Logos Collective Weekly Summary

Cryptarchia

• Uncle references RFC revised: reference window retuned to W = 12 and body_root flattened over the serialized uncle list (in-review) — logos-lips #385
• Compressed Block Proposal LIP revised: transaction reference prefix moved to 16 bytes after identifying birthday self-collision as the governing attack, collision-handling machinery removed (in-review) — logos-lips #389
• All note-consuming operations now reject empty inputs: spec logos-lips #399, node #3298

Total Stake Inference

• Uncle-reference verification depth bounded via a parent-anchored window (W = 12, with 11.5 ruled out), adversary coalition sizing fixed, and four simulator defects repaired (in-review) — research #4

EmPoWering

• Bedrock RFC enabling the basic EmPoWering machinery opened (draft): Proof of Work parameters calibrated (claim target, distribution rate, Blend admission threshold), TGE supply sized, token denomination settled, reward pool funded from fee inflow — logos-lips #400
• Tokenomics simulations and report: sweep programme and validation figures, results re-derived at lepton granularity, threshold calibrated on measured Raspberry Pi 5 hardware (in-review) — research #5
• Stochastic model of the epoch reward pool derived (binomial blocks per epoch, log-normal fee revenue, Poisson claims); mean recovers the deterministic equation, variance settles to a lower equilibrium value — doc

Post-Quantum

• Post-Quantum primitive benchmark moved to the research repo with sender/receiver asymmetry under load (in-review) — research #3; benchmark document reworked with stress-test results across four platforms; new dashboard completed
• Post-Quantum Migration Strategy for the Logos stack drafted (WIP) — doc

Anonymous Communications

• Mix-net configuration recommended against stake inference and Bayesian inference attacks, with guarantees extended from one epoch to many epochs and across network sizes — doc
• Random regular graph mix-net Bayesian attribution attack implemented across connectivity, corruption, and path-length parameters, compared with the stratified mix-net, and run inside a stake-weighted simulation — doc

Cross-Zone Sequencing

• Costly Abort Mechanism demo hardened: transaction binding, participant-owned key registration, signature validation, timeout handling, and fee-proof verification; optimistic dispute flow refined so the normal path needs no routine confirmation — code; RFC being restructured into a single-path developer-facing specification (WIP) — doc

Security Audit

• Compressed merkle-tree recovery bounded — #3247

Blend

• Proof of Quota verification re-introduced before relaying messages; peers sending invalid proofs are marked spammy and banned — #3292
• Epoch-transition bug fixed: unreleased block proposals are forwarded to old-epoch peers instead of being carried into the new epoch with a stale Proof of Quota — #3304
• Proof of Quota circuit bumped to v0.5.6; Proof of Work secret key and block hash replaced with a pow_nonce and domain-separation tag — logos-blockchain-circuits #54, #3305
• Public header verification benchmarks merged — #3278
• Proof of Work proof generator (in-review) — #3310; transaction density tracked for epoch-bound Blend difficulty updates (in-review) — #3317

Node

• Uncle references merged across the stack: uncle headers carried and committed by body_root — #3281, reference window in config #3282, uncle selection when proposing #3283, uncle verification when applying blocks #3284, uncles counted in Total Stake Inference #3285; header validation reused for uncle validation #3314
• Gas constants redesigned for the SignedOp flow merged — #3273; op codes moved onto the operations themselves (in-review) — #3308
• Priority fee changed to a percentage — #3311
• Leadership log spam reduced — #3253
• HTTP endpoint returning the running node's binary version, also shown per bootstrap node on /web (in-review) — #3296

Testing

• Testing Framework: genesis time made cluster-scoped and configurable — #3312; managed Kubernetes node control (in-review) — logos-blockchain-testing #62; core/local test coverage and CI workflow (in-review) — logos-blockchain-testing #63
• Block-proposal tracing build for deterministic simulation runs, capturing proposal time, Blend exit, and libp2p receipt of the same block — image

Zone SDK

• Deposit events extended with public-key information for channel wallet tracking — #3299; refund of transactions on timeout prototyped (draft) — #3289
• λSQL local replication flow started (in-review) — #3322

Logos Core

• Node 0.2.2 released — release, fixing the wallet handing out a double note when funding during the non-finalized window — #3287; blockchain module 0.2.2 released — logos-modules-release #44

Sequencer

• Sequencer self-join merged, with genesis actions and channel creation from config plus genesis block so channels can start with multiple accredited keys — #653
• Sequencer libp2p gossip module merged — #662
• Sequencer join/exit queues, with config operations valid only once the triggering LEZ block is finalized (in-review) — #725; slashing basic plumbing (draft) — #737; fault taxonomy started (WIP) — doc
• Actor architecture phase 1 merged: RpcServer and Executor actors — #691; phase 2 Storage actor (draft) — #736
• Wallet FFI transaction status polling merged — #696; exposed in the LEZ module — logos-execution-zone-module #50; multi-sequencer support in the wallet CLI (in-review) — #703, FFI (in-review) — #715, and module (in-review) — logos-execution-zone-module #51
• Wallet and wallet FFI defects triaged into six issues: #724, #727, #728, #729, #730, logos-execution-zone-module #52

Fees

• Fee subsystem design started: Vault::Claim decided fee-exempt with zero-amount claims rejected; protocol-level reference prototype (draft) — #706

Cross-Zone

• Generalization Phase 1: outbox slots made write-once log entries keyed by emitter — #697, outbox pinned in emitters and bridge_lock mint destination — #699, deliveries authorized at the target instead of the inbox — #700; target peer sources updatable by a named authority (in-review) — #712; pending dispatches stored as per-message entries (in-review) — #718
• Phase 2 started: one peer-block acceptance policy for watcher and verifier (in-review) — #721; verification halts made durable, diagnosable, and recoverable (in-review) — #731

Accounts

• Environment unification functionally complete: private authorization key merged — #669; balance spends always authorized (in-review) — #726, protocol-wide Clear instruction (in-review) — #732, permissionless claims (in-review) — #734
• Events implemented end to end (in-review): events field and core semantics #705, EVM-style protocol-level selectors #707, indexer re-derivation from seen blocks #709, RPC #713 and FFI #714, deposit/withdraw events #716
• Programs as accounts started, toward programs deployable through public transactions (in-review): programs shape #720, program_owner as AccountId #722, program storage folded into public_state #723, ProgramId references removed from chaincalls #735, Deploy program transaction #733; optimizations to remove practical blockers (draft) #738, #739, #740
• Program updates implementation started (draft) — #710, #711
• Consistent domain separators introduced across the key protocol (in-review) — #717

Testing

• Multi-sequencer support for integration tests merged — #643
• Cucumber environment on top of the Testing Framework with initial ported integration tests (in-review) — #741

Nimbos — Logos Blockchain Nim Client

• Block rewards merged — nimbos #155
• Block body validation merged into unstable — nimbos #142
• Mempool and block proposal finalized (in-review) — nimbos #143; Bedrock specification tags upgraded (in-review) — nimbos #165
• nim-bincode made fully compatible with the nim-serialization API (Bincode, BincodeReader, BincodeWriter, deriveBincodeCustom) — code; serialization migrated across the codebase toward libp2p GossipSub (WIP) — branch

Validate service discovery protocol correctness in large-scale simulations

• LIP PR 377 defining identical-ad and one-ad-per-service semantics merged; nim-libp2p PR 2907 refactoring the probe merged

• Run more test scenarios

Research more advanced cover traffic generation techniques

• Added metrics to the Mix-RLN plugin for debugging; reproduced fleet's proof-gen-delay issues via local simulation

• Analyze cover traffic strategies

Implement local reputation mechanism and research advanced DoS protection

• Evaluated two additional DoS protection architectures (sender proof rerandomized, hybrid), noting drawbacks of each
• Analysed the deanonymization/unlinkability/churn trilemma for local trust reputation, including mix-RLN #14 acceptance window sizing

• Documenting both DoS protection architectures

Integrating de-MLS into libchat

• Implemented new id representation in de-mls — de-mls PR 145

• Revisit the peer scoring mechanism implementation so the application decides when to call ECP (Emergency Criteria Proposal)

Specifying oracle mechanism (CLOSED)

• Closed deliverable — LIP PR 388 for the proposer selection mechanism merged, along with finalization of the Logos Oracle Zone specification (optimistic and lightweight for LEZ — signature verification is outsourced to the Logos Blockchain)
• Small LIP PR 390 on the dispute mechanism in review as low priority

Implementing Oracle Zone

• Implemented oracle register LEZ contract

• Integrating the register contract to Oracle Zone

Mix Transport — full-focus week

• Removed obsolete Mix fragmentation and sequence-number logic, including metadata that could unnecessarily fingerprint senders
• Made exit-equals-destination support directly available without the experimental compile-time flag and restricted the new public createSurb API to that routing mode
• Defined and validated the Protobuf wire format for transport sessions, streams, data, acknowledgements, SURB refill, rejection, closure, and reset control frames
• Implemented a transport-owned reply credential store with redundancy-group consumption, reply recovery, expiry, bounded retired-identifier tracking, and protection against duplicate late replies
• Added long-lived transport sessions with stable pseudonymous session IDs, destination-based reuse on the initiator, and session-owned received SURB groups on the recipient
• Implemented a complete anonymous Connect/ConnectAck round trip over a live multi-node Mix network, including timeout handling and session reuse
• Added virtual stream registration with disjoint initiator/recipient stream-ID spaces and a complete OpenStream round trip using StreamAck or a bounded diagnostic StreamReject
• Turned virtual transport streams into libp2p-compatible buffered connections, exposing the real destination to the initiator and the stable session pseudonym to the recipient

• Recipient-side dispatch to mounted libp2p protocol handlers, including incoming-stream admission limits and independently tracked handler tasks with cancellation-safe teardown
• Data exchange and SURB management
• Complete the whole thing end-to-end (draft, but working and unit tested)

Mix path selection research and spec

• Completed the research post on mix path selection and its evaluation for the anonymous download over a transport layer
• Worked on the draft spec for mix path selection to be used for both anonymous download and hidden services

• Work and experiment with hidden services time-based path selection for hidden services
• Complete the draft mix path selection spec

NAT traversal fixes and tests

• Fixed a memory issue in nim-libplum which was causing node crashes — nim-libplum #20
• Added a Mix + NAT containerized test and refactored test scripts — logos-storage-nim #1507
• Restored/updated port mapping tests — logos-storage-nim #1513