Repository navigation

security: establish offline signer architecture and open source governance - #1

Merged

neomaike merged 74 commits into

mainfrom

audit/cold-wallet-security-architecture-20260907

Sep 8, 2026

Merged

security: establish offline signer architecture and open source governance#1
neomaike merged 74 commits into
mainfrom
audit/cold-wallet-security-architecture-20260907

Commits on Sep 7, 2026
- docs(audit): record baseline and git stabilization
  neomaike
  committed
  0f4facd
- docs(security): add threat and trust-boundary model
  neomaike
  committed
  3710fe6
- fix(bitcoin): enforce complete address checksum validation
  neomaike
  committed
  aabfbbe
- fix(dashboard): harden local API request validation
  neomaike
  committed
  e43d1d9
- test(bitcoin): add public bech32m checksum vector
  neomaike
  committed
  f760ee6
- docs(audit): record remediation and test evidence
  neomaike
  committed
  92a2993
- docs(test): clarify runner process cleanup evidence
  neomaike
  committed
  32f6e18
- docs(audit): record C3 baseline
  neomaike
  committed
  042423c
- docs(security): record C3 design and envelope contract
  neomaike
  committed
  023e188
- refactor(dashboard): remove secret-capable dependencies
  neomaike
  committed
  b5af01a
- feat(signer): add offline Ethereum signing policy
  neomaike
  committed
  8edd973
- feat(transport): add atomic artifacts and Tor adapter
  neomaike
  committed
  e71082d
- feat(broadcaster): add persistent idempotency
  neomaike
  committed
  6806d76
- fix(setup): block unverified runtime installation
  neomaike
  committed
  5767af4
- test(architecture): enforce trust boundaries
  neomaike
  committed
  ea83a5a
- feat(signer): add local eth-account backend
  neomaike
  committed
  9c1fcb4
- docs(audit): record C4 evidence
  neomaike
  committed
  aa3202e
- docs(audit): record C5 baseline
  neomaike
  committed
  f62b6aa
- build(deps): add reproducible hashed dependency locks
  neomaike
  committed
  12e4260
- feat(signer): enable verified EIP-1559 signing
  neomaike
  committed
  8c43bf0
- feat(bitcoin): integrate validated PSBT signing
  neomaike
  committed
  597072f
- refactor(network): migrate active clients to Tor adapter
  neomaike
  committed
  ef7355d
- feat(broadcaster): complete recoverable broadcast workflow
  neomaike
  committed
  b043805
- feat(disposable): add transactional address lifecycle
  neomaike
  committed
  b5da148
- feat(storage): add isolated legacy dry-run detector
  neomaike
  committed
  e462272
- build(deps): lock reproducible PSBT build tools
  neomaike
  committed
  1fbf37a
- docs(audit): record C5 evidence
  neomaike
  committed
  1c39fae
- docs(audit): correct C5 gate verdict
  neomaike
  committed
  e285c21
- docs(audit): record C6 baseline
  neomaike
  committed
  a6fcf43
- fix(bitcoin): gate PSBT signing on backend provenance
  neomaike
  committed
  bc8ec12
- feat(ethereum): add recoverable idempotent broadcaster
  neomaike
  committed
  6f7bd4d
- feat(coordinator): integrate proposal and lifecycle stores
  neomaike
  committed
  dd03d61
- refactor(bitcoin): move PSBT review to coordinator boundary
  neomaike
  committed
  dd52bcf
- refactor(legacy): block parallel network entrypoints
  neomaike
  committed
  bd54619
- build(deps): add platform-specific lock workflow
  neomaike
  committed
  f14db39
- test(architecture): enforce converged trust boundaries
  neomaike
  committed
  9b99b38
- docs(security): remove unsupported legacy claims
  neomaike
  committed
  d07baee
- docs(audit): record C6 evidence and residual risks
  neomaike
  committed
  51dec97
- docs(audit): record C7 ownership baseline
  neomaike
  committed
  bfaaf12
- fix(bitcoin): expose explicit backend approval states
  neomaike
  committed
  3cbb5df
- feat(coordinator): expose watch-only workflow API
  neomaike
  committed
  ddabbb1
- chore(legacy): quarantine unsafe entrypoints
  neomaike
  committed
  883ffcd
- feat(storage): add authenticated fixture backup format
  neomaike
  committed
  2ceaf8d
- feat(dashboard): add guided offline workflow
  neomaike
  committed
  cdd6078
- chore(legacy): block remaining writable dispatchers
  neomaike
  committed
  c0b9873
- docs(security): document C7 watch-only workflow
  neomaike
  committed
  d06b9d2
- docs(audit): record C7 evidence
  neomaike
  committed
  2ef5be3
- docs(audit): record C7.1 ownership verification
  neomaike
  committed
  dd53d6e
- test(storage): verify authenticated backup and restore
  neomaike
  committed
  a2446c5
- chore(legacy): remove unsafe wallet implementation
  neomaike
  committed
  51c1fac
- chore(windows): remove unsafe legacy scripts
  neomaike
  committed
  16a0f94
- test(security): enforce absence of legacy paths
  neomaike
  committed
  a1f3de9
- docs(security): align current supported capabilities
  neomaike
  committed
  b0b5f05
- test(storage): make nonce and salt checks deterministic
  neomaike
  committed
  7c798af
- docs(audit): record C7.1 evidence
  neomaike
  committed
  88fadf9
- docs(audit): record C7.2 ownership verification
  neomaike
  committed
  04d3a3a
- chore(rpc): remove unsupported infrastructure
  neomaike
  committed
  3f647bc
- test(security): validate final repository convergence
  neomaike
  committed
  5a79221
- docs(security): align RPC guarantees
  neomaike
  committed
  d0ff76d
- docs(audit): record C7.2 evidence
  neomaike
  committed
  2bca54e
- docs(audit): record blocked native Windows C8 baseline
  neomaike
  committed
  99168af
- build(windows): add fail-closed C8 validation harness
  neomaike
  committed
  5a1ccee
- docs(security): prepare controlled native Windows validation
  neomaike
  committed
  59c7b54
- docs(audit): record C8 blocked evidence
  neomaike
  committed
  57e35f3
- docs(audit): add verified Linux-to-Windows checkpoint
  neomaike
  committed
  f02fc43
- docs(audit): normalize checkpoint formatting
  neomaike
  committed
  5fdb89b
- fix(windows): bind handoff to verified checkpoint
  neomaike
  committed
  e2d60c8
Commits on Sep 8, 2026
- fix(windows): correct C8.2.1 execution handoff
  neomaike
  committed
  f39b529
- docs: establish open source project governance
  neomaike
  committed
  9bff359
- ci: add deterministic non-deploy validation
  neomaike
  committed
  99e2d8e
- test: clarify synthetic idempotency fixture
  neomaike
  committed
  c31b54e
- test: enforce scoped secret scan allowlist
  neomaike
  committed
  e337083
- docs: prepare experimental release metadata
  neomaike
  committed
  033f434
- ci: make payload-limit test portable
  neomaike
  committed
  71e0052

Commits

Commits on Sep 7, 2026

Commits on Sep 8, 2026