Tools Community Call #8 - near/dev/hub

Captions as YouTube publishes them, usually machine-generated, so product and people names can be misheard.

1. 0:05

   hi friends my name is k and I am de contributed AR devhub uh and I would like to welcome you to the aid to community call if you haven't attended one yet those are informal sessions where we share updates discuss uh and present tooling projects from the ecosystem if you want to get involved go in our telegram group or Jo like or visit our community page at near Dev hub.org you can see the recordings of

2. 0:29

   all previous SS on dev hub's YouTube channel today uh we are going to be talking for various projects uh for near and have a little bit of discussions around tooling um I'm joined today by Josh Ford Zid Vlad Gregory and Everett uh which uh all pretty much will bring some I'll put that on the video so I'm joined by J Ford zit Vlad Everett and Gregory where we'll be having the discussions over each and everyone's

3. 1:01

   work so I would like to start with some updates from zit he'll be talking I believe on JSU and Bento maybe uh so zit if you're ready take it away yeah thank you thank you for the invite so last um few months we have been kind of working on uh making uh web three development uh as simple as possible as simple as kind of drag and drop uh mostly we focused on the front end part uh you probably know the web IDE that we have for boss and we

4. 1:45

   simplified that to kind of make it more easier uh but I will start with our uh kind of no code um AI generated uh front end tool that's called Beno let me share my screen I don't have access to uh I can access to share the screen button is kind of dimed yeah same here very strange give me one second will fix it there we go so this is Bento Bento is um if you go to the main website it uh

5. 2:26

   it it is basically from prom to UI and then you can build a uh kind of the landing page for any of your tab just using prompt uh I don't see messages want to sorry is it the question for me or if you have a question just ask ask the question okay so uh the way you can you can start a project is uh from two places one is uh you can start from a template or you can take a screenshot of

6. 3:06

   a website and then you can kind of build build from there so uh let's say we want to start from scratch we want to build a uh my swap some sort of uh let's say unisoft clone uh remember we are building the landing page um create defy we I don't know if you can say that and then what it will do is like you can see behind the scene it will uh kind of generate different section of your website so so it it created this plan

7. 4:01

   where it knows like it need to create this different section and uh it is using um llm to kind of generate the user interface for you so you can see uh it bring up that UI um and then now you can also go back and kind of let's make it it's too dark so now you can you can change it different section and then you can also kind of if I want to change this uh this portion using AI so I can just click

8. 4:41

   this magic uh button so it will go and kind of regenerate this section so this is kind of a uh one part where you can kind of add um and update any section or you can you can remove you can move section so those are like a typical drag and drop thing you can do you can change uh manually uh from any of the property from here and then the next feature is um so that that's kind of the first feature that you can do and then uh more interesting part is you can just click

9. 5:25

   Deploy on near and then it generate a component for so this is a uh if you look inside this is a real react onchain component that behind the scene was generated for you um and this is mobile optimize and all the other things so the code is generated now you can connect your wallet and you can deploy uh on near protocol so from your idea to create a website and deploying as a uh boss component in few minutes so that's kind

10. 6:05

    of the one of the main important thing you can do with uh with Beno one of the ideal customer profile is people who have idea or in a hackathon or in a real settings like where they're building a uh component but they also want to uh kind of create the website uh so that's kind of idea so other part of it is is kind of creating a project from a screenshot so you can go to basically any website uh anyone have any favorite website that

11. 6:45

    they let's go to the this um uh this website for example and now it can be any website really uh now if we take a screenshot and then then uh just upload that screenshot so so now if I upload then it will um it will be able now it's going through the screenshot and kind of generating a uh UI from that screenshot give give it few second but you can imagine like a the idea is you can have a starting point and then uh from a screenshot and then from there you can keep

12. 7:41

    updating so this is the UI generated from that screenshot uh which is not bad uh so now um when you have this one now you can also bring uh bring more stuff so like okay uh let's hide this thing so here you have a this generation where you can kind of add more stuff so maybe um if they have a they don't have a price section but let's say price page um any of the price page will do

13. 8:30

    so the idea is if I take a screenshot now let's say I want to add this price section to my my website here so if I go and take this one let's see what kind of things it generate so the main idea of this composability that we learn from uh kind of a react on chain kind of a giving user non-technical user the ability to kind of a either imagine now you are adding it using uh so now you can see like a now you have a pricing section

14. 9:17

    right so uh and you can kind of ACC compose uh there will be few other things in the future imagine like a um in this page if you want to add a boss component so you should you will be able to add a react on chain or this from this 20 10 20,000 component that we have you'll be able to kind of mix and match match into this section so that's kind of the uh BTO and then of course you can uh you can share with other people so you uh and then you

15. 9:56

    will be able to deploy on chain so that's that kind of the main Beno um so if you want to give it a try just go to ben. Jutsu doai so it is for mostly focusing on non-technical developer who want to build a proof of concept really quickly then uh one more thing I want to show in uh Jutsu doai so now you will find it's like a very minimal amount of thing like a uh we went through and talk with people and then kind of simplified The Experience

16. 10:31

    so uh and added this storage section so what happen when you build a uh build a component a lot of time you use different assets like it could be a CSS it could be a image that you want to use uh now you have a place where you can upload upload a CSS file or image and then you can consistently use uh those assets into your component so it make it really easy to manage um typically we use different tool to

17. 11:08

    upload upload a file in ipfs and then kind of a use the them uh in uh like in our components so that should make it much much easier so we are using this one a lot it's like a and behind the scenes we are using uh near ipfs or uh near FS uh and then search is the same yeah so like it's more simplified uh it should be more uh easier and intuitive for um hackers or Builders who want to build uh component so yeah give it a try Beno if

18. 11:53

    you want to just generate your UI using uh just prompt or screenshot this is for you and if you are interested in writing code uh then AB dojutsu thank you thanks zit um yeah I have a couple of questions uh one of them would be uh which model is Bento using underneath and do you see it for the future or like do you see it that it could be made so that it interacts with a certain content but not necessarily uh with the reacton chain components which is basically what

19. 12:34

    jutu has been focused on so do you see it as a future uh as in its future uh to be able to somehow bridge the gap of like interacting with the API JS uh like between the blockchain and the website itself or like do you see it as a static tool that it will be helping out with for people to bring their Concepts into life okay so the uh first question is like what kind of model it use so we tried

20. 13:07

    different models uh like a Lama 3 and uh uh p 2 uh but like open AI is kind of the um uh gp4 is kind of the winner so when it comes to kind of a generating solid uh code still it's the winner so that's um under the need it's today using um GPD 40 um and then basically every time there is a model update it will get better and better so that's kind of the concept uh in terms of um going Beyond just front end generation uh we tried it

21. 13:51

    yeah it it is possible so now the question is like um how much interest like um uh there are so so one of the uh pivot that we are making right now so we build bunch of uh code generator for like a smart contract generator uh internally uh for solidity for rust uh we tried different and for frontend uh now we also build some other AI agent that that do like a lot of U interesting automation for Twitter and other stuff for internal uses and gradually moving to a uh place where we

22. 14:32

    want to build a kind of a platform where you can use different AI apps so we want to build a more like a um a super app for AI app let's a near AI engineer so if you want to use it so we want to be that host uh in the future but that's like a um uh Far Far Future did I answer your question like a two question okay um yeah I was just sidering a bit while I was listening to you because uh yeah and this is little

23. 15:07

    bit on the Sidetrack but you mentioned that you have tried like code generations for smart contract both for solidity for R based blockchains and I would like to just briefly get your what is your overview of like how good do you think we are from writing small contracts using those like code generation tools or m i assume that being given the codee base maybe solidity would fit a little bit faster I mean like because different blockchains for like rust based uh smart contracts

24. 15:40

    they use different styling but like how far do you think we are for from having a solid too an open intended uh that would generate like those smart contracts for us how far I think uh like do you thinkable like do you think that it's it is it is uh like my answer will be like a little bit different is like when all this hype will be gone after that like it will be some great tools so right now it's a lot of hype so that's why I'm

25. 16:10

    kind of staying away from hype um so in terms of generation I think it's like a 60% probably it can generate properly but there are a lot of new technique where you can write a code it's called agentic architecture so where One agent write your code then another agent criti your code and then another agent test your code run unit test so if you want to if you can build this chain of uh agents and kind of a Build agentic architecture you can go probably 80 90%

26. 16:45

    accurate code so it is doable the other big um breakthrough I would say like the context window so the uh now you can kind of if you Gemini Pro it's like a I think 3 million context so what that mean is like you can uh you can send like a 10 different example or 20 different full code example of your let's say nft or or minting a token all these things and then your code generator can generate code based on the style that you you send so uh there are

27. 17:24

    uh lot of different useful technique you can use like a oneshot learning few shot learning uh that can make your code more accurate but right now um like the problem is the perception like uh whether it's going to work imagine like a as a human we probably make more mistake like unless until like a few people like or after two years like probably you make less mistake um this kind of tool I believe will be great for onboarding new developers yeah I because like I'm

28. 18:05

    interested into the topic but I'm also like a little bit on the sides of the hype in the general space not on any related so since you're one of the persons that has been like dealing with those models and like you've been in this for a while that's why like I was curious to to know your opinion about it so yeah thank you very much for sharing uh we are joined also by two contributors that are currently having a

29. 18:29

    proposal I believe into the infrastructure committee uh that's for the runtime verification if I'm not mistaken so Everett uh would you like to join us and share a little bit about uh about your project what you're building and like how can we discuss and like see what what are you up to gener yeah absolutely so I'm Everett hilden brand I'm the CTO at runtime verification uh Gregory who's our lead of devell is also on the call but I

30. 19:00

    think he's only able to listen in right now so it'll also be me talking um so I'll just give a quick background on what runtime verification is first um but runtime verification we've been around since 2010 uh ever since then we've done software quality assurance broadly is what I would say uh that includes testing tools fuzzing tools formal verification tools parsers interpreters all sorts of different tooling for develop ERS to help them uh with their

31. 19:32

    own quality assurance basically in 2017 2018 is we got involved in the cryptocurrency spaces that was mostly in ethereum at first but then into other chains as well we developed a lot of tooling uh for blockchain application developers uh in that time including a lot of formal verification tooling which is uh formal verification is this process of taking code turning it into math mathematical model and then proving that the mathematical model always behaves

32. 20:02

    correctly right so that's kind of the highest level of assurance you can reach for a piece of code um any questions about that before I go on or no okay um our the way our tooling works is it's uh language agnostic right so it the same verification tool that we have works for solidity and also works for web assembly and works for risk five and works for python for example we also have like the C semantics and the Java semantics so we can do formal

33. 20:33

    verification for other you know non web3 languages as well but here that's not the focus um and so what that means is a little bit of upfront work for each new ecosystem we can basically bring the entire Suite of our tooling to that ecosystem uh you know wholesale so all of the tools that we have for ethereum we could bring to near for example we brought to other chains like you know t

34. 20:58

    back when uh it was more popular and yeah thank you and um and aland in the past as well and cardano and so other chains have have been involved as well um this I actually really appreciate presentation you just gave on uh jutu as well because that that's definitely a trend that we're seeing is that people are using AI to generate code more um and there's kind of this question of like is the code safe right and the and you know for for some applications it's fine if there's a

35. 21:32

    question of code safety it's fine like to run into a bug in production fix the bug the bug is fixes in the next day you're good right like that's fine but for crypto applications quite a bit of scrutiny on it from people who are looking to take advantage of these bugs and so then money can be lost in a very real way um and that's something that formal verification can help with actually

36. 21:55

    because formal verification is focused on writing the specification of what the code is supposed to do not just on not on writing the code and then checking that the code actually implements that specification so we can investigation perhaps that goes to both the AI generative model and goes to the uh formal verification team right and then the identitive model generates the code

37. 22:17

    and the formal verification team checks that the code actually implements the correct behavior in that case so or at least a subset of the correct Behavior so maybe you're not getting the full Behavior you want but at least you're staying within some safe region of operation so that's kind of a cool application of formal verification to the AI world that we've been envisioning um yeah and then you know

38. 22:40

    the a big component of the near ecosystem it seems is this chain abstraction and interupt with lots of different chains that involves bridges that involves oracles right that involves like these reaking mechanisms that takes token takes security shared security from one chain and puts it on another chain for example so all of these mechanisms increase your attack surface right they increase the the ways

39. 23:03

    that your your uh your protocol can be compromise right and so once again that just increases the need for software quality assurance in general the standard way in crypto that people have approached software quality insurance since at least since I've been involved in 2017 has been audits right and we've we've done our fair share of audits in the past audits are painful they're not aailable you know Auditors don't like doing audits right like it's very it's

40. 23:33

    expensive which is why Auditors do it right we we don't like doing Audits and they they don't scale they don't like they they're not an investment in your security as much as a check box that you're that you're uh that you're making at the end of your development cycle and while I wouldn't argue that that's not needed right now but there's better ways and formal verification is a better way because once you have the formal verification artifacts you can enable

41. 23:58

    that on your CI and just keep running it every time so it's more of an investment at that point you invest in formal verification it assists you in the development cycle because it doesn't need to be at the end you can start it right at the beginning and then it continues to pay off as you keep using it into the future so that's kind of the the the the you know we we can keep doing audits right but it's it's frustrating to see this thing that is not scalable for the ecosystem

42. 24:28

    be the kind of the gold standard for security right like it'd be better if there were other techniques that were used and also better if we move that security inhouse to the teams like the teams themselves should take charge of some of their own security so yeah I sorry you had a question um yeah that's what you're saying is perfectly true I'm like I am sure that a lot of people are struggling

43. 24:50

    with security in general and also like going to the audits to the different companies finding which one is creditable and then if even like if you give to the same the same code base to to different Auditors they would find totally different probably totally different things which brings me to the point is that you mentioned that uh there is well what you envision is writing a spec that uh basically could

44. 25:16

    be compared to the code base that the user has provide if I understanding correctly so how do you think like how can we ensure isn't this a single point of failure for example how can we guarantee that the spec that we have provided is indeed safe enough for people to be comparing it too because I see there's like a big especially on kons a lot of people are just copy pasting code from like generative tools which is working halfway there but

45. 25:47

    indeed as you as you mentioned this proposes the issue of losing assets because we humans are ignoring a lot of things and we just want to move quickly and so we just copy paste stuff cross it works and I don't get like my awesome unicorn nft stolen so how do we guarantee or like how can we ensure that the spec that we are providing is correct and it would be correct at all times yeah well so I mean there's there's a bunch of different techniques right there's no like Silver Bullet here right but the the first technique is

46. 26:21

    read it and review it right like go to the team that you're writing the spec with or and do it and in the in higher quality of Fields like Aerospace and Automotive they follow a different development strategy than in a in the field like web 3 in web 3 you see more like the Agile development strategy which is like move fast and break things and and try to get there and those they start with a specification and then they

47. 26:44

    refine that to requirements and properties and then to tests and then the implementation and it's kind of they called this V or waterfall technique and then they go back up and make sure that all of the requirements and the spec we met at the end right so we're we're by bringing in the spec writing process to the web3 ecosystem it almost just changes the mindset of the team right the team is thinking from a high L what

48. 27:09

    is this supposed to do right because oftentimes people just immediately start writing code or they have some loose English description they put it into a generative model to get them some sort of AR you know loose architecture of the code and then they start hacking away on it right like maybe it should do this maybe it should do that they don't have a clear picture in their head of what is the protocol supposed to do and so imagine you're going to modify some part of the code to extend it and add a new

49. 27:33

    feature or something and you have this clear image of what it's supposed to do then you're going to take that into account as you're writing your code whereas if you don't have this clear image you're just going to say well what about this case I think it should be this and I think it should be that and you kind of like are guessing a little bit more about what the code should do

50. 27:49

    so by bringing this spec writing process into the developers in front of the developers that's the key right it change that's the first key it changes the mindset of the developers the second key is how do you know that your spec is complete right like there's tools that can measure these things right we can measure basically like first is the code actually exercising the entirety of the spec and second is the spec missing any

51. 28:14

    cases right so that would be something like a deadlock analysis or liveness analysis of the spec itself that usually for web 3 protocols is probably Overkill that level of analysis and the human level review of the spec is probably enough and then I have but I want to give you a chance to ask your question is K can you hear me yeah yes ma can you hear me hello okay so my my question is more like uh spec like a is it like a as

52. 28:56

    a developer I have to write it or is it your tool is writing it and then uh lot of time you already mentioned like a web three or even like in general other than government and Aerospace and um it's not a waterfall it's always kind of agile method so like a um so the reason audit works is like you spend six month or one year building hacking something and then you go and give it to a auditor and then they try to break it but are you saying like I have to learn formal specification

53. 29:35

    language and then kind of specify uh write the specification for my uh nft meting uh yeah code so so the the specification probably should be written by the team right because you don't like if you go to something generative to write it then you know you're just asking it to make something up for you you're not like actually implementing some protocol that solves some problem right so you're trying to solve a problem you should

54. 30:06

    write the specification towards solving that problem but specification is a broad a broad word right like it can mean just an English requirements document right that alone makes a a massive change in the way that development happens at that point because then you are talking to your team there's some confusion about what to implement at that point and you say hey let's go to the requirements document you pull up the requirements document you see okay it says here this and this and this oh that informs the change that we're trying to make at this point or the requirements document needs

55. 30:37

    to change to make sure that everyone is kind of in sync mentally about what the goal is is to have that that requirements document and then the other end of the spectrum and specification is like mechanized formal mathematical specifications that the computer can read right so you start with something that the humans can read and agree on right and then you go to something that the compter computer can read and that's what our tools uh facilitate is writing

56. 31:02

    specifications that the computer can read and actually check that the code implements that specification correctly and that right now the barrier to entry for these types of tools for computer readable specifications for formal verification is pretty high like the the you have to usually learn some other language some other kind of mathematically oriented language to be able to write those down that's something we've been changing actually

57. 31:27

    we have this tool called control which I can maybe uh maybe I can share my screen or I can pull up a link to it and send it here or yeah please share your screen okay where do you see like a people using your tool in web three projects like do you have um projects that are actively using your project and what kind of uh vulnerability that um formal I I think um lot of uh security uh auditor they also do formal ver verification right um

58. 32:05

    most of them don't most most of them don't um we would say us and maybe one or two other teams take doing formal verification as part of the audit process pretty seriously um which you know you can look at the leader like the W leaderboard and see how often like our names and the names of those firms show up and I think it's pretty clear Trend in the EIC so this is the control tool

59. 32:29

    and it is used actively by several teams in the space and largely it's been used by later stage teams because early stage teams have this urgency to get to the market and so they have you know this this you know they they want to just get the code done get some sort of cheap audit and then get it deployed but teams that are deploying V2 or V3 know that investing in their security early makes everything cheaper and smoother long term right and so that's why we usually are working with teams that are

60. 32:59

    deploying a V2 or they're deploying a new product or they're trying to uh launch on a new chain or something like that right like they they they have had some success already with their first uh their first launch this is a a gift demonstrating the thing but the the key thing I want to show here is the ux the the ux that we've been innovating here is the key right because formal

61. 33:22

    verification has like this very high barrier to entry due to the ux and we're we're solving the problem right um so I just go to a control example you guys have heard of this tool in the ethereum ecosystem called uh Foundry or Forge yeah so it gives you this access to property tests and the cool thing about property tests is that can be uh they can take in parameters here like this right you see these parameters and normally what a tool like Foundry is doing is it's doing fuzzing over these

62. 33:54

    parameters and trying different execution paths to try to find bugs and we can just take that same property test and do symbolic execution with it instead and explore all the possible paths but in a finite memory footprint and that that's really the key there so we take these Foundry property tests and we do symbolic execution of them using control directly on that same test and then it comes back with indeed it works

63. 34:17

    for every single input or it comes back with it doesn't work and here is an example of why because of the symbolic nature of these property tests you you want something a little more flexible than what fuzzing gives you because this goes back to the coverage thing you're saying how do you know your spec covers all the inputs well it doesn't at first if you're doing fuzzing and so we introduce special what are called cheat codes which allow you to broaden the

64. 34:42

    state space that you're exploring with the symbolic exploration so this is the control tool and it's enabled a tool a really cool tool called symbolic which is kind of I think first of its kind in ethereum and maybe in any programming language where you have a debugger that enables you to do symbolic exploration and break points and setting you know stepping through the code line

65. 35:06

    by line symbolically fully so we do the symbolic exploration using the control tool and then symbolic goes through and lets you kind of Step through and pick different points in the program execution and inspect the state symbolically right so this this tool is in a an open Beta Trial right now and you can sign up for the it's an open Beta it's not private can just sign up um and you know this this is a tool that once again the way our tooling works it's all language agnostic once we have

66. 35:36

    the base model needed for the new the new ecosystem all the tooling comes with it right so that's kind of the the the the story I guess the long the long story and then what I'm uh here to you know this proposal is about the casmer tool right so casmer is our formal verification and property testing for web assembly for rust compiled the web assembly specifically and so that's what we'd like to Target at the near ecosystem and so we're asking for funding to develop basically the near specific components needed to

67. 36:10

    go into this tool stack uh and make it available as a free and open source tool that near developers can use um on their smart contracts and the uh and there's Gregory has linked the the um the Visual Studio code Marketplace extension for symbolic which you can install on your own and then the uh you know the the idea with casmer is we'll make it specific to near we'll make all that that work with the near ecosystem and then we'll Provide support we have telegram channels and Discord groups for

68. 36:43

    teams that want to take control of their own security they want to bring that security in house start to learn to do the formal verification process write their own rust property tests and incorporate it into their CI along the way so that's kind the whole the whole SPI so have you tried it on any like well what what the current status of support for near and have you tried it on any it there's no there's no support

69. 37:10

    for near at the moment the so what we support is rust to web assembly which is a broad category but there's several blockchains that have the rust of web assembly tool chain and the one that we do support is Multiverse X and we're building out support for uh Stellar for the soron uh ecosystem we're also building out support for polco DOT right now so we want to build out support for near as well and the Target contract

70. 37:33

    that we've set up in uh proposal as we want to get to where we can handle this contract is the burland uh decks right it had and we we've outlined specifically the near features that need to be implemented for the buram decks to be able to do execution and symbolic execution using the casmer tool and that's what we'll focus on developing for this uh for this engagement basically why did you choose of like because as far as like the screen

71. 38:05

    sharing that uh you did there were several tools that you mentioned why did you why are you starting off with casmer and like is the integration that you're going to do for casmer if your appr your proposal gos gets accepted uh like is this going to allow for the rest of your two stack to actually be integrating with or is it going to be like strictly casmer it will it will be casmer this proposal is specifically for casmer which will enable the rust property the

72. 38:38

    rust the symbolic execution based rust property testing we can in a follow on proposal that I think would be smaller also bring over symbolic but that one this is the this is the bulk of the initial work needed for a whole tool stack to work and this will bring in symbolic execution based verification but also fuzzing and a couple other small tools we have but the verification is the main the main tool

73. 39:01

    there yeah amazing actually um yeah uh it sounds like this would be an ultimate additive to for example Source scan which is currently on the works which verifies like makes reproducible builds and verifies the code so like having some such tools for testing and having verifiable code would be like a amazing step forward toward Security in general so yeah yeah let me actually one more tool that we make for ethereum that maybe is relevant for uh what you just

74. 39:35

    mentioned uh let's see question from VL first and then we can continue no well yeah go ahead to show it first and then so this is this is the ERX tool so the so like we were talking about the the verification side is kind of the fully manual approach to validating the safety of your smart contracts and this is the fully automated approach right and so here if you go to this page We have basically an

75. 40:00

    API you can call for any contract on the ethereum blockchain and it will give you a kind of pretty detailed security report about that contract so first it'll classify the type of token it is and then give you detailed security information we have teams that are integrating this tool into for example they're lending and borrowing platform there you know there's lending and borrowing aggregator platforms or or dexes or stuff these these contra conts that have to go out and integrate other

76. 40:29

    contracts into their platform well the if they want to provide some sort of security for their users this process can be very cumbersome they have to review each of them independently do they get an audit does the source code look reasonable does a team look reasonable right this can automate a lot of that onboarding process basically just yep it's an erc20 it's compliant onboard it right so that's this is kind of the other end of the Spectrum in

77. 40:52

    terms of the fully automated side but bringing bringing our to you know our tooling you know the promise is like we build this small core to support the thing and then all the other tools are much easier to build on top of it great to say like you've done a lot of work so busy yeah yeah what what I wanted to add is basically it would be great addition to what was currently also in in the Pro in progress um for a little while

78. 41:26

    already and B there are two initiatives one that lud just mentioned Source scan which is currently working on reproducible builds um being adop M adopted basically in near system because currently most of the people compile it on CI usually and just basically that is their level of confidence that it's kind of reproducible and we have the same environment but it's um not ideal and

79. 41:57

    and nobody else like the only proof you have is basically the execution on during the CI uh ideally we want to have reproducible environment so carger CLI builds will have a built-in support for like Docker images where where the whole um environment will be fixed uh for the compilation time that will produce the same vasm binary no matter which platform you use to run the command and

80. 42:27

    the second initiative is uh I I just received a message today morning actually that they are very close to completion is the uh put coverage wasm KMOV uh being adjusted to support near so they will like I'm spoiling it here but they will announce it next week uh the full support and uh we will definitely integrate it into all the like testing suit and and like with all those tools

81. 43:00

    we they we aim to increase the confidence of the like in the code that we are running especially like in the when it comes to the um Financial critical apps or like other security critical apps it it's it's must and uh before we relied on Rust being our Safeguard as language but we definitely want to have more tools at our disposal not just relying on uh lowlevel uh security but also like business logic bugs needs to be caught yeah I definitely agree with that then I mean we're that's that's our

82. 43:40

    mission is just to provide tools to developers we really firmly believe in open source we believe in bringing the security inhouse and empowering developers to to do their own security that's why we apply for funding to develop these tools that we don't have to you know have the tool completely closed Source basically and then of course we take you know if teams want to contract us to help them work on their security we'll do that of course

83. 44:06

    as well so nice amazing um Prett and pretty well we are all happy to have you around and actually discuss and bring those things into attention like because I think chatting and like all this is one thing but actually having to talk to the actual person that's amazing and I'm sure that a lot of people uh are having like same similar concerns they want to but and they want to get involved somehow or like get these tools but unless we talk and bring it to the attention that indeed those tools exist

84. 44:38

    might exist what it's needed is like more effort more talking about assets to some extent because uh every piece of work um takes time and this is our most uh expensive asset of course but those such kind of tools are necessary not only for the near ecosystem but for the greater good for everyone in the blockchain space so uh and it seems that you have put a lot of work into it so far so looking forward to see how uh your proposal is going to proceed and

85. 45:10

    yeah while you're here I like um speaking on security as well uh they have they have been some questions around telegram groups for a while now for like the past week uh there are few people that asked if near has user facing um projects they have given some examples for like safe or something like that and I would ask you uh what tools that made me think actually what tools are we missing what do you think would be a

86. 45:42

    nice tool to to K on near I I I think I don't want to speak on behalf of ever but I don't think that's the right question no this no no this is to all of you like yeah no it's it's very I can take it but want to hear other opinions if if we have any first Owen you've been rocking your mustache in the top left corner what two would you like to see on here too tired to answer that question don't pick on me I think like and I was

87. 46:15

    wondering why uh I personally haven't seen like in terms like in context of the question that we had on telegram is like okay maybe a tool that deploys multi cont contract to your account and then you have to verify it or you have to get the confirmations for uh the rest of the attendees of the multic uh to actually execute a transaction or transfer assets or like make an action there are actually three contracts implementations out there that are very

88. 46:48

    widely used uh one I'm I'm sure you know is putting da uh which was part of the um astrow initially um but let's cover the next ones there was a very first one which was called multi and then there was was multis for2 those are still in in in um in the wild they are used by foundation and some other folks the deficiencies of those are that uh they rely on the on the feature of near having multip keys but then you uh you cannot tell like who is actually holding the key you just need

89. 47:33

    to have two keys to sign the um the transaction to to go forward so basically you first you submit a proposal kind of uh and then the second transaction is just acting on the proposal like voting kind of uh but then the yeah the limitation of the approach is that uh it's very hard to you basically have multiple people having the access to One account and you can tell aart who actually ex part it which is sometimes it's good uh in terms of like I don't know

90. 48:10

    anonymity uh you still can you know um bu like understand who actually signed the like transaction when uh but other than that it doesn't leak the user name or any like that but the uh spin Dow is much more powerful and this is the direction to go and this is what infrastructure committee expressed as the um like best option right now to go with is to continue building the uis for splitting

91. 48:46

    down so they it's we shouldn't really invest time into editing it it it was pretty well thought initially it is very powerful contract and it was audited it was Battle tested for years so the decision was said okay let's keep it as this and uh the problem is the UI surprisingly people cannot really uh operate complex apps especially when you when it's involved you know um complex proposal to

92. 49:20

    execute on chain through the uh SP D becomes a very nested thingy to um to put into it so we need to simplify it and there wasn't there was an RFP from request for uh proposals from infrastructure committee regarding the treasury management tool built on top of the down yeah in the in the context of the question that we had on telegram they were like uh is there are there any like user facing product so is there a

93. 49:52

    new ey exactly what you brought up that it's the hard part so we figure out so many complex tasks and projects and whatever CSS and UI is something that we still haven't figured out uh in general in programming but yeah so the user was actually asking like is there a user facing project so basically is there a fonted for this and I was searching like I was thinking about like yeah I haven't seen that many so uh contributional project opportunities anyone write it

94. 50:21

    down and contribute and build it uh speaking for contribution uh opportunities um so they are plenty of those around so first of all there are plenty contributions that need to be done to the docs join that if you want to open your first proposals like first PR Doc is an amazing place to contribute to um near falet it's like we we are all familiar with the F set Concepts in general and it has come to my attention that the smart contract for it haven't been updated for quite some time now so

95. 51:01

    in the links below there would be the the link to the near test net fet contract so if you want to contribute to that bring it to sdk5 or contribute to the front end just hit them up make a PR we I would gladly review it uh speaking of which what you have missed for the past nearly month or at least some of the things that you have missed is uh that they were up to the create near app to the near J Json RPC client rest near

96. 51:32

    Cy RS has a fcy loading uh animation over there and speaking for the near um C and actually quite a few more more will be on the links below uh all of these if you have missed all this and much much more I would gladly suggest you to join the devhub newsletter and you would receive like a weekly update of all that it's happening into the developer ecosystem of near uh so but speaking on the CLI uh this has been

97. 52:03

    going issue for a while we you I assume most of you already know that we have two CIS which are currently on the final stages I believe that are going to be merged so no longer we will have two types of different commands to execute the same thing is uh that is interacting with our favorite blockchain so test are already like being written and soon we'll have to uh we'll have to no we'll have a single CLI tool to interact with

98. 52:35

    so this would be amazing uh so more on that uh just follow the dev newsletter or join the dev channel uh or the tooling Channel you can also find below so if you want to contribute hit those two groups ask if he if there is some help needed it around and we'll definitely hook you up I see that there are two hands raised up Owen uh I just wanted to touch on the the multisig I think on the foundation

99. 53:04

    working on a front end for multisig I think from the uh the core contracts either one or two um yeah is one yeah um Can anyone answer me what is the difference between multisig and multisig 2 does anyone know the the answer to that because I I had a look and I couldn't figure it out without diving right in well maybe that's something that a property based testing can answer your question uh no but

100. 53:46

     like questions would be below uh check them out uh if you see any dramatic differences that needs to be brought up to attention let us know and yeah a heat uh raise 10 yeah so like a two things uh one is faucet probably uh we can add a faucet so that people can make a really good UI and then uh uh I can help like we can help with that uh task if you need but another thing like a um I always want to

101. 54:23

     ask is like a next quarter if from this community if there is one or two feature that you think will be really helpful for you or even uh new people on boarding um uh that you don't have to like if you can tell me now that would be wonderful but like a uh we can add like a one or two feature that uh uh for the community so we have a road map uh but like a next quarter I'll I'll submit our update but for next quarter we can have like one or two uh

102. 55:02

     Community request so fet if it is important we can uh I don't know like if I just had for contribution opportunities uh so if somebody wants to learn a little bit about near or the test net faet is a nice project it's out there I can help you out and guide it for like guide you around it so this is the reason that I added it personally outside of the scope of tool to be honest or maybe not so much outside of the scope I personally think helping people to be on board that like a tool

103. 55:35

     like maybe learning manager learn management solution like a G app that we have uh for JavaScript contracts or some kind some kind of learning management tool or maybe kind of rustlings for near or something like that personally to me like a learning to would be something amazing to have I think so that's my personal opinion um and that's why I am also well I'm also interested in tooling projects uh hence here uh and so that's why I'm I keep asking people like hey

104. 56:09

     people like what do you miss so it's not only in this go the people on telegram Discord so if there's something that you're missing um bring it up and let's see what we can do about it so personally I would love to see like more coding challenges or like RS in term of Education that's my two sense I don't know anyone else no okay so on for joining the a to community call uh so if you want to get if you want to get involved join the near to community group if you want to get in

105. 56:52

     touch in any of the today's presenters and many more uh do join it as well also there is the near De group where we can talk uh and like all things development on near uh don't forget to subscribe to the near devhub newsletter to receive weekly updates tomorrow as every Thursday there is the dev Hub live where Joe is presenting for live for around around an hour and to understand and to see all our uh community calendar and

106. 57:25

     events just join the devhub community cender you get informed and yeah if you want to present your project just discussion topics hit us up and I hope to see you on the next one bye