proxmox/docs/00-meta/WAVE1_COMPLETION_SUMMARY.md

Wave 1 — Completion Summary

Last Updated: 2026-02-05
Purpose: Status of every Wave 1 task from the full parallel run. Used with FULL_PARALLEL_EXECUTION_ORDER.md and FULL_PARALLEL_RUN_LOG.md (archived).

Legend: ✅ Done (this run or prior) | ⏳ Operator (SSH/creds/LAN) | 📄 Documented (config/design exists; no code change) | ➖ Deferred

---

Security (W1-1 – W1-4)

ID	Task	Status	Notes
W1-1	SSH key-based auth; disable password	⏳ Operator	Coordinate to avoid lockout; test key auth first.
W1-2	Firewall: restrict Proxmox API 8006	⏳ Operator	Restrict to specific IPs from LAN.
W1-3	smom: Security audits VLT-024, ISO-024	➖ Deferred	Per smom/security backlog.
W1-4	smom: Bridge integrations BRG-VLT, BRG-ISO	➖ Deferred	Per smom backlog.

---

Monitoring config (W1-5 – W1-7)

ID	Task	Status	Notes
W1-5	Prometheus scrape (Besu 9545); alert rules	✅ Done	scripts/monitoring/prometheus-besu-config.yml, smom-dbis-138/monitoring/prometheus/ (scrape, alerts). export-prometheus-targets.sh run.
W1-6	Grafana dashboards; Alertmanager config	📄 Documented	Dashboards: smom-dbis-138/monitoring/grafana/, dbis_core/monitoring/grafana/. Alertmanager: smom-dbis-138/monitoring/alertmanager/alertmanager.yml.
W1-7	Loki/Alertmanager config (no deploy)	📄 Documented	smom-dbis-138/monitoring/loki/loki-config.yml, alertmanager/alertmanager.yml exist.

---

Backup (W1-8)

ID	Task	Status	Notes
W1-8	Automated backup; NPMplus backup cron	⏳ Operator	backup-npmplus.sh exists; verify/schedule from host with NPMplus up.

---

Phase 1 optional (W1-9 – W1-10)

ID	Task	Status	Notes
W1-9	VLAN enablement docs; Proxmox VLAN bridge design	📄 Documented	NETWORK_ARCHITECTURE.md §3–5 (VLAN set, Proxmox vmbr0).
W1-10	VLAN migration plan (per-service table)	📄 Documented	UDM_PRO_VLAN_MIGRATION_PLAN.md, MISSING_CONTAINERS_LIST.md.

---

Documentation (W1-11 – W1-13)

ID	Task	Status	Notes
W1-11	Doc consolidation; archive old status	✅ Done	ARCHIVE_CANDIDATES.md created; move agreed items when ready.
W1-12	Quick reference cards; decision trees; config templates	✅ Done	QUICK_REFERENCE_CARDS.md §5 Verification & E2E; CONFIGURATION_DECISION_TREE, config template links.
W1-13	Final IP assignments; connectivity matrix; runbooks	📄 Documented	NETWORK_ARCHITECTURE.md §7 (VMID/network table); OPERATIONAL_RUNBOOKS.md; MISSING_CONTAINERS_LIST.

---

Codebase (W1-14 – W1-17)

ID	Task	Status	Notes
W1-14	dbis_core: TypeScript/Prisma fixes	➖ Deferred	By module; parallelize by file when tackling.
W1-15	smom: EnhancedSwapRouter quoter; AlltraAdapter fee	➖ Deferred	Per smom backlog.
W1-16	smom: IRU remaining tasks	➖ Deferred	Per smom backlog.
W1-17	Placeholders (canonical addresses, fee, Fabric chainId 999, .bak)	➖ Deferred	ALL_IMPROVEMENTS 87–91.

---

Quick wins (W1-18 – W1-21)

ID	Task	Status	Notes
W1-18	Progress indicators; config validation in CI	✅ Done	run-full-verification.sh, verify-end-to-end-routing.sh progress. validate-config-files.sh exists.
W1-19	Secure validator key permissions (chmod 600, chown besu)	⏳ Operator	Run on Proxmox hosts.
W1-20	Secret audit; input validation; security scanning	⏳ Operator	shellcheck not in env; run when available.
W1-21	Config validation (JSON/YAML schema); env standardization	📄 Documented	scripts/validation/validate-config-files.sh; ENV_STANDARDIZATION docs.

---

MetaMask / explorer optional (W1-22 – W1-26)

ID	Task	Status	Notes
W1-22 – W1-26	Token hardening, Snap, explorer UI, Paymaster, API keys	➖ Deferred	When keys/priorities available; parallel by task.

---

Improvements index 1–35 (W1-27 – W1-30)

ID	Task	Status	Notes
W1-27	ALL_IMPROVEMENTS 1–11 (Proxmox high)	⏳ Operator	.env, validator keys, SSH, firewall, VLANs, metrics, backup, runbooks — from LAN/Proxmox.
W1-28	ALL_IMPROVEMENTS 12–20 (medium)	➖ Deferred	Error handling, logging, Loki, CI/CD.
W1-29	ALL_IMPROVEMENTS 21–30 (low)	➖ Deferred	Auto-scale, load balancing, HSM, audit.
W1-30	ALL_IMPROVEMENTS 31–35 (quick wins)	✅ Partial	Progress indicators, verify-min-gas-price set -euo; --dry-run, config validation, FAQ exist.

---

Improvements index 36–67 (W1-31 – W1-34)

ID	Task	Status	Notes
W1-31	Script shebang, set -euo, shellcheck	✅ Partial	verify-min-gas-price.sh fixed; many scripts already have set -euo. shellcheck when installed.
W1-32 – W1-34	Doc consolidation, security, logging, metrics, backup review	📄 Documented / ➖	Per ALL_IMPROVEMENTS; doc/script work as needed.

---

Improvements index 68–91 (W1-35 – W1-38)

ID	Task	Status	Notes
W1-35	Quick ref, decision trees, config templates (68–74)	✅ Done	QUICK_REFERENCE_CARDS, CONFIGURATION_DECISION_TREE linked.
W1-36	Phase 1–4 design; missing containers list	📄 Documented	MISSING_CONTAINERS_LIST.md; NETWORK_ARCHITECTURE VMID table.
W1-37 – W1-38	smom/dbis/placeholders (82–91)	➖ Deferred	Same as W1-14–W1-17.

---

Improvements index 92–139 (W1-39 – W1-44)

ID	Task	Status	Notes
W1-39	ALL_IMPROVEMENTS 92–105 (MetaMask/explorer)	⏳ Skip	pnpm install + hardhat needed for tests.
W1-40 – W1-43	Tezos/CCIP, Besu, RPC, orchestration	📄 Documented / ➖	Configs and docs exist; implement when deploying.
W1-44	Maintenance procedures (135–139)	📄 Documented	OPERATIONAL_RUNBOOKS maintenance section; Ongoing O-1–O-3 in execution order.

---

Verification scripts (run in this session)

Script	Result
check-dependencies.sh	✅ Pass
verify-end-to-end-routing.sh	✅ Run (6 RPC 405 until NPMplus fix)
run-full-verification.sh	✅ Run
verify-min-gas-price.sh	⚠️ Exit 2 (no SSH to LAN)
validate-genesis.sh (smom-dbis-138)	✅ Fixed

---

Next (operator / future runs)

1. Wave 0: W0-1 (NPMplus RPC fix from LAN), W0-2 (sendCrossChain real), W0-3 (NPMplus backup when up).
2. Wave 1 operator: W1-1, W1-2, W1-8, W1-19, W1-20, W1-27; install shellcheck. validate-genesis ✅ fixed. smom-dbis-138 pnpm test: add internal deps (e.g. @emoney/interfaces) or run from full workspace.
3. Wave 2 & 3: Use WAVE2_WAVE3_OPERATOR_CHECKLIST.md.