Files
proxmox/docs/00-meta/REMAINING_TASKS_NEXT_STEPS_PHASES_REVIEW.md
defiQUG 2a6d3cfc7f
Some checks failed
Deploy to Phoenix / deploy (push) Has been cancelled
Update submodule references and improve CI workflow
- Update submodule references for explorer-monorepo and smom-dbis-138 to latest commits.
- Modify CI workflow to include shellcheck installation and enforce error severity for script checks.
- Update contract addresses in configuration and documentation to reflect the new canonical addresses for CCIPWETH9Bridge and CCIP Router.
- Revise integration test documentation to align with updated contract addresses and deployment statuses.

Made-with: Cursor
2026-03-24 22:50:52 -07:00

8.1 KiB
Raw Permalink Blame History

Remaining Tasks, Next Steps, and Phases — Consolidated Review

Last Updated: 2026-02-05
Purpose: Single review of all remaining work, next steps, and deployment phases.
Sources: TODO_TASK_LIST_MASTER.md, NEXT_STEPS_MASTER.md, PHASES_AND_TASKS_MASTER.md, DEPLOYMENT_STATUS_MASTER.md, REMAINING_TASKS.md, ALL_IMPROVEMENTS_AND_GAPS_INDEX.md.


Execution order: full maximum parallel mode

Run in full maximum parallel. All remaining work is ordered into waves in FULL_PARALLEL_EXECUTION_ORDER.md:

Wave Content Rule
Wave 0 Gates/creds: NPMplus RPC fix, sendCrossChain (real), NPMplus backup Run in parallel where different owners
Wave 1 Security, monitoring config, backup, docs, codebase, quick wins, implementation checklist, improvements 1139 (design/config/code) Run all in parallel
Wave 2 Monitoring stack deploy, VLAN enablement, CCIP Ops/NAT, Phase 4 scripts, missing containers (3 VMIDs only: MISSING_CONTAINERS_LIST.md), DBIS/Hyperledger start Run all in parallel (by host or component)
Wave 3 CCIP Fleet full deploy; Phase 4 tenant isolation After Wave 2; run in parallel
Ongoing Explorer sync, RPC 2201, config API Daily/weekly

Within each wave there are no ordering requirements between items; run them concurrently to complete all remaining tasks in minimum wall-clock time.


1. Immediate / Do First

Item Status Action
Execute sendCrossChain (real) Pending Remove --dry-run from run-send-cross-chain.sh; ensure LINK approved for fee token. Bridge at 0xcacfd227A040002e49e2e01626363071324f820a.
Apply NPMplus RPC fix (405) If RPC 405 From a host on LAN: bash scripts/nginx-proxy-manager/update-npmplus-proxy-hosts-api.sh (sets block_exploits false for RPC).
CT 2301 Resolved Recreated 2026-02-04; Besu config may need reinstall (copy from 2101/2201).

2. Remaining Deployment Phases

Phase Required Status Scope
Phase 0 — Foundation Done Proxmox hosts, basic containers, edge (UDM Pro, NPMplus).
Phase 1 — VLAN Enablement Optional Pending UDM Pro VLAN config; VLAN-aware bridge on Proxmox; migrate services to VLANs (see NETWORK_ARCHITECTURE).
Phase 2 — Observability Required Pending Prometheus, Grafana, Loki, Alertmanager; Grafana via Cloudflare Access; alerts.
Phase 3 — CCIP Fleet Required Pending CCIP Ops/Admin (5400-5401); 16 commit (5410-5425); 16 execute (5440-5455); 7 RMN (5470-5476); NAT pools. 07-ccip/CCIP_DEPLOYMENT_SPEC.
Phase 4 — Sovereign Tenants Required Pending Sovereign VLANs; tenant isolation; access control.

3. Security (High Priority)

Task Status
SSH key-based auth; disable password auth Pending
Firewall: restrict Proxmox API 8006 Pending
smom: Security audits VLT-024, ISO-024 Pending
smom: Bridge integrations BRG-VLT, BRG-ISO Pending

4. Monitoring & Backup

Task Status
Prometheus, Grafana, Loki, Alertmanager Pending
Besu metrics 9545; Prometheus scraping Pending
Health check alerting Pending
Automated backups; NPMplus backup (NPM_PASSWORD) Pending

5. Codebase

Area Task Status
dbis_core TypeScript/Prisma fixes ~1186 TS errors remain
smom-dbis-138 Security audits (VLT-024, ISO-024) Pending
smom-dbis-138 Bridge integrations (BRG-VLT, BRG-ISO) Pending
smom-dbis-138 CCIP AMB full implementation Pending
smom-dbis-138 EnhancedSwapRouter quoter; AlltraAdapter fee TODO Pending
smom-dbis-138 IRU remaining tasks Pending

6. Optional / Enhancements

Category Examples
Gas/Deploy Paymaster deploy (optional); see SMART_ACCOUNTS_DEPLOYMENT_NOTE.
Token/MetaMask Token-aggregation hardening; CoinGecko submission; Chain 138 Snap (market data, swap, bridge); Consensys outreach.
API keys Li.Fi, Jumper, 1inch (see API_KEYS_REQUIRED).
Explorer Dark mode, network selector, sync indicator.
Placeholders Canonical addresses env-only; AlltraAdapter fee; Smart accounts kit; quote service Fabric chainId 999; .bak deprecation.

7. Maintenance (Ongoing)

Task Frequency
Monitor explorer sync Daily
Monitor RPC 2201 Daily
Config API uptime Weekly

8. Improvements & Gaps Index (1139)

Full checklist in ALL_IMPROVEMENTS_AND_GAPS_INDEX.md. Summary by range:

Range Category Count
111 Proxmox high priority 11
1220 Proxmox medium 9
2130 Proxmox low 10
3135 Quick wins 5
3667 Code quality & scripts 32
6874 Documentation enhancements 7
7591 Infrastructure & deployment 17
92105 MetaMask & explorer 14
106121 Tezos / Etherlink / CCIP 16
122126 Besu / blockchain 5
127130 RPC translator 4
131134 Orchestration portal 4
135139 Maintenance 5

Work through in parallel by cohort where possible; see PARALLEL_TASK_STRUCTURE.md.


9. Deployment Status (In Progress / Pending)

  • VLAN migration: Besu validators → VLAN 110; sentries → VLAN 111; RPC → VLAN 112; Blockscout → 120; FireFly → 141; MIM API → 160.
  • Service deployment: CCIP fleet (41 nodes); DBIS services; monitoring stack; additional Hyperledger.
  • Security & access: Firewall rules; Cloudflare Zero Trust; NAT pools.
  • Documentation: Final IP assignments; service connectivity matrix; operational runbooks.

Note: DEPLOYMENT_STATUS_MASTER container inventory may reference legacy VMIDs (2500s); current RPC VMIDs are 2101, 2201, 2301, 2303-2308, 2400-2403 per RPC_ENDPOINTS_MASTER.


10. Implementation Checklist (Best Practices)

Priority Total Completed Pending
High 25 5 20
Medium 20 0 20
Low 15 0 15
Quick Wins 8 5 3

Reference: 10-best-practices/IMPLEMENTATION_CHECKLIST.md.


11. Validation Commands

Check Command
Backend VMs bash scripts/verify/verify-backend-vms.sh
Full verification bash scripts/verify/run-full-verification.sh
E2E (Cloudflare domains) bash scripts/verify/verify-end-to-end-routing.sh
All systems bash scripts/verify-all-systems.sh
Besu peers bash scripts/besu-verify-peers.sh http://192.168.11.211:8545