Purpose

This document summarizes the protocol-level work completed under four Livepeer engineering and security grants since March 2025. It compiles the upgrades delivered, security investigations performed, related tooling improvements, and the backlog of items prepared for release. The intent is to provide historical context relevant to evaluating readiness for responsibilities defined in the Protocol R&D SPE.

1. Background

Since March 2025, sidestream has supported Livepeer through two published grants and two retainer engagements. Their work has involved upgrade engineering, incident response, Immunefi triage, and enhancements to the release and simulation pipeline. Through these engagements the team has developed working familiarity with the protocol codebase, upgrade workflow, and Security Committee processes.

2. Work Delivered Under Prior Grants

Protocol Upgrades

• Implemented the inflation-bounds Minter update
• Designed and tested an upgradable Minter proxy architecture
• Built two independent implementations of Reward Call Delegation (1, 2).
• Contributed analysis for potential job-type tracking extensions

Security Work

• Reproduced and analyzed multiple Immunefi submissions across varying severity levels
• Provided mitigation proposals and verified fixes
• Supported the Foundation and Security Committee during incident investigations and patch development

Tooling & Release Infrastructure

• Extended internal governor-scripts tooling to support:
  • reproducible deployments
  • local + virtualized upgrade simulations
  • devnet/testnet configuration workflows
• Contributed improvements to simulation environments used for upgrade validation

These contributions form the basis of a more reliable release and testing pipeline envisioned under the SPE.

3. Backlog Items Ready for Release

Several items have been fully implemented or are near completion and require coordinated release engineering, validation, and Security Committee sequencing: