Gaps, Placeholders, and Recommendations — Consolidated
Last Updated: 2026-02-05
Purpose: Single reference for all identified gaps, placeholders, and actionable recommendations across the repository.
Related: REQUIRED_FIXES_UPDATES_GAPS.md | PLACEHOLDERS_AND_TBD.md | NOT_IMPLEMENTED_FULL_SCOPE | ALL_IMPROVEMENTS_AND_GAPS_INDEX.md | 04-configuration/VERIFICATION_GAPS_AND_TODOS.md. Where to update when completed: 00-meta/BLITZKRIEG_SOURCE_DOCUMENT_INDEX.md.
Updates (2026-02-05): API keys in token-aggregation and root .env.example replaced with placeholders. docs/TODO.md and smom-dbis-138/docs/TODO.md created; smom-dbis-138 status-report links to ../tasks/TODO.md fixed. RPC_ENDPOINTS_MASTER Sankofa section updated (sankofa.nexus → 7801/.51:3000, phoenix → 7800/.50:4000; the-order TBD). dbis_core nostro-vostro emergency hotline and example URLs set to "To be configured".
1. Security and secrets
1.1 API keys and secrets in .env.example (high)
| Location |
Issue |
Recommendation |
smom-dbis-138/services/token-aggregation/.env.example |
Done. Uses placeholders your-coingecko-api-key, your-coinmarketcap-api-key. |
Rotate keys if they were ever committed or shared. |
.env.example (root) |
Done. Uses placeholder your-coingecko-api-key. |
— |
1.2 Other secret placeholders
- Root
.env.example: Documents PRIVATE_KEY, JWT_SECRET, NPM_PASSWORD, Cloudflare, AWS, etc. with your-* placeholders — good. Ensure no real values are committed.
- OMNIS/backend, dbis_core, the-order: Use
your-* or empty; keep examples placeholder-only and document in MASTER_SECRETS_INVENTORY.md or API_KEYS_REQUIRED.md.
2. Configuration and DNS placeholders
2.1 Sankofa / The Order (TBD)
| Item |
Location |
Recommendation |
the-order.sankofa.nexus |
ALL_VMIDS_ENDPOINTS.md, RPC_ENDPOINTS_MASTER.md |
Marked TBD / not yet configured. Once The Order portal is deployed, add NPMplus proxy host and document IP:port in RPC_ENDPOINTS_MASTER and ALL_VMIDS_ENDPOINTS. |
| Sankofa cutover plan |
SANKOFA_CUTOVER_PLAN.md |
Replace <TARGET_IP>, <TARGET_PORT>, and table TBDs with actual Sankofa service IPs/ports when deployed. |
2.2 sankofa.nexus / phoenix.sankofa.nexus routing (authoritative)
- Master docs (source of truth): ALL_VMIDS_ENDPOINTS.md, RPC_ENDPOINTS_MASTER.md, DNS_NPMPLUS_VM_COMPREHENSIVE_ARCHITECTURE.md. Correct targets:
sankofa.nexus / www.sankofa.nexus → 192.168.11.51:3000 (VMID 7801); phoenix.sankofa.nexus / www.phoenix.sankofa.nexus → 192.168.11.50:4000 (VMID 7800). Only explorer.d-bis.org should point to 192.168.11.140 (Blockscout). If NPMplus proxy hosts for Sankofa/Phoenix still point to .140, update them to the correct IP:port per the master docs.
2.3 Network / architecture placeholders
2.4 Token mapping (138↔Mainnet) — Done 2026-02-13
bea1903ac9