
Jernej Kos developed and maintained core infrastructure for the Oasis Protocol ecosystem, focusing on secure, reliable deployment and runtime management across repositories like oasis-sdk and oasis-core. He engineered features such as granular access control, persistent storage, and containerized runtime orchestration, leveraging Go and Rust to implement robust backend systems and CLI tooling. His work included integrating cryptographic primitives, enhancing observability, and automating release workflows, which improved deployment reliability and security posture. By upgrading dependencies, refining build systems, and aligning documentation, Jernej ensured deterministic, scalable deployments. His contributions demonstrated deep expertise in distributed systems, system programming, and secure API design.

Month: 2025-10 — This month focused on stabilizing runtime, improving observability, and accelerating release readiness across oasis-sdk, sapphire-paratime, oasis-core, and cli. Delivered key features, mitigated security and CVE risks, upgraded core dependencies, and streamlined container runtimes to support upcoming testnets and production deployments. Outcome: more reliable deployments, faster troubleshooting, and a stronger foundation for next quarter.
Month: 2025-10 — This month focused on stabilizing runtime, improving observability, and accelerating release readiness across oasis-sdk, sapphire-paratime, oasis-core, and cli. Delivered key features, mitigated security and CVE risks, upgraded core dependencies, and streamlined container runtimes to support upcoming testnets and production deployments. Outcome: more reliable deployments, faster troubleshooting, and a stronger foundation for next quarter.
Month: 2025-09 monthly summary focusing on security, stability, and deployment reliability across oasis-sdk and oasis-cli. The work delivered reinforces business value by strengthening access control, ensuring deterministic deployments, and enhancing observability and deployment workflows for ROFL. Key outcomes include granular machine permissions, unique deployment hashes per scheduler instance, improved stability during instance removal, and up-to-date dependencies and release artifacts.
Month: 2025-09 monthly summary focusing on security, stability, and deployment reliability across oasis-sdk and oasis-cli. The work delivered reinforces business value by strengthening access control, ensuring deterministic deployments, and enhancing observability and deployment workflows for ROFL. Key outcomes include granular machine permissions, unique deployment hashes per scheduler instance, improved stability during instance removal, and up-to-date dependencies and release artifacts.
August 2025 summary: Delivered release-focused enhancements, reliability hardening, and runtime readiness across Oasis Core, CLI, Sapphire Paratime, Oasis SDK, and Docs. Key activities centered on a transparent 25.5 release (change log updates and version bump), ROFL feature/infra improvements to enhance deployment and upgrade flows, targeted security and stability fixes, and documentation alignment to reflect latest Sapphire and Cipher ParaTimes. These workstreams reduced upgrade risk, improved operator usability, and increased trust in releases and runtime readiness.
August 2025 summary: Delivered release-focused enhancements, reliability hardening, and runtime readiness across Oasis Core, CLI, Sapphire Paratime, Oasis SDK, and Docs. Key activities centered on a transparent 25.5 release (change log updates and version bump), ROFL feature/infra improvements to enhance deployment and upgrade flows, targeted security and stability fixes, and documentation alignment to reflect latest Sapphire and Cipher ParaTimes. These workstreams reduced upgrade risk, improved operator usability, and increased trust in releases and runtime readiness.
July 2025 monthly summary for Oasis projects focused on delivering reliable ROFL platform capabilities, strengthening security and deployment reliability, and advancing testnet readiness and policy governance across Oasis SDK, Oasis Core, Sapphire Paratime, and CLI. Key features delivered across repos include ROFL scheduler improvements and releases, core platform modularization with policy enhancements, ROFL proxy networking, and timely runtime/tooling upgrades that drive platform stability and business value for testnets and upcoming releases.
July 2025 monthly summary for Oasis projects focused on delivering reliable ROFL platform capabilities, strengthening security and deployment reliability, and advancing testnet readiness and policy governance across Oasis SDK, Oasis Core, Sapphire Paratime, and CLI. Key features delivered across repos include ROFL scheduler improvements and releases, core platform modularization with policy enhancements, ROFL proxy networking, and timely runtime/tooling upgrades that drive platform stability and business value for testnets and upcoming releases.
June 2025 monthly summary across Oasis Protocol repos highlighting key features delivered, major fixes, business impact, and technologies demonstrated. Focused on aligning documentation with code, upgrading dependencies, expanding CLI capabilities, improving observability, hardening security, and stabilizing scheduler deployments.
June 2025 monthly summary across Oasis Protocol repos highlighting key features delivered, major fixes, business impact, and technologies demonstrated. Focused on aligning documentation with code, upgrading dependencies, expanding CLI capabilities, improving observability, hardening security, and stabilizing scheduler deployments.
May 2025 monthly performance summary across Oasis projects focused on delivering concrete business value, improving reliability, and enabling faster release cycles. Key user-facing updates included the Testnet Runtime Documentation updates to reflect the latest runtime bundles (Sapphire 0.10.3-testnet, Cipher 3.3.3-testnet) and the Key Manager 0.6.0-testnet. Core runtime and security enhancements advanced verification and artifact workflows, while release engineering and tooling improvements streamlined pre-release releases and dependency management. The month also delivered robust developer tooling, scalable build hygiene, and groundwork for mainnet readiness.
May 2025 monthly performance summary across Oasis projects focused on delivering concrete business value, improving reliability, and enabling faster release cycles. Key user-facing updates included the Testnet Runtime Documentation updates to reflect the latest runtime bundles (Sapphire 0.10.3-testnet, Cipher 3.3.3-testnet) and the Key Manager 0.6.0-testnet. Core runtime and security enhancements advanced verification and artifact workflows, while release engineering and tooling improvements streamlined pre-release releases and dependency management. The month also delivered robust developer tooling, scalable build hygiene, and groundwork for mainnet readiness.
April 2025 contributions across oasis-sdk, cli, oasis-core, sapphire-paratime, and docs focused on delivering ROFL Market capabilities, reliability hardening, and infrastructure upgrades. Key outcomes include: (1) ROFLMarket Go SDK core enhancements with fixed-size IDs, batch InstanceUpdate, and improved ID representations; (2) reliability fixes for ROFL Market including correct InstanceCreate signaling, instance status validation, improved gas estimation, command count management, offer capacity handling, and CBOR serialization fixes; (3) new rofl app runtime verification to validate transactions against consensus state; (4) broad infra and dependency upgrades (CI improvements, Oasis Core upgrades to 25.x, Docker image updates, and updated Rust dependencies); (5) CLI deployment enhancements for ROFL market with Dockerized builders and environment-based execution, plus Oasis Core v25.2 compatibility; (6) testnet documentation updates aligning with Sapphire and Oasis Core versions.
April 2025 contributions across oasis-sdk, cli, oasis-core, sapphire-paratime, and docs focused on delivering ROFL Market capabilities, reliability hardening, and infrastructure upgrades. Key outcomes include: (1) ROFLMarket Go SDK core enhancements with fixed-size IDs, batch InstanceUpdate, and improved ID representations; (2) reliability fixes for ROFL Market including correct InstanceCreate signaling, instance status validation, improved gas estimation, command count management, offer capacity handling, and CBOR serialization fixes; (3) new rofl app runtime verification to validate transactions against consensus state; (4) broad infra and dependency upgrades (CI improvements, Oasis Core upgrades to 25.x, Docker image updates, and updated Rust dependencies); (5) CLI deployment enhancements for ROFL market with Dockerized builders and environment-based execution, plus Oasis Core v25.2 compatibility; (6) testnet documentation updates aligning with Sapphire and Oasis Core versions.
March 2025 performance highlights across Oasis SDK, CLI, sapphire-paratime, docs, and oasis-core. Delivered core features to accelerate runtime deployment, strengthen security, and unlock future marketplace capabilities, while stabilizing dependencies and documentation for faster onboarding and maintenance. Key features and improvements: - Ephemeral RSA signer key generation for SGXS signatures in the ORC tool to enable signing without explicit public key and signature files, increasing signing flexibility for runtime bundles (Commit e1bf113921bcc340319ae00cbae19587fc1a8760). - ROFL scheduler and deployment enhancements: initial scheduler core, instance creator tracking, node association with faster startup by avoiding unnecessary container rebuilds, and build-time container options (--no-build) for quicker deployments (Commits: bd20d4b7e54c6f20f7489baa985d4189b5fe612c; ef5d4a33d1b7bb75a98d27f268226a0eb986898b; bdccce84964267f56f2ecedd84bb14677d14cc40; 45c552c0840179e49710e48da76f08b2ae85ffab). - ROFL Market Go SDK integration: introduction of roflmarket module with provider, offers, and instances interfaces and implementations (Commit 5c19b82d2a0ebaa41f4e72b1352eee2c0b4050e1). - ROFL CLI and manifest modernization: separating manifest initialization from application creation, improved metadata handling, and validation to support robust deployments (Commits: 6baeed4d2d5134bd5dc7fc9477791a27bc2e4dac; 55cce34b5b82343699be88fde9a9e55711ec0f3d). - ROFL Build: per-component versioning and artifact updates, including updating rofl-containers to v0.4.2 and ensuring manifest versioning is component-scoped (Commits: 508cdb8ba14ae5c91fc4c4c02bcfd0f905de9243; 6f5af9a49c776ac4ed5f681e7bb177a384b908c2). - Oasis CLI and ROFL enhancements: paratime example outputs refreshed for new App create stake threshold; enclave identity population in bundles for SGX/TDX; per-component networking support; and Rust workspace metadata discovery bug fixes (Commits: 668169b846b739ac89c00c0b362175adc068c2d7; a97ac78f15eddf3aed28879d890547991dd83651; 4a8ec4d17b264716105bdef3641c292f8a2170bf; 394f8537bae206c1bd05de13d265b010cc62bd6b). - Infra stability and release readiness: fixed dependency derangements, refreshed Cargo.lock, and updated changelog and versioning script for 25.1 release; mainnet config docs updated to reflect Sapphire 0.9.2 and Cipher 3.2.2; and Oasis Core added volume management and per-component networking (Commits: 5971901cf16671bc3f587592b3ffa4e1f80ec430; def3a6dad844c235dd0ecdb67312de83e3ace229; e809f6cf98057a206391348763c0192112fec15b; b74ac83f514c766f99d8d9bc0cef0b7ceda1328c; b13590f695b7078032885606774894ed01bf1cb8). - Ecosystem readiness: mainnet stability for Sapphire and Roaster readiness, and RoFL bundles push to OCI repositories groundwork, enabling streamlined distribution of ORC bundles (Commits: 1da38c02c2ac46e9b9bc30c1643ae3ff425ffda8; 3e8cd7d45540e4a009485e0807691ea789509be2).
March 2025 performance highlights across Oasis SDK, CLI, sapphire-paratime, docs, and oasis-core. Delivered core features to accelerate runtime deployment, strengthen security, and unlock future marketplace capabilities, while stabilizing dependencies and documentation for faster onboarding and maintenance. Key features and improvements: - Ephemeral RSA signer key generation for SGXS signatures in the ORC tool to enable signing without explicit public key and signature files, increasing signing flexibility for runtime bundles (Commit e1bf113921bcc340319ae00cbae19587fc1a8760). - ROFL scheduler and deployment enhancements: initial scheduler core, instance creator tracking, node association with faster startup by avoiding unnecessary container rebuilds, and build-time container options (--no-build) for quicker deployments (Commits: bd20d4b7e54c6f20f7489baa985d4189b5fe612c; ef5d4a33d1b7bb75a98d27f268226a0eb986898b; bdccce84964267f56f2ecedd84bb14677d14cc40; 45c552c0840179e49710e48da76f08b2ae85ffab). - ROFL Market Go SDK integration: introduction of roflmarket module with provider, offers, and instances interfaces and implementations (Commit 5c19b82d2a0ebaa41f4e72b1352eee2c0b4050e1). - ROFL CLI and manifest modernization: separating manifest initialization from application creation, improved metadata handling, and validation to support robust deployments (Commits: 6baeed4d2d5134bd5dc7fc9477791a27bc2e4dac; 55cce34b5b82343699be88fde9a9e55711ec0f3d). - ROFL Build: per-component versioning and artifact updates, including updating rofl-containers to v0.4.2 and ensuring manifest versioning is component-scoped (Commits: 508cdb8ba14ae5c91fc4c4c02bcfd0f905de9243; 6f5af9a49c776ac4ed5f681e7bb177a384b908c2). - Oasis CLI and ROFL enhancements: paratime example outputs refreshed for new App create stake threshold; enclave identity population in bundles for SGX/TDX; per-component networking support; and Rust workspace metadata discovery bug fixes (Commits: 668169b846b739ac89c00c0b362175adc068c2d7; a97ac78f15eddf3aed28879d890547991dd83651; 4a8ec4d17b264716105bdef3641c292f8a2170bf; 394f8537bae206c1bd05de13d265b010cc62bd6b). - Infra stability and release readiness: fixed dependency derangements, refreshed Cargo.lock, and updated changelog and versioning script for 25.1 release; mainnet config docs updated to reflect Sapphire 0.9.2 and Cipher 3.2.2; and Oasis Core added volume management and per-component networking (Commits: 5971901cf16671bc3f587592b3ffa4e1f80ec430; def3a6dad844c235dd0ecdb67312de83e3ace229; e809f6cf98057a206391348763c0192112fec15b; b74ac83f514c766f99d8d9bc0cef0b7ceda1328c; b13590f695b7078032885606774894ed01bf1cb8). - Ecosystem readiness: mainnet stability for Sapphire and Roaster readiness, and RoFL bundles push to OCI repositories groundwork, enabling streamlined distribution of ORC bundles (Commits: 1da38c02c2ac46e9b9bc30c1643ae3ff425ffda8; 3e8cd7d45540e4a009485e0807691ea789509be2).
February 2025 performance summary: Delivered core ROFL enhancements, security hardening, and core upgrades across Oasis SDK and Core enabling TDx-ready deployments. Key features include ROFL AppD transaction submission endpoints with optional signing and fee proxy integration; ROFL Key Management with scoped keys and DeriveKey restrictions; ROFL Compute Market module enabling providers to offer compute resources and users to manage/pay for instances. Reliability improvements include a watchdog for application re-registration and faster SGX re-attestation retries. Core readiness and tooling improvements were completed with Oasis Core 25.0 upgrade, Oasis SDK 0.12.0 prep for 0.9.2-testnet, TDx-focused docs, and updated artifact/build configurations. Additional robustness improvements in bundle loading and CLI safety guards contribute to deployment reliability and developer experience.
February 2025 performance summary: Delivered core ROFL enhancements, security hardening, and core upgrades across Oasis SDK and Core enabling TDx-ready deployments. Key features include ROFL AppD transaction submission endpoints with optional signing and fee proxy integration; ROFL Key Management with scoped keys and DeriveKey restrictions; ROFL Compute Market module enabling providers to offer compute resources and users to manage/pay for instances. Reliability improvements include a watchdog for application re-registration and faster SGX re-attestation retries. Core readiness and tooling improvements were completed with Oasis Core 25.0 upgrade, Oasis SDK 0.12.0 prep for 0.9.2-testnet, TDx-focused docs, and updated artifact/build configurations. Additional robustness improvements in bundle loading and CLI safety guards contribute to deployment reliability and developer experience.
January 2025 monthly summary focusing on key ROFL runtime and storage enhancements, with CI/CD improvements and broader CLI/core/runtime integration. Delivered secure, scalable features across Oasis SDK, CLI, Oasis Core, Sapphire ParaTime, and Docs that translate to business value: faster deployments, stronger security, and improved operability.
January 2025 monthly summary focusing on key ROFL runtime and storage enhancements, with CI/CD improvements and broader CLI/core/runtime integration. Delivered secure, scalable features across Oasis SDK, CLI, Oasis Core, Sapphire ParaTime, and Docs that translate to business value: faster deployments, stronger security, and improved operability.
December 2024 Monthly Summary: Focused on containerized ROFL capabilities, TDX runtime flexibility, and dependency health across oasis-sdk, oasis-core, and cli. Delivered a containerized ROFL runtime with environment-based configuration, introduced the rofl-appd REST API with encrypted client calls, extended the SubmitTx workflow with encryption support (X25519-DeoxysII) and key retrieval/decryption, expanded TDX support with drive format handling and default behavior, and enabled container-based ROFL builds in TDX environments. Maintained security posture through Go module bumps and multi-repo dependency updates.
December 2024 Monthly Summary: Focused on containerized ROFL capabilities, TDX runtime flexibility, and dependency health across oasis-sdk, oasis-core, and cli. Delivered a containerized ROFL runtime with environment-based configuration, introduced the rofl-appd REST API with encrypted client calls, extended the SubmitTx workflow with encryption support (X25519-DeoxysII) and key retrieval/decryption, expanded TDX support with drive format handling and default behavior, and enabled container-based ROFL builds in TDX environments. Maintained security posture through Go module bumps and multi-repo dependency updates.
Concise monthly summary for 2024-11 focusing on business value and technical achievements across Oasis projects.
Concise monthly summary for 2024-11 focusing on business value and technical achievements across Oasis projects.
Overview of all repositories you've contributed to across your timeline