3336 chore: delete .opencodereview/rule.json
- iftech/nim-libp2p#3314 chore: utilize
stepsAsync - iftech/nim-libp2p#3311 fix(protobuf): reject out-of-range Duration on decode
- iftech/nim-libp2p#3305 fix(tests): copy lent loop variable before asyncTest closure in test_ping
- iftech/nim-libp2p#3284 fix(kad): cap provider addresses and record keys
- litespeedtech/lsquic#699 Fix: send keepalive PINGs when no stream is open
- iftech/nim-libp2p#3281 fix(kad): narrow getProviders raises to CancelledError
- iftech/nim-libp2p#3316 fix(rdv): replace a repeat registration in place
- iftech/nim-libp2p#3322 fix(tests): copy lent loop variable in accept retry test
- iftech/nim-libp2p#3306 chore(cbind): complete release waiters before stop
- iftech/nim-libp2p#3328 fix: four flaky CI tests and a silent nasm install failure
- iftech/nim-libp2p#3330 fix(autonat): cancel and await in-flight probes on stop
- iftech/nim-libp2p#3331 fix(autonat): reset reachability state on stop
- iftech/nim-libp2p#3333 fix(cbind): time out stream reads and allow one read per stream
- iftech/nim-libp2p#3315 fix(identify): cap addresses and protocols per message
- iftech/nim-libp2p#3312 fix(switch): restore listen addresses after a failed start
- iftech/nim-libp2p#3310 fix(chronosstream): never cancel a pending transport write
- iftech/nim-libp2p#3317 perf(zeroqueue): copy partial reads in place
- iftech/nim-libp2p#3282 chore(kad): return LPResult from ping
- iftech/nim-libp2p#3285 chore(result): const error causes
- iftech/nim-libp2p#3286 chore(result): TLS certificate parse returns Result
- iftech/roadmap#542 fix(p2p): Result PR list, end-date and nim-libp2p repo links
ift-ts:p2p:ift:2026q4-nimlibp2p-gossipsub-byte-queues:byte-limits- iftech/nim-libp2p#3255 feat(gossipsub): add per-priority outbound byte budgets
ift-ts:p2p:ift:2026q4-nimlibp2p-waggle(deduced)- iftech/nim-libp2p#3335 feat(waggle): add experimental object dissemination and Rust interop
ift-ts:p2p:ift:2026q4-dst-automated-workflowother notes- Reviewed the nim-lint prototype.
ift-ts:p2p:ift:2026q4-nimlibp2p-nimbus-downstream-ci- iftech/nim-libp2p#3280 fix(gossipsub): send preamble only to peers not already receiving
- iftech/nim-libp2p#3250 feat(gossipsub): cap concurrent validations per peer
- iftech/nim-libp2p#3324 ci: 48h health soak of test-nimbus PRs on the hoodi fleet
- iftech/nim-libp2p#3269 ci: test PRs on nimbus-eth2 and the hoodi fleet with the test-nimbus label
ift-ts:p2p:ift:2026q4-nimffi-maintenance- logos-messaging/nim-ffi#123 feat(codegen): generated C sync/blocking wrappers + Rust e2e suite
- logos-messaging/nim-ffi#249 fix: skip a listener removed during its dispatch
- logos-messaging/nim-ffi#250 fix: destroy from inside a callback fails fast
- Reviewing PRs
ift-ts:p2p:ift:2026q4-nimlibp2p-kademlia-provider-storage- iftech/nim-libp2p#3288 refactor(kad): distinct RecordKey type for value records
- iftech/nim-libp2p#3332 chore(kad): store provider expiry as wall-clock time
- iftech/nim-libp2p#3318 fix(kad): cap provider records per peer
ift-ts:p2p:ift:2026q4-nimlibp2p-kademlia-auto-mode- iftech/nim-libp2p#3319 chore(kad): auto mode transition policy
- iftech/nim-libp2p#3329 test(kad): fixed modes ignore reachability changes
ift-ts:qa:
ift-ts:qa:logos:2026q4-source-code-level-qa:system-prototype- feat: cron jobs, the tick, and the triggers that keep a PR green
- feat: bork top, a full-screen view over one shared snapshot
- fix: source as a bundle, claimed briefs and collects, delivery by stage
- feat: per-session model and an effort knob
- Logos-blockchain
audit-specrun - 21/53 parts done. - Bork can now run concurrent input consoles and jobs; tested two of each, limited by hardware.
- Opus 5.5 Max tested for audit-spec scan phase -> cost reduced, time went up, quality held.
ift-ts:qa:logos:2026q4-logos-basecamp:mcp-tests- Test/MCP UI module inspector interface view for a method-less module
- Test/MCP UI repositories invalid URL shows a dismissible error banner
- Test/MCP UI repositories unreachable URL is refused with a fetch error
- Test/MCP UI repositories whitespace is rejected and a duplicate is a no-op
- Test/MCP UI repositories refresh flips the button label
- Test/MCP UI repositories cancel on remove default repository keeps it
- Test/MCP UI window Cmd+M minimize action is wired (macOS)
- Test/MCP UI window hide-to-tray and restore preserves open docks
- Test/MCP UI apps inspector unloading the visible app closes its dock
- fix: Optimize A suite UI tests
ift-ts:qa:logos:2026q4-lez-sequencing:cucumber-testsift-ts:qa:logos:2026q4-lez-fuzz-testing:framework-maintenanceift-ts:qa:logos:2026q4-messaging-testing:maintenance- logos-co/logos-logoscore-py#34 feat(docker): pass env vars to the daemon container
- logos-co/logos-logoscore-py#35 feat(logosctl): a docker smoke image for LogosctlDockerDaemon
- logos-co/logos-delivery-module#170 test(e2e): nodes with RLN on, tests without membership
- logos-co/logos-delivery-module#171 test(e2e): tests with RLN membership
- logos-co/logos-delivery-module#175 test(e2e): logosctl instead of logoscore
- logos-co/logos-delivery-module#177 test(e2e): fleet
- logos-messaging/logos-delivery#4610 bug: a node with an RLN plugin dials its static nodes only once the host answers the startup membership check
- logos-messaging/logos-delivery#4612 test: reproduction for #4610
- logos-messaging/logos-delivery#4615 test: refactor anvil setup
- logos-messaging/logos-delivery#4614 test(e2e): cleanup old rln code
- logos-messaging/logos-delivery#4616 test(e2e): bump python bindings
ift-ts:qa:status:2026q4-status-go-functional-testing:maintenance- status-im/status-go#7965 fix(functional-tests): time out the backend health check
ift-ts:qa:status:2026q4-status-go-functional-testing:coverage- status-im/status-go#7956 test(functional): functional tests thread RPCs
- status-im/status-go#7964 test(functional): payment request tests
- status-im/status-go#7942 test(functional): cover community token mint, airdrop, and burn
- Reviewed the week’s status-go changes; filed 7 bugs, #7972 to #7978
- status-im/status-go#7969 test(functional): cover thread permission, reaction control and participants
ift-ts:qa:status:2026q4-status-qa-desktop:maintenance- status-im/status-app#22918 tests: fix payment request
- status-im/status-app#22930 chore(@e2e): fix benchmarks script to correctly push to repo
- status-im/status-app#22916 chore(@e2e): fix network selection
- status-im/status-app#22890 test(e2e): align emoji reads with StatusEmoji and pick from catalog
ift-ts:qa:status:2026q4-status-qa-desktop:new-tests- status-im/status-app#22904 test(e2e): add spell check tests
- status-im/status-app#22828 tests(@e2e): community token actions
ift-ts:qa:status:2026q4-status-qa-desktop:release-testing- status-im/status-app#22888 Activity centre panel animation is slow
- status-im/status-go#7946 fix: wait for a community token row before applying its deploy receipt
- status-im/status-app#22905 Deterministic handling of community token deploy receipts (remove retry race)
- status-im/status-app#22875 chore(@qml): fix http stats test
- status-im/status-app#22870 feat: move activity centre to the top of the navigation list
- status-im/status-app#22863 Erase all notifications and delete individual notification in Activity Centre
ift-ts:qa:status:2026q4-status-qa-mobile:release-testing- Reviewed the week’s app changes; filed 13 bugs, #22938 to #22950
- Checked 2.39.2 on iOS: swap and bridge pass; filed #22897 #22898
- Filed 4 Threads bugs and an Android crash: #22901 #22902 #22903 #22909 #22910
- Updated the Threads QA tree #22527 to the product lead’s answers
- status-im/status-app#22936 [QA - Mobile] Share screen lists chats by the user’s last send, not by the latest message
- status-im/status-app#22801 [QA - Android] Sharing a HEIC photo to Status shows “Format not supported” and attaches nothing
ift-ts:qa:status:2026q4-status-qa-mobile:coverage- status-im/status-app#22849 test(e2e_appium): share to Status on Android — first Q4 coverage PR merged
ift-ts:qa:status:2026q4-status-qa-mobile:maintenance- Traced the nightly #314 red to a BrowserStack restart, not the app
- status-im/status-app#22926 test(e2e_appium): fail fast when the Appium session is gone
- status-im/status-app#22934 test(e2e_appium): check the emoji itself in emoji message tests
ift-ts:qa:status:2026q4-status-qa-mobile:framework- status-im/status-app#22808 test(e2e_appium): run the gate on the iOS simulator
ift-ts:qa:logos:2026q4-logos-basecamp:release-validation- Ran the 0.3.0 release set on macOS and Linux against a checklist
- logos-co/logos-logoscore-cli#190 #191 #192 logosctl fixes: corrupt tokens.json, expiry dates, download —root-hash
- logos-co/logos-logoscore-cli#194
package install --root-hashis accepted but never used - logos-co/logos-storage-module#111 Storage data is always under
$HOME/.logos_storage
ift-ts:sec:
ift:2026q4-ssdlc:pr-security-reviews- Wallet token backend replaced by a Nim library (#7900–#7912, #22733);
go-sqlcipherbranch pin (#7849) flagged; Argon2 cost settings checked (#7889) - Debug features checked for release-build gating: pprof (#7879) and HTTP stats (#7897); mention changes (#22770) checked for spam risk
- Design review of new repos: the logos-co signer stack, Bitcoin/Zcash wallets, nim-qrscan, bi-webhook-server
- Wallet token backend replaced by a Nim library (#7900–#7912, #22733);
ift:2026q4-tr-wallet-security:treasury-multisig-review- Signed the treasury signer rotation key
ift:2026q4-ir-vulma:security-incidents- Keystone data-leak advisory: the risk is targeted phishing (fake replacement devices, “verify your wallet” letters), and Keystone never asks for a seed phrase. Posted in security on the Logos Discord
ift:2026q4-internal-audit:logos-messaging-security-review- Followed up the fixes - no fix yet
ift:2026q4-internal-audit:logos-blockchain-security-review- Discussed with dev team on the Anthropic oss scanner
- Enrolled by dev team in oss scanner: PR
- Setup a node for v0.3.2
ift:2026q4-internal-audit:logos-execution-zone-security-review
ift-ts:tke:
ift-ts:tke:logos-token:value-accrual- continued collecting the data
ift-ts:tke:liquidity:current-proposal- formalized a PM approach for liquidity work group
ift-ts:tke:community:node-program-validators- proposed another model
- proposed the decay rate for referrals of a referral
ift-ts:tke:privacy:empowering- several meetings with the Blockchain team
- finalized a parametrization of the model
- Meet with the Blockchain team again
- review latest work from Alexander
ift-ts:tke:security:liquid-staking- review parameters set by Alvaro
ift-ts:tke:liquidity:budget- Worked on framing the liquidity problem as constrained optimization.
ift-ts:tke:privacy:pptx- work on private trxs
ift-ts:web:
ift-ts:web:logos:2026q4-logos-website:basecamp-lp- Renewed the Basecamp landing page: PR
- Implemented deep links to the desktop app
- Rebuilt the page body to match the Figma design and copy at desktop width
- Kept the shared site header and footer, with Basecamp-only dark colours
- Added responsive tablet and mobile layouts while keeping automatic OS and architecture detection for the installation links
- Added the interactive Hero previews, stack paths, node walkthrough, app filters and developer code tabs
- Preview: Preview
- Renewed the Basecamp landing page: PR
ift-ts:web:logos:2026q4-logos-website:logos-zine- Added the Logos zine catalogue and PDF readers: PR
- Made zine generation independent of system fonts, fixing the failed Jenkins build: PR
- Live: Logos zines
ift-ts:web:logos:2026q4-logos-media-migration:merge-readiness- Completed the blog.logos.co => logos.co/media redirection with the infra team
ift-ts:web:logos:2026q4-logos-website:maintenance- Refreshed the deployment ref before publishing, fixing the failed Jenkins publication: PR
ift-ts:web:ift:2026q4-maintenance:maintenance- Security: prepared logos-web and status-web for Anthropic OSS Scanner enrolment
- Prepared the offline OSS Scanner build for logos-web (API, CMS, CRM, demos and shared packages, with tests passing without network access): PR
- Prepared the OSS Scanner build for status-web (wallet, connector, shared JavaScript package and community contracts), with documented security trust boundaries: PR
- Load calendar events dynamically: PR
- Submitted the OSS Scanner enrolments with threat models for
logos-webandstatus-web: PR, PR
admin-acid.logos.co- Investigate and fix unreachable ghost API breaking all ghost interactions including newsletter subscription in production: Discord thread
- Thorough review of the security upgrades pushed by Jinho: GitHub review here
logos-web & status-web mono-repos- Review & “fix” the docs. Example: missing
apps/apiproject in the main README oflogos-web.
- Review & “fix” the docs. Example: missing
status-web monorepo- Remove dead code: chore(community-subgraph): remove dead subgraph package
- Security: prepared logos-web and status-web for Anthropic OSS Scanner enrolment
ift-ts:web:ift:2026q4-maintenance:security-audit- Hardened admin-acid.logos.co and added daily/weekly security audits: PR
- Upgraded vulnerable dependencies and hardened the production container, PostgreSQL TLS and Redis ACLs
- Added daily dependency/runtime/vendor advisory checks and weekly/PR code, secret, configuration and container scans
- Hardened API authorization, CORS, request-size limits and webhook handling, while keeping password-guessing limits
- Fixed the CSV subscription flow so accepted uploads are parsed, queued and processed within explicit size limits
- Added 101 API tests and 21 security/advisory/development regression tests
- Hardened admin-acid.logos.co and added daily/weekly security audits: PR
other notes- Requested a security-patched MediaWiki test instance for the Logos wiki, including the PHP RCE patches disclosed on 21 October: Issue
ift-ts:web:ift:2026q4-ai-tooling:ai-docs-sync- Fix
ai-docs-syncfailing to ping@web: fail run example - Write docs in our house style: new prompts, style checks and a dash fallback: feat(ai-docs-sync): write docs in the house style
- Drop
--from the rolling PR body and commit message: refactor(ai-docs-sync): drop dashes from the pr body - Rewrite the tool’s README and AGENTS.md: docs(ai-docs-sync): apply the house style
- Drop
- Fix
ift-ts:web:ift:2026q4-ai-tooling:ai-review- Restyle the prompts and posted text, drop dashes and emoji: refactor(ai-review): restyle the reviewer and synthesis prompts / refactor(ai-review): drop dashes and emoji from posted reviews
- Rewrite the tool’s README and AGENTS.md: docs(ai-review): apply the house style
ift-ts:web:ift:2026q4-ai-tooling:monorepo- Write the docs and prompts rules into the root AGENTS.md and README: docs: apply the house style to the root docs
ift-ts:web:ift:2026q4-admin-acid:ad-hoc-requestsift-ts:web:logos:2026q4-logos-website:ad-hoc-features