What Vexor Has Accomplished
Docs-site note (2026-06-25, refreshed 2026-07-16): This is the "proven track record" page of the Vexor
documentation site, modeled on the structure and feel of docs.anza.xyz /
anza.xyz. Everything listed here is genuinely shipped and proven — either running
in the deployed testnet binary and voting bank-exact, or proven by an offline-replay / golden-vector gate.
Work that is partial, dormant scaffolding, or still open lives on the Roadmap, not here.
Style: clean headings, plain language, every claim grounded in source or measurement.
How to read this page — the proof bar
Vexor is a clean-room, fully Zig-native Solana validator. The bar for a milestone to appear on this page is
deliberately strict. Each one carries the type of evidence that backs it:
| Proof tier |
What it means |
| Live — bank-exact |
Deployed in the testnet binary; the node votes CURRENT and its bank hash matches the cluster. |
| Offline-replay bank-exact |
A rooted slot range re-replayed offline (no network) reproduces the cluster's bank hash exactly. |
| KAT / golden-vector |
Verified byte-for-byte against an Agave v4.2.0-beta.0 reference vector. May be dormant / feature-gated (compiled in, off by default, zero consensus-path effect until enabled). |
The single source of truth for done-vs-open is the internal canonical status doc; this page reflects only its
DONE + in-the-deployed-binary set.
Consensus & voting
| Milestone |
Proof |
| Bank-exact voting on live testnet |
Live — node votes CURRENT, bank hash matches the cluster, zero divergence. This is the foundational milestone: Vexor stays in consensus byte-for-byte. |
| Per-tx cost-skip divergence fixed (#43) |
Live — execute-regardless on both the DAG and wave replay paths; deployed and voting CURRENT bank-exact. Offline gate: DAG 66/66 + WAVE 70/70 match with the over-cap branch forced. |
| Epoch-977 feature-activation boundary |
Live — featureActiveAtSlot overlay reads in-flight feature activations correctly across the epoch boundary; deployed, voting bank-exact across the boundary. |
| VoteState V4 (SIMD-0185) |
Live — vote-state serialization handled correctly on the voting path. |
| Vote-credit coverage — near-parity credit accrual |
Live — a vote-targeting fallback path was silently withholding votes on a deterministic subset of slots tied to leader-window position, not a cluster-specific issue. Fixed and deployed; Vexor now earns ~98.7% of maximum available vote credits (measured against the theoretical 16-per-slot ceiling), on par with the Agave reference node Vexor operates alongside it. |
| Epoch-boundary Clock + Vote-Account-Table fixes |
Live — two independent boundary-time bugs fixed: the stake-weighted Clock sysvar estimator now recomputes its drift anchor every slot instead of caching it once per epoch (the stale anchor could drift the on-chain clock a full second late near a boundary), and vote-account candidacy for the rewards table is now correctly keyed on stake at the new epoch rather than the previous one. Deployed and gate-proven cluster-faithful across a full epoch-boundary window (1992/1992 slots byte-identical to the canonical reference). |
| Switch-proof fork-escape hardening |
KAT / golden-vector — the tower's cross-fork switch-proof now observes both landed and gossip-relayed votes (the canonical two-source model), instead of only the node's own landed-vote view, which could under-observe cluster stake during a fork and stall a legitimate fork switch. Slashing-safe by construction (it only ever adds observed stake, never removes lockout protection). Proven with 5/5 new fork-rescue test vectors plus a clean 1992/1992 golden replay; staged for the next deploy. |
| Epoch-990 inflation-rewards ULP fix |
Live — the epoch-boundary inflation/reward calculation used a floating-point pow whose last-bit rounding differed from the reference C library by one ULP on a specific epoch's input, which flipped the computed reward pool by exactly one lamport and diverged the bank hash. Root-caused to the exact bit, fixed by routing that computation through a pow implementation byte-identical to the reference libraries, and proven against an offline replay reproducing the canonical bank hash exactly. See Incident Postmortems. |
Vote program — clean-room rewrite, now live
Vexor's vote-instruction execution has been rewritten from scratch, replacing an earlier reference-derived
implementation with 100% Vexor-authored code, built directly from the Agave 4.2 specification and shaped after
Firedancer's zero-allocation, flat-buffer instruction handling. Vote instructions are Vexor's single largest
execution cost — roughly 98% of all testnet transaction signatures — so this is the highest-leverage rewrite in
the client. See The Vote Program for the full technical write-up.
| Milestone |
Proof |
| Full Vote/TowerSync instruction family rewritten |
Offline-replay bank-exact + KAT — every vote instruction Agave 4.2 defines (Authorize, Withdraw, TowerSync, credit/lockout processing, root advancement, and more) has a fresh Vexor implementation, validated with 249 unlocked reference tests (0 failures) plus over 200 new hand-written test vectors. |
| Differential validation against real traffic |
Offline-replay bank-exact — before promotion, the new implementation ran in parallel with the prior path in an A/B oracle and was checked instruction-by-instruction against 990,000 real vote instructions captured from a live epoch-boundary window: zero mismatches. The full golden replay gate (1,992 slots) passes byte-identical with either path active. |
| Meaningfully faster |
Measured — the new execution path runs at ~1,898 ns per vote instruction versus ~8,926 ns for the path it replaces — 4.7× faster — while producing byte-identical output. |
| Live as the sole production vote executor |
Live — bank-exact — Vexor's rewrite is the only implementation that commits state for every vote instruction on the testnet node; no build flag selects it. The prior, Sig-derived implementation ran as a live shadow-comparison oracle (zero mismatches observed) through its soak, then was deleted outright (Stage 8, 2026-07-12, −31,181 lines). |
Status: live in production, fully retired. The rewrite executes every vote instruction on Vexor's testnet
node today. The prior implementation completed its shadow-comparison soak spanning a full epoch boundary with
zero mismatches and has been deleted outright, along with its build flags — see
The Vote Program for the full history.
Block production
| Milestone |
Proof |
| Empty-block production proven + cluster-accepted |
Live — the turbine real-stakes fix produces blocks the cluster accepts, sustained across a full epoch: 152 of 156 leader slots produced (~97.4%), confirmed via public RPC (getBlockProduction) and independent skip-rate monitoring (validators.app). The pre-fix path was 0/24 (uniform-stake stub). Note: these blocks are empty — transaction-bearing production is still in progress (see Roadmap), not claimed here. |
Runtime & SVM
| Milestone |
Proof |
| Zig-native sBPF VM (v0/v1/v2/v3) |
Live + KAT — Vexor's own clean-room sBPF interpreter; v3 region-layout fix and v1/v2 routing to the V2 engine are on the live path. (Interpreter-based, matching Firedancer's approach.) |
| Parallel transaction execution (WavePool) |
Live — wave-barrier parallel executor; Stage A/B/C passed, deployed, bank-exact under live cluster load. |
| System-program CPI nonce (Tier-1 + Tier-2) |
Live — Authorize / Upgrade / Advance / Withdraw / Initialize nonce operations via CPI handled bank-exact. |
| ZK ElGamal proof program (SIMD-0153) |
Live — confidential-transfer proof verification ported clean-room, wired into the live builtin dispatch, deployed voting bank-exact (replaces a former silent no-op stub). |
| SIMD-0449 direct-account-pointers serializer |
KAT / golden-vector — byte-exact against a v4.2.0-beta.0 reference vector. Dormant, feature-gated (off on the live path until the feature activates). |
| Compute-unit metering audit vs Agave 4.2 |
Live — the syscall/CPI cost-accounting surface (per-CPI invoke units, hash-syscall byte costs, heap cost, loader entry costs, the loaded-accounts-data-size gate) was audited against the Agave 4.2 cost model and fixed; compute-unit metering is verified byte-parity against the anchored Agave 4.2 reference and deployed. |
Crypto syscalls
| Milestone |
Proof |
| alt_bn128 / bn254 + Poseidon syscalls |
Live + KAT — group ops, compression, and Poseidon hashing backed by leaf-crypto matching Agave v4.2.0-beta.0 byte-for-byte; deployed, voting bank-exact. |
| Pure-Zig crypto backend (FFI-free) |
Live — ed25519, BLAKE3, BN254/alt_bn128, and Poseidon rewritten from scratch in Zig (src/vex_crypto/, build flag -Dpure_zig), replacing the earlier Firedancer Ballet FFI backend. Verified byte-exact against known-answer test vectors — including published solana-bn254 / EIP-197 / go-ethereum vectors for BN254 — and against live cluster parity; deployed as the canonical production backend, zero Firedancer symbols linked at runtime. |
BLS12-381 + solBigModExp (variable CU) |
Live — additional curve / big-modular-exponentiation syscalls on the live path. |
| curve25519 abort-vs-soft semantics |
Live — error-handling semantics match Agave exactly. |
Networking
| Milestone |
Proof |
| Native QUIC votes |
Live — QUIC max_streams_uni receive path fixed so votes flow over native QUIC; deployed. |
| AF_XDP fast-path ingest |
Live — kernel-bypass packet ingest active on the deployed node. |
| FEC-set ed25519 dedup |
Live — duplicate-shred dedup on the FEC path, proven bank-hash-neutral on live shreds (0 rejects, bank-exact through the deduping path). |
| Network citizenship |
Live — turbine retransmit and repair DoS hardening on the live path. |
Storage — VexLedger
| Milestone |
Proof |
| VexLedger live as the node's blockstore |
Live — Vexor's 100% Zig append-segment blockstore (a behavioral drop-in for Agave's RocksDB) runs on the voting node, stays bank-exact under load, ~1× write amplification. See VexLedger. |
| v4.2.0-beta.0 byte-fidelity — zero drift |
KAT / audit — every interop-facing record (column-family names, big-endian keys, wincode/protobuf value codecs, RPC JSON) audited byte-for-byte against Agave v4.2.0-beta.0 in two independent passes; verdict zero drift. |
| Offline bank-exact replay (6/6) |
Offline-replay bank-exact — any rooted slot re-replayed offline with no network reproduces the cluster's bank hash; 6/6 on a pinned rooted slot range. This is what makes Vexor a carrier engine and underpins the divergence-forensics tooling. |
RPC
| Milestone |
Proof |
| Core account & program RPC |
Live — getMultipleAccounts, getProgramAccounts, getHighestSnapshotSlot, and getBlock history implemented. |
| Canonical RPC tier split |
Live — --full-rpc-api tier split: the voting node serves only the Minimal-trait methods and returns canonical -32601 for full/bank-data methods until full RPC is enabled — exactly matching Agave's tiering. |
Snapshots
| Milestone |
Proof |
| Snapshot loading |
Live — the mmap parallel loader reads Agave-format snapshots (~86.7M accounts) in a few seconds on every boot; full-snapshot lt-hash verification against the archive. |
| Feature-status watcher |
Live — read-only feature-activation watcher on the live replay path. |
Note: snapshot creation (writing a .tar.zst archive a peer can boot from) is partial — not yet complete (the account writer exists; a Zig-native zstd encoder + manifest assembly are the remaining work). It is tracked on the Roadmap, not claimed here. Snapshot loading is fully done.
Attribution & provenance
| Milestone |
Proof |
Provenance ledger (PROVENANCE.md) |
Live — a maintained, single-source ledger mapping every Vexor file/function that reimplements, ports, or byte-exact-matches upstream Agave/Firedancer/Sig behavior, keyed by stable @prov: anchors in source rather than line numbers. Replaces scattered inline comments and keeps the attribution trail and the parity-maintenance trail in one place. |
Project-level attribution (NOTICE) |
Live — states plainly that Vexor is an original reimplementation, not a fork, that credits Agave/Firedancer/Sig as reference implementations and differential test oracles, and that Vexor links none of their code at runtime (crypto is pure-Zig; see above). |
The headline four
If you read nothing else:
- Bank-exact voting on live testnet. Vexor votes CURRENT and its bank hash matches the cluster byte-for-byte
— the whole validator is in consensus, not just a subset of it.
- The vote program — Vexor's most-executed code path — is a clean-room rewrite, live in production. Verified
against 990,000 real vote instructions with zero mismatches and 4.7× faster than the implementation it
replaces.
- Block production proven, sustained. The turbine real-stakes fix produces blocks the cluster accepts at
~97.4% of leader slots (152/156) across a full epoch (empty blocks; tx-bearing is on the roadmap).
- VexLedger — a clean-room Zig blockstore, live and zero-drift. Running as the node's blockstore, audited to
zero drift against Agave v4.2.0-beta.0, with offline bank-exact replay proven 6/6.
For what is still in progress or deliberately deferred, see the Roadmap. The bar for this page is
intentionally high: if an item is partial, dormant-only-with-no-live-equivalent, or open, it is on the roadmap —
not here.