Week 35, 2026 (August 31, 2026)
logos-delivery-module v0.2.1 released — shipping multiple bugfixes and an update of the underlying logos-delivery library, plus a migration to the nim-ffi 0.3 C ABI.
Mobile platforms deliverable closed — Android and iOS builds repaired and gated in CI; three fleet-stability fixes merged and the nim-libp2p 2.3.1 migration landed on master.
λAccount identity primitive hit first review milestones — initial draft of the AccountLogs specification and a base Rust implementation in libchat both up for review.
First end-to-end LEZ-based RLN test in Logos Delivery passed — delivery and RLN membership modules both registered on the LEZ testnet, then generated and verified proofs.
Human-approved signing replaces the unlocked-signer cache in the EVM wallet stack — sign_* deleted from the keystore contract, admission tiered by caller identity, and signer_ui proven end-to-end against a live secp256k1 signature.
App-to-app intents shipped — three frozen QML symbols over a host-side broker that checks each caller's uses declaration; provides landed in the package format and intent names carried through downloader, bundler and templates.
Mix transport now carries data transfers — a new multinode testing harness runs 100+ node experiments with 80+ concurrent downloads in a fault-free network.
Storage moved to the nim-libp2p Kademlia DHT — discovery runs over the node's existing switch and TCP transport, retiring the whole second UDP stack and bringing us closer to a unified Logos codebase.
Proof of Work integrated end to end: mining thread pool, deployment settings, claim test #3398, #3400, #3403
Compressed Block Proposal RFC merged logos-lips#389
Block Rewards RFC merged: pooling, distributing, and releasing replace burning and minting logos-lips#375
enrtree:// (#4146)Human-approved signing replaces the unlocked-signer cache — sign_* deleted from the contract, admission tiered by caller identity, and the vault password derives the key inside approve() and is zeroized before it returns.
Made signer_ui work and proven end to end against a live secp256k1 signature; five defects found by running it rather than reading it.
Wallet backend became a pure requester of human-approved signatures; fees taken from fee_module; RAILGUN dropped until migrated off keystore.sign_digest.
Stopped handling the vault password; Private (RAILGUN) tab dropped until railgun is migrated; leaf modules pinned to the backend's own locked inputs.
App-to-app intents frozen surface added (logos.request, logos.intentRequested, logos.respond); ui-host adopts the parent's credential through the shared verb.
App-to-app intent broker on the host/shell split; bundled modules_state; version-range enforcement in the sidebar; consumer admission via the shared verb; MCP-driven UI test preparation.
provides field for intents; consumers can carry a package's signature and check it against a DID of their own; installed packages can be checked; hyphen ranges documented.
Intent name support; resolver fix so a signer pin cannot bind to an unverified signature; multi-download concurrency enabled.
Concurrency enabled; empty-signer pin fix taken; signer-binding fix taken.
Dependency version-range evaluation without masking deeper mismatches; unknown signing key surfaces a real message; read-only bits cleared and partial installs rolled back; variant table taken from logos-package.
Dependency constraints put on the wire; relocks and package-manager bumps.
Requests Settings → Repositories via an intent; Basecamp↔PMUI install/uninstall/upgrade ack handshake removed.
Module lifecycle turned into sequenced facts fed to modules_state; dependency version ranges enforced at load; ready kept across snapshot; protocol 0.8 and 303ab08 across all three carriers.
Gate ingest on WHO the caller is, not what it knows — retiring an ingest-token nonce and the ModuleDescriptor.env plumbing it would have required.
INBOUND and OUTBOUND tokens separated without moving a single byte; private store created empty rather than seeded with the host anchor; onEventWhenAvailable takes the wildcard.
logos::admitConsumer shared verb; informModuleToken routed through the INBOUND door; void-refusal fixes in both generated sites; protocol 303ab08 wildcard.
logos_module_accept_inbound_token defined for cdylibs; argument count bounded above and an lp reply the consumer cannot read handled.
A Qt-consumer reply it cannot read must not be reported as a provider refusal; relocks and protocol 303ab08.
A module announces its OWN name, not core; argument count bounded above and the identity arm gated.
Intent template support; SDK relocks for the arity bound and the result decode; record-codec qualification; protocol 0.8 module-stack relock.
Outbound core/capability tokens documented at load; qt-sdk stack relock.
Identifies the requestModule caller from the RPC token; caller-aware module-builder relock.
Inbound accept queue restored; peer id reported and pingPeer added; context pointer guarded against a concurrent destroy; integration tests build again.
Migrated to the nim-ffi 0.3 C ABI, released as 0.2.1, bumped in the release set.
Bumped delivery module to 0.2.1 and added delivery demo; blockchain module 0.2.3.
Draws the line at LOADED for both watch and call; CLI daemon files client token as INBOUND; catalog versions and one version per row in package search; protocol 0.9.
Conformance: the consumer axis in Python, two relocks and the two races they exposed.
Consumer axis in the ext table (44 × 2 × 1 → 44 × 2 × 3) via Qt proxy fixture, plus null-vs-failure classes as cells, echoOptional shape unification and isolate rule cleanup.
The module is the directory it is installed in; signer half of malformedConstraint covered.
Logs to stderr by default; loads the backend library the plugin actually declares; consumers admitted through the shared verb.
Tutorials updated so UI modules use QML hot reloading correctly; documentation and tests for the implemented intents mechanism.
Moved onto LogosDesignSystem components; onboarding reworked into two paths (create a wallet, or use an existing one); tests turned on in CI.
producer checked against the L1 inscription (in-review) #816eth/net/nat and NatConfig removed in favor of Logos-native reachability and AutoNAT v2 (in-review) nimbos#176