From 8af0349f9bc8894423b42ec36ae445f41ef44b5d Mon Sep 17 00:00:00 2001 From: ksr Date: Tue, 10 Jun 2025 15:42:43 +0200 Subject: [PATCH] vac weekly --- content/updates/2025-06-02.md | 32 ++++- content/updates/2025-06-09.md | 260 ++++++++++++++++++++++++++++++++++ 2 files changed, 291 insertions(+), 1 deletion(-) create mode 100644 content/updates/2025-06-09.md diff --git a/content/updates/2025-06-02.md b/content/updates/2025-06-02.md index 70b034df7..2fbbefc20 100644 --- a/content/updates/2025-06-02.md +++ b/content/updates/2025-06-02.md @@ -12,6 +12,7 @@ draft: false ### highlights - Completed performance evaluations for GossipSub v1.4, v1.4+stagger, PPPt, 2.0 - Good alignment/collab with linea on bridge work +- Proposal of refined block rewards emission schedule for Nomos. ### vac:p2p: - `ift:2025q1-gossipsub-perf-improvements` @@ -42,6 +43,36 @@ draft: false - assisted on PR: [nim-libp2p#1399](https://github.com/vacp2p/nim-libp2p/pull/1399) ### vac:tke: +- `admin` + - 1 CC day off (Ascension Day, May 29) + - wrote down the team's monthly report + - 3 days at ETHPrague and 1 day (plus weekend) at ETHGlobal Hackathon Prague +- `vac:tke:ift:support-to-ift-units::logos-basket` + - worked on a proposal for $LOGOS as unique token for the tech stack + - Further research and discussion + - Catchup with latest here + - continue reserch on basket and joint value accrual +- `vac:tke:ift:support-to-ift-units::tge` + - reviewed integrated document +- `vac:tke:nomos:macroeconomy::block-rewards` + - studied Juan's work on "token emissions as optimal control problem" + - proposed a block rewards emission rate on top of the work above + - sketched the whole block rewards work +- `vac:tke:status:karma-incentives:karma-params` + - Work on tier definition based on conversation with Status team +- `vac:tke:nomos:macroeconomy::tfms-primer` + - Pushed on nomos DA, TFMs and block rewards + - Catchup with discussion +- `vac:tke:ift:tokenomics-research-forum::minting-control` + - Keep refining work on optimal control and minting +- `vac:tke:ift:tokenomics-research-forum:grantico` + - read Martin's work on Grantico + - Present the work in the research call +- `vac:tke:ift:ghost:tokenomics-design` + - Discuss with Matt +- `vac:tke:codex:cdx-launch::preparations` + - get data analusys on competitor growth + - help on token emission schedule based on a KPI ### vac:qa: - `nomos:2025q2-da-testing:data-confidentiality` @@ -212,4 +243,3 @@ draft: false ### vac:nes: - diff --git a/content/updates/2025-06-09.md b/content/updates/2025-06-09.md new file mode 100644 index 000000000..d7fa93867 --- /dev/null +++ b/content/updates/2025-06-09.md @@ -0,0 +1,260 @@ +--- +title: "2025-06-09 Vac weekly" +tags: + - "vac-updates" +date: 2025-06-09 +lastmod: 2025-06-09 +draft: false +--- + +## Vac 2025/06/09 + +### highlights +- Finished refactoring the DST analysis codebase, now is more modular and easier to expand for other projects. +- Implementations of L1/2EthBridge for SN have started. +- Released Zerokit [v0.8](https://github.com/vacp2p/zerokit/releases/tag/v0.8.0). +- Finalize production version of Security App Catalogue update process + +### vac:p2p: +- `ift:2025q1-gossipsub-perf-improvements` + - Worked on GossipSub v1.4 production implementation. First [PR is here](https://github.com/vacp2p/nim-libp2p/pull/1448). + - Still need to add safety strategy (Will need 1-2 days more). +- `vac:p2p:acz:2025q2-acz-consulting:libp2p-mix-consulting` + - Had a pair session with Ben from ACZ going over the libp2p changes for mix. + - Gave some tips on how to improve the code + - We went over the publish / receive logic of gossipsub. Suggested to use a set of fixed node keys to make it easier to debug issues with mix + - Troubleshoot the custom connections PR to see why Gossipsub tests were failing. Found the issue and suggested fix (wrong method signature) +- `vac:p2p:ift:2025q2-nimlibp2p-kad-dht:routing-and-rpc` + - Did a small refactoring over the kad-dht code to separate the concept of keys and peerIds in the routing table +- `vac:p2p:acz:2025q2-acz-consulting:de-mls-consulting` + - Helped publish a new version of zerokit RLN in npm + - Asked Franck from Waku to grant access to waku's npm org to Ekaterina so she can publish new versions herself and not blocked by this +- `vac:p2p:ift:2025q2-nimlibp2p-maintenance:maintenance` + - investigated [nim-libp2p#1367](https://github.com/vacp2p/nim-libp2p/pull/1367): hole punching interop tests stopped working + - was able to run hp tests locally, with suprisngly small effort + - no other libp2p implementation has this implemented and working + - rust have this tests but are failing + - other implementations don't have these tests + - notified libp2p discord communiti; raising concerns + - suggestion: to postpone with futher efforts on making this work untill tests are fixed or there is some other implementation with working tests + - chore(gossipsub): add consts [nim-libp2p#1447](https://github.com/vacp2p/nim-libp2p/pull/1447) + - fix(ci-daily): delete cache action will continue on error [nim-libp2p#1435](https://github.com/vacp2p/nim-libp2p/pull/1435) + - work on `libp2p/test-plans` + - implemented libp2p perf for nim + - has to be back&forth; running locally requires AWS + - PR with ongoing effort [test-plans#659](https://github.com/libp2p/test-plans/pull/659) + - PR form maintainer [test-plans#658](https://github.com/libp2p/test-plans/pull/658) + - add nim-libp2p impl for hole punching [libp2p/test-plans#322](https://github.com/libp2p/test-plans/pull/322) + - should postpone effrot untill #1367 is fixed + - [roadmap#174](https://github.com/vacp2p/roadmap/pull/174) wrote the universal connectivity app commitment for the roadmap + - Worked with Ivan from Waku on [nim-libp2p#1438](https://github.com/vacp2p/nim-libp2p/pull/1438) + - The purpose was trying to figure out if a Future was not being completed. + - Ended up closign the PR due to not understanding correctly the behavior of the + `connectedFut`future when writing the PR so the solution was incorrect and not needed + - [libp2p/test-plan#656](https://github.com/libp2p/test-plans/pull/656): update transport-interop to v1.10.x + - @manushel from libp2p reported the chronicles 0.10.3 / 0.11.0 issue with interop. Ended up creating a PR - + - [nim-libp2p#1439](https://github.com/vacp2p/nim-libp2p/pull/1439) - Add `libp2p_network_bytes` metric to Quic + - Managed to run the prometheus metrics with libp2p. Still trying to figure out what's up with nim-libp2p memory usage when using quic. I might need to run pprof equivalent for nim, as nim-metrics does not display any useful metric +- Troubleshoot nim-chronicles breaking things downstream + - Spent a lot of time with Ben and Akshaya trying to get couple of projects to compile + - In addition to that happening, a related issue affected DST Gossipsub Test Node, not letting the code compile + - The problem seems to be happening in nimble and an opened [nim-lang/nimble#1403](https://github.com/nim-lang/nimble/issues/1403) in nimble repo for @jmgomez +- `vac:p2p:ift:2025q2-nimlibp2p-autotls` + - Started to do `peeridauth` (this is a nice byproduct of autotls btw) [#1445](https://github.com/vacp2p/nim-libp2p/pull/1445) + - Submitted the AutoTLS Client spec to libp2p [#682](https://github.com/libp2p/specs/issues/682) + - addressed a couple grammar issues they found + - `vac:p2p:ift:2025q2-nimlibp2p-webtransport:http3-client` + - continue on http3 client [nim-quic#322](https://github.com/vacp2p/nim-quic/pull/322) + - `vac:p2p:ift:2025q2-nimlibp2p-autotls:acme-registration` + - merged in [#1436](https://github.com/vacp2p/nim-libp2p/pull/1436) + - `vac:p2p:ift:2025q2-nimlibp2p-autotls:certificate-request-challenge` + - merged in [#1436](https://github.com/vacp2p/nim-libp2p/pull/1436) +- `misc/admin`: + - [Ongoing discussion](https://discord.com/channels/864066763682218004/1379069276559773777/1380238564750790767) about how to handle semver for libraries + - Presented roadmap proposal for next Qs https://notes.status.im/Gee9qLXVQo-6PVi43J2J8g + - 1 CC 1d off + +### vac:tke: + +### vac:qa: +- `status:2025q2-status-qa:v2-34` + - Finished main round of testing for mobile v2.34, [full report](https://www.notion.so/2-34-Mobile-Release-Coordination-1f88f96fb65c80589326d087cfc6f0f5) + - Retested several fixes, reported 12 issues + - Leftover testing for 2.34, dealing with missing token list + - Investigated bug with missing token list + - Logged several issues including e2e results + - [https://github.com/status-im/status-desktop/issues/18053](https://github.com/status-im/status-desktop/issues/18053) + - [https://github.com/status-im/status-desktop/issues/18043](https://github.com/status-im/status-desktop/issues/18043) + - [https://github.com/status-im/status-desktop/issues/18018](https://github.com/status-im/status-desktop/issues/18018) + - Testing for Qt6 build [https://github.com/status-im/status-desktop/pull/18019](https://github.com/status-im/status-desktop/pull/18019) + - Opened PR to remove unused code and merge similar tests [https://github.com/status-im/status-desktop/pull/18052](https://github.com/status-im/status-desktop/pull/18052) + - Fixed functional test setup and reviewed mind map coverage + - Started adapting tests for Qt 6.9 app + - Debugged major Waku-related issue [https://github.com/status-im/status-desktop/issues/18063](https://github.com/status-im/status-desktop/issues/18063) + - RC testing research shared with team + - Local env set up for: + - status-backend tests + - squish e2e tests + - qml tests +- `nomos:2025q2-da-testing:data-confidentiality` + - Test/data confidentiality + [PR 18 - merged](https://github.com/logos-co/nomos-e2e-tests/pull/18) +- `nomos:2025q2-da-testing:dispersal-resilience` + - chore: Nomos node with mutated DA transport + [PR 2 - in progress](https://github.com/logos-co/nomos-security-tests/pull/2) + - Changes to `validator.rs` and `mutated_transport.rs` for new DA layer logic +- `waku:2025q2-interop-testing:maintenance` + - bug: node won't start with RLN in on-chain dynamic mode 2 + [Issue 3208](https://github.com/waku-org/nwaku/issues/3208) – blocked waiting for release +- `vac:2025q2-nim-libp2p-testing:gossipsub-extended-part2` + - [test(gossipsub): message cache](https://github.com/vacp2p/nim-libp2p/pull/1431) - merged + - [test: checkUntilTimeout refactor](https://github.com/vacp2p/nim-libp2p/pull/1437) - merged + - [fix(GossipSub): save sent iHave in first element](https://github.com/vacp2p/nim-libp2p/pull/1405) - merged + - [test(gossipsub): paremeters](https://github.com/vacp2p/nim-libp2p/pull/1442) - merged +- `waku:2025q2-status-go-functional-testing:group-chats-tests` + - Maintenance and onboarding support +- `admin/misc` + - Catch up with teams and planning + - Sync calls with team and project stakeholders + - OOO: 4.5 CC days + +### vac:dst: +- `admin/misc` + - Create lookahead document: [notes.status link](https://notes.status.im/LNug-k1QRJ-L4u8gZzlMCg) + - Q3 commitments draft: [Github PR](https://github.com/vacp2p/roadmap/pull/175) + - gossipsub analysis task: [Github PR](https://github.com/vacp2p/roadmap/pull/176) +- `vac:dst:ift:2025q2-dst-tooling:analysis-refactor` + - Finished main part of the refactor: [Github PR](https://github.com/vacp2p/10ksim/pull/66) +- `vac:dst:vac:2025q2-libp2p-evaluation:mix-gossipsub` + - Issue compiling new branches, versioning. + - [Github Issue](https://github.com/nim-lang/nimble/issues/1403) on nimble by p2p + - [Github PR](https://github.com/vacp2p/dst-gossipsub-test-node/pull/9/files/ccf8120f3acea5146782f9eeb219d066efa5d050..32f6c4cfd1cba566af326f59f4db44e2d34253ae) with fixes by p2p +- `vac:dst:ift:2025q2-dst-tooling:adapt-experiments` + - [Draft Github PR #70](https://github.com/vacp2p/10ksim/pull/70) + +### vac:sc: +- `status:2025q2-sn-native-bridge-yield-bearing-module:research-design` + - first implementation of L1ETHBridge + - organized the issues for L1 + - opened PR with the first part of the L1ETHBridge https://github.com/vacp2p/linea-monorepo/pull/3 + - finished organizing L2 tasks + - created second PR to add YieldRollup inheriting from LineaRollup and adding all the checks for the L1/L2 bridges https://github.com/vacp2p/linea-monorepo/pull/4 + - PR adding the L2ETHBridge contract https://github.com/vacp2p/linea-monorepo/pull/5 + - working on a new contract L2YieldMessageService that inherits from L2MessageService and validate messages between l1/l2 ETH bridges +- `status:2025q2-karma-rln:implementation` + - Finalize & Merge 221/220 +- `admin/misc` + - Review new spec doc + - Update commitments and add new ones for Q3 + - https://github.com/vacp2p/roadmap/pull/177 +- `status:2025q2-karma-rln:slash-karma` + - Landed slashing feature + - Additional formal verification rules will be added in follow-up PRs + - https://github.com/vacp2p/staking-reward-streamer/pull/215 +- `status:2025q2-karma-rln:karma-tiers` + - Started implementing karma tiers contract + +### vac:acz: +- `ift:2025q2-libp2p-mix-testnet:update-rfc` + - Finalized Section 7; Working on Section 8 out of 10, [PR](https://github.com/vacp2p/rfc-index/pull/158) +- `ift:2025q2-libp2p-mix-testnet:nomos-comparison` + - Continued reviewing the Blend Protocol spec; Updated Blend protocol overview on [Notion Doc](https://www.notion.so/WiP-Blend-Protocol-Mix-1ff8f96fb65c802589c5f5e26673e69f). +- `nes:2025q2-nescience-consulting:light-users` + - Began work on [light user analysis](https://www.notion.so/nes-2025q2-nescience-consulting-light-users-2068f96fb65c802db086d6981a50e71f) for NSSA. + - Discovered an [inflation exploit](https://www.notion.so/Inflation-exploit-and-mitigation-20a8f96fb65c80fdbc77ff02b681f70f) in UTXO design/usage. +- `acz:nomos:2025q2-nomos-consulting:zk-consulting-nomos-2` + - Began review of [relative stake document](https://www.notion.so/nomos-tech/Preliminary-Research-Impact-of-the-Service-Declaration-Protocol-on-the-statistical-inference-of-rel-206261aa09df807bad8afccf8474c6c9#209261aa09df803d9e07f14c76435c45). +- `ift:2025q2-ift-zk-calls:ift-zk-call-3` + - Led [zk call](https://www.notion.so/Past-Meeting-Notes-1198f96fb65c80e6a51afa9a507aa64e?source=copy_link#2098f96fb65c801c8fa5e892e91d1296) and post corresponding forum post. +- `2025q2-libp2p-mix-testnet:solve-discrepancy` + - Merged structured, feature-flagged logging system [PR 25](https://github.com/vacp2p/mix/pull/25) + - Significant issues with dependency and docker build [issues](https://github.com/nim-lang/nimble/issues/1403) + - Had detailed syncs with Ben to align on tasks; clarified next steps. + - Reviewed and commented on [Issue #24](https://github.com/vacp2p/mix/issues/24). + - [PR #1420](https://github.com/vacp2p/nim-libp2p/pull/1420) + - Incrementally reintroduced changes to isolate and resolve prior GossipSub test and CI failures. + - Made PR stable and ready for review. + - Addressed all initial review comments. + - Working on tests for custom connection logic. + - Encountering time out error with `DummyConnection` [WiP]. + - Worked with DST on benchmarking setup; faced dependency issues. +- `ift:2025q2-zerokit:perfomance-updates-blogpost` + - Received input: [Issue 314](https://github.com/vacp2p/zerokit/issues/314) +- `ift:2025q2-rln-status-l2:rpc-node-modification` + - Add test cases for the current modifications to the RPC node [(PR)](https://github.com/vacp2p/status-linea-besu/pull/1) + - Continue setting up the connection to Linea mainnet on the test machine +- `ift:2025q2-zerokit:release` + - Published new zerokit [release](https://github.com/vacp2p/zerokit/releases/tag/v0.8.0). It includes new releases for zerokit-utils and zerokit-wasm +- `ift:2025q2-de-mls-tesnet:consensus-rfc` + - Pushed few minor formatting changes into [consensus rfc](https://github.com/vacp2p/rfc-index/pull/142) +- `ift:2025q2-de-mls-tesnet:blogpost-de-mls-over-waku` + - Pushed few minor changes into [PR](https://github.com/vacp2p/vac.dev/pull/159) + - Update the [PR](https://github.com/vacp2p/vac.dev/pull/159) by changing admin words to steward and it is on review. +- `ift:2025q2-de-mls-tesnet:commit-and-proposal` + - Worked on splitting commit message to proposal and commit message [branch](https://github.com/vacp2p/de-mls/tree/feat_extract_proposal) +- `ift:2025q2-zerokit:zerokit-maintaining` + - [use all cleanup](https://github.com/vacp2p/zerokit/pull/317) + - [recover secret id error](https://github.com/vacp2p/zerokit/pull/316) + - Review [Zerokit 0.8 release PR](https://github.com/vacp2p/zerokit/pull/315) + - Reviewed [PR#317](https://github.com/vacp2p/zerokit/pull/317) and [PR#316](https://github.com/vacp2p/zerokit/pull/316) with some improvements +- `ift:2025q2-rln-status-l2:prover-service` + - [Proof generation end to end](https://github.com/vacp2p/status-rln-prover/pull/3) + - [Karma SC integration](https://github.com/vacp2p/status-rln-prover/pull/4) + - [Karma RLN SC integration](https://github.com/vacp2p/status-rln-prover/pull/5) + - [Zerokit v0.8.0 integration](https://github.com/vacp2p/status-rln-prover/pull/6) +- `admin/misc` + - 1 cc was ooo for 3 days (bank holiday) + - 1 cc was ooo for 2 days (family care) + +### vac:nim: +- `ift:2025q1-nimble` + - vNext WIP #1402 + - Allow for installing global url packages + - Fixes an issue where `.babel` packages wasnt picking their requires correctly + - Install root package in the nimble directory when in global (There is an issue with nimble itself) + - Partial support for uninstall in vnext (to be complete, we need to take into account develop) + - Progress + - Support for `requires` flags. Support for custom actions (aka test) + - Fixes some tests + - Dont log the action if not in vnext (it makes some fragile tests to fail) + - Handles namedBins for the root package. Fixes an issue with `install` + - mark as used + - removes unnecessary echo + - vnext lock support + - [WIP] fixes #1403 "Error on nimble install: Cannot satisfy the dependency + - Review PRs + +### vac:rfc: +- `admin/misc` + - Finished draft on Status Network Staking RFC, waiting for feedback - https://github.com/vacp2p/rfc-index/pull/161 + - ZK Call support: https://youtu.be/_VOkyVOSsqA?si=W41V48r6w3jm8bHU +- `vac:rfc:waku:2025q2-rfc-iteration:waku2-enr` + - Continued update for WAKU2-ENR +- `vac:rfc:nescience:2025q2-rfc-iteration:utxo-specification` + - Nescience UTXO spec draft PR: https://github.com/vacp2p/rfc-index/pull/164 + +### vac:sec: +- `ift:2025q2-signatory-registry-implementation:signatory-inventory-revalidation` + - EOA included +- `ift:2025q2-signatory-registry-implementation:signatory-vault-deployment` + - Started the deployment of a secure vault to store the master signatory db +- `ift:2025q2-signatory-registry-implementation:signatory-data-verification` + - Continued the collection of signatory information +- `ift:2025q2-audit-plan-refinement:smart-contract-testing` + - Designed negative test cases targeting Vault withdrawal and access control logic. + - Collaborated with the Codex engineering team to review recent Vault optimizations for hidden risks. + - Automated invariant checks for Vault contract behaviors under simulated high-load conditions. +- `ift:2025q2-cicd-security-review:gha-hardening` + - Worked with remediation plans for unresolved CodeQL issues across top repositories. + - Audited dependencies flagged by Dependabot for transitive risk and perform validations. +- `ift:2025q2-vulma-and-ir:remediation-tracking` + - Performed a security audit of the Status web architectural changes outlined in status-web [(issue#692)](https://github.com/status-im/status-web/issues/692). +- `ift:2025q2-security-automation: POC for app catalogue update from Expensify` + - Fixed list of fields for App Catalogue, considering incoming data from Expensify +- `ift:2025q2-iam-operations:remove-unnecessary-users` + - Defined a security role for Google Admin to be able to revalidate users and groups + - Continued investigation of CC removal from Iplicit and Expensify + - Removed users from Github, Discord and Notion + +### vac:nes: +