chore: weekly 2025-11-24 (#340)

This commit is contained in:
fbarbu15
2025-11-25 20:27:19 +02:00
committed by GitHub
parent fa33c3b2dd
commit 74cb678068

View File

@@ -0,0 +1,274 @@
---
title: 2025-11-24 Vac weekly
tags:
- vac-updates
date: 2025-11-24
lastmod: 2025-11-24
draft: false
---
## Vac 2025/11/24
### highlights
- QA: Status-go wallet gated community test is close to completion with multiple related issues triaged.
- QA: Nim-libp2p QA reduced QUIC flakiness and refreshed the QUIC test plan scope.
- QA: Desktop QA maintained release coverage and added app load-time measurements.
- QA: Mobile QA progressed desktop test porting and continued mobile release checks.
- QA: Waku interop admin tests were fixed upstream.
- DST: LSQUIC regression analysis compared five commits, covering leaks, latency, and connection behaviour.
- DST: TWN RLN scaling uncovered gas and rate-limit mismatches during Anvil testing.
- DST: Status chat benchmarks resolved bootstrap blocking but still struggle to discover filter-enabled relays.
- DST: Deployment refactor PRs for 10ksim merged and spawned a follow-up feature list.
- DST: Browser bootstrapping tests updated Waku deps and Kubernetes config while tackling random disconnects.
- DST: nwaku v0.37 regression tests progressed alongside merged Rust test node support.
- Nim: Nimble download pipeline now uses releases.json and thread-safe async helpers for cloning and fetching.
- Nim: Parallel Nimble builds advanced with CI race condition fixes.
- Nim: Confutils added results.Opt support, improved help output, and option flattening.
- Nim: New `nim-intops` library delivers overflow/carry/saturating arithmetic with tests and README.
- P2P: LSQUIC leak fix and send-loop stabilizations landed alongside muxer handling tweaks.
- P2P: QUIC Nimbus integration kicked off.
- P2P: Kad DHT gained client mode, bootstrap refinements, and interop coverage.
- P2P: Maintainer tooling added RNG singleton tests while C bindings work resumes.
- P2P: Travel and illness reduced capacity for part of the team.
- TKE: Devconnect participation wrapped; follow-ups with ecodev and leadership pending.
- TKE: Iterating on finance feedback for price prediction modelling.
- TKE: Syncing Karma incentives and Logos token sale plans post-event.
- TKE: Exploring attestations as a potential Logos product and optimal control research.
- SC: Team resumed after Devconnect with RISC0 upskilling focus.
- SC: Cyfrin audit partnership finalized to support Status L2.
- SC: Status L2 contract maintenance planning underway with auditors.
- ACZ: DE-MLS hashgraph extraction continues toward a standalone library and API.
- ACZ: Zerokit wasm FFI rework under active review, with memory and example fixes merged.
- ACZ: RLN shared database PR received cross-review and follow-up discussions.
- ACZ: Discovery registrar/spec work added thread safety, signature verification, and integration tests.
- ACZ: NSSA consulting supported AMM testing and NFT approach reviews.
- ACZ: RLN Status L2 maintenance tracked alloy issue follow-ups.
- RFC: Community history RFC drafted and opened for review.
- RFC: Block exchange RFC merged with a follow-up improvement PR in flight.
- RFC: Blend protocol draft prepared for ongoing review.
- RFC: Slot builder RFC queued for completeness updates.
- RFC: opChan RFC initial drafting underway.
- Security: Web3 security essentials expanded with new checklists.
- Security: Secure signing environment tested across Keystone USB passthrough and QR signing.
- Security: Endpoint security evaluated Falcon and Bitdefender with malware simulation planned.
- Security: Status Desktop design reviews deepened around message signing, IPC, and dependency hygiene.
- Security: Incident response advanced correlation for Status-352 and rotated secrets verification.
- Security: Admin automation extended GitHub/Notion audits and finance sync logic.
- Web: SN Hub MVP release PR opened with TVL overview requests underway.
- Web: Cloudinary cost reductions delivered via asset optimizations and firewall controls.
- Web: Logos site enhancements shipped role-aware email forms and spaces calendar PoC with tracking.
- Web: Status wallet extension wired to market and ETH RPC proxies, updating privacy policy accordingly.
- Web: Waku dependency updates progressed across status-web and community-dapp.
- Web: Maintenance covered Cloudinary contract updates and admin tooling cleanup.
- Infra: Team was at Devconnect; limited updates shared.
- BI: Entire team onsite at Devconnect; started Superset analytics dashboard and Discord data extraction.
- Nescience: Drafted a self-contained voting program and merged wallet UX fixes while AMM testing continues.
### vac:qa:
- [`vac:qa:waku:2025q4-waku-testing:maintenance`](/qa/waku/2025q4-waku-testing#maintenance)
- Fixed admin tests via [PR 140](https://github.com/waku-org/waku-interop-tests/pull/140).
- `status:2025q4-status-go-functional-testing:wallet`
- Advanced token-gated communities test and triaged admin role, stopMessenger, and fake token address issues.
- [`vac:2025q4-nim-libp2p-testing:flaky-tests`](/qa/vac/2025q4-nim-libp2p-testing#flaky-test-fixes)
- Stabilised autotls, mix, transport certificate generation, and rng singleton tests across PRs 1905, 1896, 1894.
- [`vac:2025q4-nim-libp2p-testing:test-plans`](/qa/vac/2025q4-nim-libp2p-testing#test-plans-for-new-features)
- Updated the QUIC plan to focus on nim-libp2p coverage.
- [`vac:qa:status:2025q4-status-qa-desktop:maintenance`](/qa/status/2025q4-status-qa-desktop#maintenance)
- Restored custom derivation path handling, improved Qt minimize usage, and investigated CI failures.
- [`vac:qa:status:2025q4-status-qa-desktop:release-testing`](/qa/status/2025q4-status-qa-desktop#release-testing)
- Monitored Korean translation breakage and quit-app regression.
- [`vac:qa:status:2025q4-status-qa-desktop:app-load-time`](/qa/status/2025q4-status-qa-desktop#measure-app-load-time)
- Added swap modal measurement tracking in PR 19333.
- [`vac:qa:status:2025q4-status-qa-mobile:port-tests`](/qa/status/2025q4-status-qa-mobile#port-desktop-tests)
- Continued 1x1 chat porting and added accessibility IDs.
- [`vac:qa:status:2025q4-status-qa-mobile:release-testing`](/qa/status/2025q4-status-qa-mobile#release-testing)
- Investigated Android 14 account creation failure.
### vac:dst:
- [`vac:dst:vac:2025q4-libp2p-evaluation:regression-testing`](/dst/vac/2025q4-libp2p-evaluation#regression-testing-recurring)
- Analyzed five new lsquic commits for leaks, latency, and connection/stream behaviour; coordinated with P2P and documented findings.
- [`vac:dst:waku:2025q4-waku-scaling:twn-supports-rln-tree`](/dst/waku/2025q4-waku-scaling#twn-supports-rln-onchain-tree-and-deposits-existing-memberships-only)
- Mitigated gas issues with `--disable-min-priority-fee` and identified contract ratelimit mismatch against Sepolia values.
- [`vac:dst:status:2025q4-status-evaluation:chat-protocol-benchmarks-followup`](/dst/status/2025q4-status-evaluation#chat-protocol-benchmarks-followup)
- Fixed bootstrap blocking for light nodes; remaining issue is discovering relay nodes offering filter.
- [`vac:dst:ift:2025q4-dst-tooling:complete-deployment-refactor`](/dst/ift/2025q4-dst-tooling#complete-deployment-refactor)
- Merged PRs 172 and 173 to generalize deployment classes and add regression builders; captured follow-up feature list.
- [`vac:dst:waku:2025q4-waku-scaling:optimise-browser-bootstrapping`](/dst/waku/2025q4-waku-scaling#optimise-browser-bootstrapping)
- Updated js-waku dependencies, fixed Kubernetes disconnects, and drafted PR 170 while experimenting with random disconnects.
- [`vac:dst:waku:2025q4-waku-evaluation:regression-testing`](/dst/waku/2025q4-waku-evaluation#regression-testing-recurring)
- Continued nwaku v0.37 performance comparisons and bandwidth analysis.
- [`vac:dst:ift:2025q4-dst-tooling:general-tooling`](/dst/ift/2025q4-dst-tooling#general-tooling-recurring)
- Updated nim-libp2p test node for mix protocol and expanded latency analysis scripts; ran mixed-node shadow experiments.
- [`vac:dst:vac:2025q4-libp2p-evaluation:rust-libp2p-node`](/dst/vac/2025q4-libp2p-evaluation#rust-libp2p-node)
- Merged the Rust test node PR for harness integration.
- [`vac:dst:waku:2025q4-waku-scaling:optimise-browser-bootstrapping`](/dst/waku/2025q4-waku-scaling#optimise-browser-bootstrapping)
- Identified js-waku client logging gaps blocking richer diagnostics.
### vac:nim:
- [`vac:nim:ift:2025q4-nimble:nimble-1.0.0`](/nim/ift/2025q4-nimble#nimble-100)
- Hardened package download path with async git/tarball operations and thread-safety refactors; switched binaries source to releases.json; progressed parallel builds with CI race fixes.
- [`vac:nim:ift:2025q4-nim-core-libs:command-line-parsers`](/nim/ift/2025q4-nim-core-libs#command-line-parsers)
- Added results.Opt support, multiple help output fixes, and option flattening across confutils/toml serialization PRs.
- [`vac:nim:ift:2025q4-nim-core-libs:cpu-integer-library`](/nim/ift/2025q4-nim-core-libs#create-standalone-cpu-integer-library)
- Created `nim-intops` repo with overflow/carry/saturating add/sub, widening mul, tests, and initial docs; completed onboarding material.
### vac:p2p:
- [`vac:p2p:ift:2025q4-nimlibp2p-quic:stabilization`](/p2p/ift/2025q4-nimlibp2p-quic#quic-stabilization)
- Fixed readInto leak in [PR 23](https://github.com/vacp2p/nim-lsquic/pull/23); merged send loop optimizations, muxer handling, and ManyQueue/test splits across PRs 21, 19, 1885, 13, 12, 16, 15, 17.
- `vac:p2p:ift:2025q4-nimlibp2p-quic:nimbus`
- Began QUIC integration work for Nimbus.
- [`vac:p2p:ift:2025q4-nimlibp2p-maintenance:maintenance`](/p2p/ift/2025q4-nimlibp2p-maintenance#maintenance)
- Added RNG singleton test coverage in [PR 1895](https://github.com/vacp2p/nim-libp2p/pull/1895).
- [`vac:p2p:ift:2025q4-nimlibp2p-cbindings:core`](/p2p/ift/2025q4-nimlibp2p-cbindings#core-bindings)
- Devconnect presentation and roadmap discussions set up next steps.
- [`vac:p2p:ift:2025q4-nimlibp2p-kad-dht:interop`](/p2p/ift/2025q4-nimlibp2p-kad-dht#interop)
- Added bootstrap on switch start, client mode support, and interop tests via PRs 1906, 1908, 1903, 1907, 1902.
- [`vac:p2p:ift:2025q4-nimlibp2p-kad-dht:discovery`](/p2p/ift/2025q4-nimlibp2p-kad-dht#discovery)
- Removed unused discovery interface and aligned expectations with Waku.
- `admin/misc`
- Devconnect attendance and roadmap presentation.
### vac:tke:
- `admin`
- Devconnect attendance and 5 CC days off.
### vac:sc:
- `admin/misc`
- Devconnect attendance and audit partner setup.
- [`vac:sc:logos:2025q4-risc0-upskilling`](/sc/logos/2025q4-risc0-upskilling#risc0-proof-of-concepts)
- RISC0 learning and experimentation.
### vac:acz:
- [`vac:acz:ift:2025q4-de-mls-tesnet:de-mls-maintaining`](/acz/ift/2025q4-de-mls-testnet#de-mls-maintenance)
- Continued separating hashgraph consensus into its own library.
- [`vac:acz:ift:2025q4-zerokit:wasm-ffi-rework`](/acz/ift/2025q4-zerokit#wasm-ffi-rework)
- Reviewed PR 352, merged rln-wasm-utils, fixed Node.js example, and addressed review comments.
- [`vac:acz:ift:2025q4-zerokit:public-api-rework`](/acz/ift/2025q4-zerokit#public-api-rework)
- Reworked RLN structures for FFI/wasm, unified proof types, and updated serialization utilities.
- [`vac:acz:ift:2025q4-zerokit:zerokit-maintaining`](/acz/ift/2025q4-zerokit#zerokit-maintaining)
- Merged memory leak fixes in PR 354 and reviewed wasm FFI changes.
- [`vac:acz:ift:2025q4-rln-status-l2:shared-db`](/acz/ift/2025q4-rln-status-l2#multi-prover-with-shared-database)
- Reviewed private repo changes and coordinated follow-ups for the monorepo PR.
- [`vac:acz:ift:2025q4-rln-status-l2:maintaining`](/acz/ift/2025q4-rln-status-l2#prover-module-maintaining)
- Followed up on Alloy issue 2744.
- [`vac:acz:ift:2025q4-discovery:draft-rfc`](/acz/ift/2025q4-discovery#draft-rfc)
- Reviewed discovery PoC PR 1 and RFC PR 212.
- [`vac:acz:ift:2025q4-discovery:registrar-module`](/acz/ift/2025q4-discovery#registrar-module)
- Added synchronization and signature verification in the PoC.
- [`vac:acz:ift:2025q4-discovery:logos-disc-specs`](/acz/ift/2025q4-discovery#logos-discovery-capability-spec)
- Addressed review comments on the Logos discovery specs.
- [`vac:acz:ift:2025q4-discovery:integration-validation`](/acz/ift/2025q4-discovery#integration-and-validation)
- Added integration tests and configurable parameters for large-scale runs.
- [`vac:acz:nes:2025q4-nescience-consulting:simple-amm`](/acz/nes/2025q4-nescience-consulting.md)
- Progressed PR 152 with AMM state-level tests.
- [`vac:acz:nes:2025q4-nescience-consulting:nfts`](/acz/nes/2025q4-nescience-consulting.md)
- Reviewed Solana-inspired NFT approach for NSSAv0.2.
- [`vac:acz:nes:2025q4-nescience-consulting:light-users`](/acz/nes/2025q4-nescience-consulting.md)
- Reviewed light user design doc.
- `admin/misc`
- OOO: 4 CC days.
### vac:rfc:
- [`vac:rfc:codex:2025q4-rfc-iteration:community-history`](/rfc/codex/2025q4-rfc-iteration#community-history)
- Opened first draft in [PR 214](https://github.com/vacp2p/rfc-index/pull/214).
- [`vac:rfc:ift:2025q4-rfc-index-maintenance:maintenance`](/rfc/ift/2025q4-rfc-index-maintenance#maintenance)
- Responded to open reviews.
- [`vac:rfc:waku:2025q4-rfc-iteration:opchan`](/rfc/waku/2025q4-rfc-iteration#opchan)
- Started drafting.
- [`vac:rfc:codex:2025q4-rfc-iteration:block-exchange`](/rfc/codex/2025q4-rfc-iteration#block-exchange)
- Merged initial version ([PR 211](https://github.com/vacp2p/rfc-index/pull/211)) and opened improvements in [PR 215](https://github.com/vacp2p/rfc-index/pull/215).
- [`vac:rfc:nomos:2025q4-rfc-iteration:blend-protocol`](/rfc/nomos/2025q4-rfc-iteration#blend-protocol)
- Drafted the blend protocol in [PR 213](https://github.com/vacp2p/rfc-index/pull/213).
- `admin/misc`
- Q1 2026 commitments drafting paused while focusing on RFCs.
### vac:sec:
- `vac:sec:ift:2025q4-awareness-program:web3-security-essentials`
- Added new defi, development, and job search checklists.
- `vac:sec:ift:2025q4-secure-signing-env-deployment:build-a-secure-vm-for signing`
- Tested Keystone USB passthrough and QR signing flows.
- `vac:sec:ift:2025q4-secure-signing-environment:endpoint-security-evaluation`
- Completed Falcon trial and deployed Bitdefender on test devices.
- `vac:sec:ift:2025q4-cicd-security-review:status-design-reviews`
- Reviewed Desktop/Wallet signing flows, SBOM diffs, and access lists across security tools.
- `vac:sec:ift:2025q4-vulma-and-ir:incidents`
- Investigated Status-352 via Jenkins config checks and built credential misuse correlation queries.
- `vac:sec:ift:2025q4-vulma-and-ir:remediation-tracking`
- Revalidated CodeQL scans and patched npm/network CVEs with retesting.
- `vac:sec:ift:2025q4-finance-automation-enhancements`
- Enhanced bank data synchronization.
- `vac:sec:ift:2025q4-iam-operations:admin-audit`
- Tested GitHub admin/member checks and Notion webhook-driven admin actions.
- `vac:sec:ift:2025q4-Create hierarchy boards in Miro`
- Tested consolidated frame logic and new board generation.
- `vac:sec:ift:2025q4-Migrate Sec workflows to n8n Sec Cloud`
- Fixed Notion credential and Google API issues.
- `admin/misc`
- Drafted 2026Q1 commitments and tasks.
### vac:web:
- [`vac:web:status:2025q4-sn-hub`](/web/status/2025q4-sn-hub#discovery)
- Prepared MVP release (PR 827) and requested TVL overview integration.
- [`vac:web:ift:2025q4-maintenance:maintenance`](/web/ift/2025q4-maintenance#maintenance)
- Adjusted Cloudinary contract plan; reviewed staking page skeleton; updated Waku dependencies (status-web PR 847, community-dapp PR 118); proposed Logos role collection (PR 10) and removed Status admin tool (PR 859); added search to SpacesTable (PR 24); investigated status.app `/c[slug]` Waku data fetch issue; reviewed Cloudinary usage reduction PR 858.
- `admin/misc`
- OOO: 1 CC day; led reviews.
- [`vac:web:status:2025q4-status-wallet-extension:price-proxy`](/web/status/2025q4-status-wallet-extension#price-proxy)
- Unblocked tasks via PR 860 and progressed price proxy implementation replacing Cryptocompare/Infura with market and ETH RPC proxies; updated privacy policy PR 21.
- `vac:web:status:2025q4-status-website:maintenance`
- Reduced Cloudinary usage by optimizing assets, removing unused media, and adding firewall rules; analyzed traffic/bandwidth.
- [`vac:web:ift:2025q4-logos-website:layout`](/web/ift/2025q4-logos-website#layout)
- Added role selection and Umami tracking for email forms; delivered spaces calendar PoC and responsive updates.
- [`vac:web:ift:2025q4-logos-website:components`](/web/ift/2025q4-logos-website#components)
- Added button subtext field via PR 11.
### vac:infra:
- `admin/misc`
- Devconnect attendance.
### vac:bi:
- `admin/misc`
- Devconnect participation.
- [`vac:bi:ift:2025q4-comms-discord-stats`](/bi/ift/2025q4-comms-discord-stats#channel-analytics-delivery)
- Extracted Discord data for Keycard.
- `vac:bi:ift:2025q4-vac-website`
- Began website analytics dashboard in Superset.
- `vac:bi:rag:2025q4-rag-context`
- Explored Open RAG options for Logos with Corey.
### vac:nescience:
- `other`
- Planning calls, docs review, and onboarding tasks.
- `state-separation-architecture-poc:voting`
- Drafted a simplified self-contained voting program.
- `state-separation-architecture-poc:ux-wallet`
- Merged PRs 147 and 148; continued wallet improvements.
- `state-separation-architecture-poc:issues`
- Opened PR 166 for borsh derivation changes.
- `state-separation-architecture-poc:seed-recovery`
- Resolved threads on PR 149.
- `vac:nes:2025q4:state-separation-architecture-poc:privacy-tail-calls`
- Implemented privacy-preserving tail calls in PR 151.
- `vac:nes:2025q4:state-separation-architecture-poc:multi-chain-calls`
- Fixed tail-call account dropping bug in PR 161.
- `vac:nes:2025q4:state-separation-architecture-poc:pda-public-accounts`
- Planned PDA public account work.
- [`vac:acz:nes:2025q4-nescience-consulting:simple-amm`](/acz/nes/2025q4-nescience-consulting.md)
- Continued PR 152 with AMM state-level tests.
- [`vac:acz:nes:2025q4-nescience-consulting:nfts`](/acz/nes/2025q4-nescience-consulting.md)
- Investigated Solana NFT model and proposed simplified NSSA approach.
- [`vac:acz:nes:2025q4-nescience-consulting:light-users`](/acz/nes/2025q4-nescience-consulting.md)
- Reviewed light users document.