Logos Collective Weekly Summary

Week 34, 2026 (August 24, 2026)

5
Teams Reporting
300+
PRs & Updates

Key Highlights

AnonComms

Initial Rust implementation of the Poseidon2 hash function drafted for Zerokit, working toward faster hashing for RLN — zerokit PR 437.

AnonComms

Cover traffic pre-send hold specified and implemented in the libp2p mixnet — LIP PR 403 and nim-libp2p-mix PR 52.

AnonComms

Internal security audit findings analysed for the mixnet; in-flight bookkeeping fix landed and two integration architectures added to the mix DoS protection spec.

AnonComms

de-MLS integration into libchat progresses — libchat issue #199 addressed with the fix landing on the de-MLS side (de-mls PR 147).

AnonComms

Oracle Zone experiments with precompiled RISC0 methods show up to 18x fewer transaction cycles for signature verification, allowing more signatures per transaction.

Messaging

Messaging API (MessagingClient) landed in status-go — also migrates the bindings to the new nim-ffi C ABI and fixes two callback lifetime bugs — logos-delivery-go-bindings PR 120.

Messaging

Fleet stability push: partitioned messages_lookup to stop index bloat, reworked logging, and exposed a signal for archive nodes that write nothing after a silent 75+ hour outage.

Storage

Long-lived Mix transport sessions and multiplexed streams landed in the Large Data Transport Layer for Mix — ordered chunked Data transfer, SURB supply management, and hardened flow control.

Storage

Release process for Logos packages now publishes binaries to Logos storage; new storage intro page and API tutorial published.

Logos Core

Privilege moved out of the UI shell behind a per-client host-services grant; Protocol 0.5 (module teardown) and 0.6 (caller identity) shipped through all three SDKs; Windows bundles now published for Basecamp, logoscore and logosctl.

Blockchain

Node 0.2.3 released: testnet fee-funding fix and new diagnostics release, #3359, #3393

Blockchain

Proof of Work mining service merged: nodes mine and claim tickets over HTTP and FFI #3357, #3380, #3382

Blockchain

Cryptarchia with uncle references RFC merged logos-lips#385

Messaging API — General Availability

^

Reliability and scale validation with DST

RLN on Logos Blockchain

^

Fleet Stability

^

Resolve known fleet stability issues

Status: Logos Delivery Integration

^

Integrate Messaging API in status-go

Establish libp2p mixnet

^

Implement local reputation mechanism and research advanced DoS protection

  • Analysed internal security audit findings, created further tracking issues, and fixed in-flight bookkeeping
  • Added two integration architectures to the mix DoS protection spec
  • Local reputation analysis: vetting does not help against a strategic adversary — the achievable compromise is set by the path structure
  • Reviewed PR 42, PR 403 and PR 52
  • Continue local reputation work assuming a trusted set of nodes
  • Rebase the stake-weighted RLN spec
  • Implement rate differentiation

Deliver de-MLS for p2p group messaging

^

Integrating de-MLS into libchat

  • Open a PR on the libchat side with the new id representation for de-MLS
  • Work on the peer scoring architecture

Develop a decentralised oracle for LEZ

^

Implementing Oracle Zone

  • Experimented with precompiled RISC0 methods that may achieve 18x fewer transaction cycles for signature verification, allowing more signatures in a single transaction — lon_poc PR 3
  • Experimented with creating Logos Blockchain transactions on the public testnet by opening new channels for each indexer — report
  • Reviewed the RISC0 optimisation PR and the dispute mechanism spec PR
  • Completed a basic implementation of the oracle register and oracle prices contracts
  • Improve the experiments with malicious attempts
  • Live testing of the oracle node zone and indexer

Implement RLN membership allocation service

^

Full RLN module

  • Researched and implemented fixes to keystore persistence and configuration in response to an internal audit finding (the message_id allocator could rewind, disclosing the identity secret)

Maintain and expand Zerokit

^

Integrate and benchmark Poseidon2 hash function

  • Studied different publicly available Poseidon2 implementations and drafted an initial implementation of Poseidon2 — zerokit PR 437
  • Implement Poseidon2 in Circom to validate the Rust-side implementation
  • Continue reviewing other publicly available implementations for reference

Mix Transport sessions, streams and flow control

  • Implemented long-lived Mix transport sessions and independent multiplexed streams, including OpenStream, StreamAck, and StreamReject round trips
  • Connected accepted inbound streams to mounted libp2p protocol handlers, allowing applications to use the standard Connection read/write API over Mix
  • Added bidirectional chunked Data transfer with ordered delivery, fixed receive windows, bounded in-flight chunks, cumulative ACK snapshots, retransmission state, and application backpressure
  • Added recipient-side SURB supply management with a protected control reserve, serialized reply sending, and refill requests that replenish return capacity without exhausting the remaining reply inventory
  • Hardened flow control by ignoring above-window Data, simplifying ACK event signalling, and handling stream-ID and sequence-number exhaustion explicitly
  • Reworked the Protobuf wire format to use fixed-width StreamId and SequenceNumber fields with one statically calculated Data payload limit
  • Expanded boundary tests and updated the design specification and implementation walkthroughs accordingly
  • Refactoring, reviewing, and test the full data exchange flow
  • If the good-weather scenario passes basic validation, add reliability features: timeouts, retransmissions, etc.

Anonymous download path selection

  • Build on Tor's simulation work to evaluate the time-based path selection for hidden services
  • Add the resulting time-based path selection strategy to the draft spec

New docs pages

  • Logos storage has a new intro page as an effort to help newcomers get a clearer picture faster of what we do
  • Published a new API tutorial which reflects the broader improvements in Logos tooling

Release process integration

  • Updated the sketch plan to integrate deployment on different networks (logos.dev, logos.test); provide an opt-in solution to become a provider
  • Deployed a Storage node on Digital Ocean for testing the release process
  • Added Storage to the release process — logos-modules-release-action #17
  • Added urls to the index rebuild process — logos-modules-release-tool #6
  • Download the package from the Package Downloader

Storage UI

^

Fixes

logos-basecamp

One runtime per process and a UI shell with no host privilege; main_ui back to a plugin behind host-privileged facades; UI plugins get a chance to finish before their widget is destroyed; Windows bundles published; symbol-gate bugs fixed; Nix cache action and DO→Hetzner S3 migration.

logos-protocol

Protocol 0.5 (module teardown ABI) and 0.6 (caller identity) shipped; per-client token store and host-services C ABI; module-impl export list published as data for backends to check; liblogos_protocol.dll became a usable single provider.

logos-cpp-sdk

Split by capability with provider-header path retired and cdylib decode hardened; aboutToUnload teardown hook; logos_module_set_call_caller; ABI conformance test; every provider rejection folded, not just dispatch_failed; lossless Qt type mapping.

logos-qt-sdk

Split by capability with Qt-module backends retired and --backend ui dropped; teardown hook published on generated view plugins; derived identity methods on consumer wrappers; every provider rejection folded; Qt consumer keeps every type the std one keeps.

logos-rust-sdk

logos_module_grant_host_services (the missing 11th export) emitted; teardown exports and logos_module_set_call_caller gated on 0.6; ABI conformance test; derived identity methods; every provider rejection folded.

logos-logoscore-cli

macOS signing, notarization and release pipeline plus Windows bundles for logoscore and logosctl; symbol-gate asserting one runtime per process; METHOD_FAILED reported from the error channel; local .lgx install by path; empty signer pin no longer selects unsigned releases.

logos-module-builder

Takes view templates from logos-view-module; builds ui_qml glue with logos-view-generator; platform-keyed overlays in metadata.json; ABI exports read off the built plugin; relocked onto caller-identity wave.

logos-liblogos

Imports the shared runtime instead of providing it; lock cycle cut from 3,472 → 211 nodes; relocked onto the grant path, teardown wait, universal capability module and deduplicated qt-sdk.

logos-plugin-qt

New home for the Qt host runtime and cdylib-glue generator; logos_qt_host_shared with layering assertion; teardown helper shared and glue guarded on protocol 0.5; caller pulled off the host image and pushed across the C ABI.

logos-package-manager

macOS signing, notarization and release pipeline; Windows leg as a doc-test leg; architecture-half aliased so a bundler-built .lgx installs on Intel Mac; object-form dependency edge no longer lost; unknown signing keys now surfaced.

logos-package-downloader

macOS signing, notarization and release pipeline; lgpd cross-built and proven to start on real Windows; empty signer pin no longer selects UNSIGNED releases.

logos-package-manager-ui

Restores aboutToUnload() on the generated UI plugin; generates its own view-plugin glue and drops the module-builder pin; Windows target published; module-builder cycle cut taken in two passes.

logos-package-downloader-module

Bumped onto the module-builder that restores the view hook; module-builder cycle cut taken.

logos-package-manager-module

Bumped onto the module-builder that restores the view hook; module-builder cycle cut taken.

logos-standalone-app

Links the shared Qt host and gates the invariant; lock cycle cut from 3,282 → 252 nodes; symbol gate now runs on Windows; teardown grace period picked up; hot reloads fixed.

logos-capability-module

Ported to a universal module over a host-granted trust root; lock cycle cut from 3,391 → 130 nodes.

logos-module-loader-qt

Delivers the host-services grant to privileged modules instead of carrying JSON across argv; waits for the module to finish before tearing it down.

#9 #8

logos-view-module (NEW)

New repo owning the view-plugin templates, the check that proves they work, and the UI plugin emitter with its paired header.

#3 #2

logos-view-module-runtime

ui-host gives a view its chance to finish before teardown; module-side templates now live in logos-view-module; hot reloads fixed.

logos-test-modules

Fixture for the module teardown contract; call sites updated for the widened Qt consumer surface; 256x256 icons for ui_qml packaging; last Qt fixtures migrated to interface universal; test_ipc_module retired.

logos-tutorial

Docs updated for the widened Qt consumer surface; 256x256 placeholder icon per the LGX icon contract; shared cache action adopted; removed generator flags dropped from docs.

logos-doctest

Machine-readable results and cross-platform specs — build on one platform, run on another; a spec that marks only its build half is no longer an error.

logos-lidl

name() and version() derived from the module declaration; cross-built for Windows with archive gate.

logos-container-subprocess

Cross-built for Windows and archive gated.

#5

logos-js-sdk (NEW)

New protocol-native SDK — Qt-free lp_* consumer and provider over koffi.

#11

logos-logoscore-py

Conformance suite carries the provider's own error code, not just the envelope's.

#21

logos-module-viewer

Bumped onto the shared runtime and ported to the current API; every liblogos shared library staged, not just liblogos_core.

#8 #7

logos-design-system

Logos Notice and Logos Toast added as generic components; logosTabBar issues fixed.

logos-libp2p-module

NAT traversal configuration options exposed; nix binary cache added.

logos-storage-ui

Nix binary cache added.

#90

lez-explorer-ui

Nix binary cache added.

#20

logos-blockchain-ui

Nix binary cache added.

#60

logos-execution-zone-module

Nix binary cache added; execution-zone module exposes its persistent path through LogosModuleContext (in-review).

logos-execution-zone-wallet-ui

Onboarding reworked into create/open paths with CI tests and LogosDesignSystem components (in-review); nix binary cache added.

Bedrock — Research

^

Cryptarchia

  • Cryptarchia with uncle references RFC merged: Total Stake Inference counts only uncles referenced within the window, body_root and block_id test vectors regenerated logos-lips#385
  • Compressed Block Proposal LIP rebased onto the merged uncle-references spec: commitments redirected to body_root, rejection outcomes classified against block_id (in-review) logos-lips#389
  • Revised block proposal compression with keyed 8-byte SipHash-2-4 short transaction IDs and bounded-ambiguity reconstruction, stacked on the prefix LIP (draft) logos-lips#408; reference-prefix length priced with a benchmark-backed report (in-review) research#8
  • Mempool RFC opened (draft) logos-lips#413
  • Chain sync restricted to serving only the publicly disseminated block tree (draft) logos-lips#411
  • Blend token evaluation and active-message encoding fixed, blend digest width derived from the quota requirement (in-review) logos-lips#405; Blend delivery failure detection and reactions drafted logos-lips#412
  • SDP declarations keyed by zk_id with the declaration id dropped, provider_id uniqueness across the registry, a locked note per service, and the active set specified (in-review) logos-lips#407; per-service zk_id uniqueness made normative for rewards (in-review) logos-lips#406

Total Stake Inference

  • Total Stake Inference gap simulated with and without uncle references, confirming the fix, merged #3341

EmPoWering

  • Reward pool floor risk bounded: conservative finite-horizon bounds (Cantelli plus union bound) on the probability the Proof of Work reward pool falls below its fee-only floor, covering transient and equilibrium phases doc; utility-function extension outlined so newcomers, stakeholders, service providers, and external miners choose strategies dynamically doc
  • Participation simulator, cost estimator, and strategies report: emission split settled, bond fixed at 1,000 tokens, original proposal marked superseded after six of its seven claims failed (in-review) research#6
  • De novo model: six open questions settled, simulator and browser bootstrap calculator built, both designs simulated, and a de novo variant introduced to mitigate whale exposure (in-review) research#7
  • Tokenomics simulations: pow_quota settled at 3 (in-review) research#5

Post-Quantum

  • Post-Quantum Migration Strategy for the Logos stack completed and ready for review doc
  • Post-Quantum migration blog post drafted doc

Cross-Zone Sequencing

  • Costly Escalation economics redesigned: challenge and response fees routed to a neutral zone fee collector, valid responses preserve both stakes, and stake forfeiture only follows an unanswered on-chain challenge code
  • Costly Escalation v2 specification reworked around two participant sequencers and a neutral bond sequencer, with fields, transitions, payouts, and security boundaries aligned to the implementation; demo expanded to cover both challenge-response directions and both unanswered-challenge forfeiture directions doc

Bedrock — Engineering

^

Blend

  • Proof of Work proof generator merged #3310; Blend-related epoch state tracked for epoch-bound difficulty updates merged #3317
  • Transaction blending supported in the Blend service #3321
  • Proof generation dropped from old-epoch crypto processors during epoch transitions #3350
  • Non-zero redundancy enforced for Blend cover messages #3364

Node

  • Proof of Work mining service merged: nodes trigger mining and claim winning tickets, with start/stop, claim, and claim-info endpoints on the HTTP API and the same control surface over FFI #3357, #3380, #3382
  • Block compression implementation updated to the latest spec draft #3346
  • Transaction typestate refactor: VerificationState-aware transactions propagated through the codebase, sequence types collapsed into a generic system, serialization format preserved, chunked into six review PRs (in-review) #3383, #3385, #3386, #3387, #3388, #3389, #3390
  • ZK batch verification integrated into transaction validation #3353, with a ledger-level benchmark (in-review) #3355
  • Fee margin added to SDP transaction funding #3359; fee horizon added to wallet funding (in-review) #3392
  • Flaky FFI test root-caused to an Overwatch deadlock on service stop Overwatch#150
  • Rust toolchain updated to 1.98 #3362, Overwatch#152

Zone SDK

  • Channel wallet tracker merged #3246; withdraw with note tracking merged #3396
  • Block event processing made cancellation-safe #3334
  • Channel config lineage enforced via parent message id (in-review) #3272
  • λSQL: architecture proposal finalized doc; channel write application (in-review) #3333, inscription encoding (in-review) #3348, nondeterministic function result capture for deterministic replay (in-review) #3361

Logos Core

  • Node 0.2.3 released release, adding a fee margin to SDP transaction funding #3359 and Blend and Total Stake Inference diagnostic instrumentation for the testnet #3393; blockchain module 0.2.3 released logos-modules-release#49

Logos Execution Zone

^

Sequencer

  • Sequencer join/exit queues merged #725
  • Slashing v1 finished (in-review) #737, fixing mantle transaction parent selection on reorgs and Logos Execution Zone cursor rewinding on reorgs along the way; k-of-N threshold slashing signatures over gossip started; self-join/leave specs updated with join/leave finality delays
  • Actor architecture phase 2 merged: Storage actor #736
  • Multi-sequencer support in the wallet CLI merged #703
  • Returned-withdrawals fix finalized, blocked on integration tests pending a new bedrock node image (draft) #745

Fees

  • Fee-charging implementation opened as a PR stack (in-review): fee program skeleton with zero fees #746, fee market computations under zero load #747, fee fields and payer authorization on the wire format #750, fee arithmetic and producer identity #753, cycle-count metering for public execution #752, fee-charging wiring #754, admission screen with getFeeState RPC and mempool cap budgeting #758, fee-aware integration suite #762; wallet payer designation and default fee fields on public transactions merged #751

Accounts

  • Environment unification: private PDA authorization scoped to the callee subtree merged #683; protocol-wide authorized balance decrease considered and dropped
  • Events: indexer state-bloat addressed with event filters (in-review) #785
  • Incremental updates toward diff-native program execution (in-review): AccountDiff core types #749, programs wired to diff-native execution #757, AccountDiffs emitted instead of post_states #775, ChainedCalls keyed by account id #777, AccountPostState removed #778
  • Programs as accounts: Deploy bytecode batched across multiple transactions (draft) #748; Account::data packed densely on the RISC0 word wire (draft) #756
  • Program updates: program upgrade capability (draft) #782, private execution of permanently-immutable programs (draft) #783, shadow programs (draft) #784
  • Serialization and I/O moved to a borsh codec, up to 10x cycle reduction for large-data programs in current use #770

Testing

  • Cucumber environment with initial ported integration tests merged #741; cucumber integration tests wired into CI (in-review) #779

Nimbos

^

Nimbos

  • Bedrock specification tags upgrade merged nimbos#165
  • SRP and Blend rewards implemented (in-review) nimbos#172
  • SDP validations at genesis fixed (in-review) nimbos#171
  • libp2p GossipSub topic subscriptions and message validation (WIP) code; Kademlia discovery integration started (WIP) code