CommitWatch RSS
BS
← All projectsBlockstream

Blockstream Jade

Firmware for Jade and Jade Plus Bitcoin hardware wallets.

BitcoinHardware walletsElevated watch
Source repository ↗
Repository coverage

414 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

93security candidates58second-pass queue65AI analyses
10commits · 30 days
67commits · 60 days
198commits · 180 days
414commits · 365 days
Backfill bands
Aug 5 → Feb 6216 seen38 candidatesComplete
Feb 6 → Jun 6131 seen9 candidatesComplete
Jun 6 → Jul 657 seen10 candidatesComplete
Jul 6 → Aug 510 seen0 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

57/100 average clarity
32Strong · 80–100
147Adequate · 60–79
203Thin · 40–59
32Opaque · 0–39
3security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Jon Griffiths2755235157
Mike Tolkachev311110155
Daniel Newton65158055
Mihailo Milenkovic877057
Jamie C. Driver522053
Gustavo Cateim711079
Austin-Fulbright410060
roderico110045
quantpoet111072
tokyovyse110063
cmiguelrn111045
odudex200071
Analysis record

Published AI watches

Last scanned 43 minutes ago

Low 27 AI analysisMessage 86 · Strong
BS BlockstreamBlockstream Jade BitcoinHardware wallets

input: release touch handles before deleting the i2c bus

This commit fixes a bug where the touchscreen driver failed to clean up internal handles when shutting down. On newer ESP-IDF firmware, this cleanup failure caused the device to panic and freeze during boot and when using the camera or QR …

Device freeze/DoS-like symptom on affected hardwareMemory leak fixedNo input validation, authentication, or cryptographic weakness visible
36776fecby Gustavo Cateim+3−01 file
No security note in commit
Open full analysis →Source commit ↗
Low 42 AI analysisMessage 95 · Strong
BS BlockstreamBlockstream Jade BitcoinHardware wallets

Liquid (taproot): add sign_liquid_tx genesis blockhash support

This commit changes how Blockstream Jade handles the 'genesis blockhash' when signing Liquid transactions. Previously, the device only accepted the network's built-in genesis hash. Now it lets users provide a custom genesis hash for test n…

Adds input validation for caller-supplied genesis blockhashPrevents mainnet genesis hash from being used on Liquid test networksRestricts genesis_hash parameter to Liquid networks only
888eff30by Jon Griffiths+82−264 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

rpc: rename get_boolean to get_bool

This commit is a simple rename of two internal helper functions from `rpc_get_boolean`/`rpc_get_boolean_or` to `rpc_get_bool`/`rpc_get_bool_or`, updating all call sites accordingly. There is no change to what the code does, no bug fix, and…

f6e946acby Jon Griffiths+24−2518 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

rpc: refactor app code to use getters with default values

This commit is a straightforward code cleanup that replaces verbose 'read this optional value, or leave the default' patterns with shorter helper functions that do the same thing. There is no change in behavior and no security issue visibl…

b6a07147by Mike Tolkachev+22−348 files
No security note in commit
Open full analysis →Source commit ↗
Low 36 AI analysisMessage 74 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

build: annotate functions returning error codes to ensure they are checked

This commit is a preventive build-hardening change. It adds compiler annotations (WARN_UNUSED_RESULT) to many functions that return success/failure codes, so the compiler will warn if a caller ignores the result. The goal is to catch futur…

Compiler annotation added to enforce checking of error-returning functionsNo specific vulnerability fixed in the diffNo functional code changes or call-site fixes included
909a89aaby Mike Tolkachev+215−15225 files
No security note in commit
Open full analysis →Source commit ↗
Low 42 AI analysisMessage 28 · Opaque
BS BlockstreamBlockstream Jade BitcoinHardware wallets

psbt: fix path size

This commit fixes a small but meaningful bug in how Jade, a hardware wallet, reads key paths from Bitcoin PSBT data. The code was passing the byte size of a buffer when it should have passed the number of 32-bit entries. Depending on how t…

Buffer-size semantic mismatch in security-critical PSBT parsingUse of sizeof() on uint32_t array where element count is expectedCode path involved in 2of3 multisig recovery key identification
9e0c3747by Mike Tolkachev+2−21 file
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

sign_psbt: add early reject on wrong genesis blockhash

This commit fixes a bug in the Blockstream Jade hardware wallet's PSBT (Partially Signed Bitcoin Transaction) signing code. Previously, when the transaction's genesis block hash did not match the expected network, the code set an error mes…

Missing return in error path allows execution to continue after validation failureCross-network genesis hash mismatch not enforced as a hard failurePSBT signing logic accepts mismatched network parameters
56e130b0by Mike Tolkachev+1−01 file
No security note in commit
Open full analysis →Source commit ↗
Low 42 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

main: fix error handling during PIN change

This commit fixes a bug in the PIN-change flow on Blockstream Jade hardware wallets. Previously, if re-encrypting the wallet keys with a new PIN failed, or if the user abandoned the PIN change, the code did not jump to cleanup as intended.…

Missing error-path control flow in cryptographic key handlingPotential use of stale or partially initialized key material after PIN-change failureCleanup bypass in sensitive authentication code path
64c30823by Mike Tolkachev+2−01 file
No security note in commit
Open full analysis →Source commit ↗
Low 39 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

attestation: fix missing cleanup on failed efuse write

This commit fixes a small but real bug in the device attestation setup code for Blockstream Jade, a hardware crypto wallet. When a one-time programmable security fuse failed to burn, the code used to exit immediately without releasing memo…

Missing cleanup on error path in security-critical initializationResource leak on failed efuse writePotential inconsistent attestation state after partial initialization
d37d88b7by Mike Tolkachev+1−11 file
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

attestation: harden error handling of challenge signing

This commit fixes a bug in the Blockstream Jade hardware wallet's attestation signing process. Previously, if signing the attestation challenge failed, the device would send an error message but then continue running the rest of the functi…

Missing return after error path allows fall-through to success-path replyUninitialized output.ext_signature_len could leak stack data or cause undefined behaviorAttestation signing failure could result in sending an invalid attestation reply
ecc5871bby Mike Tolkachev+2−01 file
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 77 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

wallet: fix unhandled wrong asset in wallet summaries

This commit fixes a bug in the Blockstream Jade hardware wallet where a function that tracks assets during transaction signing could fail silently. Previously, if an unexpected or wrong asset was encountered while building a summary of tra…

Unchecked return value from asset_summary_update() in signing pathPotential bypass of asset/balance validation during transaction signingWrong or unknown asset could be silently dropped from wallet summaries
b33cf02bby Mike Tolkachev+18−53 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 85 · Strong
BS BlockstreamBlockstream Jade BitcoinHardware wallets

sign: update output logic, rename and document output flags for clarity

This commit reworks how a Blockstream Jade hardware wallet labels transaction outputs. The key change is that the 'change' flag is now only set when the output is also confirmed as belonging to the wallet ('is ours'). Previously, downstrea…

Change output flag now gated by wallet-ownership flagUI hides change outputs based on single bit with runtime assertionGreen 2of3 outputs no longer marked as change because not marked as wallet-owned
cf79a3aaby Mike Tolkachev+32−245 files
Vendor flagged security relevance
Open full analysis →Source commit ↗
Moderate 57 AI analysisMessage 58 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

esp-idf: update to v5.5.4, take multisig bootloader component from https://github.com/Blockstream/esp-idf/tree/securebootv2_multisig_v5.5.4

This is a large update that pulls in Espressif's ESP-IDF v5.5.4 bootloader code, plus Blockstream's own multi-signature secure-boot patches. Most of the visible changes are routine: support for newer ESP32 chips, larger flash sizes, and a …

Anti-fault-injection assertion (ESP_FAULT_ASSERT) added around TEE flash address validationTEE flash write/erase now rejects operations targeting the active TEE partition rangeSecure Boot V2 extended to support ECDSA-P384 / SHA-384 digests
d931d543by Daniel Newton+3879−1437104 files
No security note in commit
Open full analysis →Source commit ↗
High 72 AI analysisMessage 85 · Strong
BS BlockstreamBlockstream Jade BitcoinHardware wallets

sign_tx: suppress validation/change attribution for green 2of3 outputs

This update fixes a security gap in how Blockstream Jade signs Bitcoin transactions for a specific wallet type called Green 2of3. Previously, the device trusted the connected app to supply a recovery public key and might silently treat an …

Host-supplied recovery_xpub was trusted for change attributionChange output could be misattributed without user confirmationFix suppresses automatic validation for Green 2of3 outputs
0243f239by Mike Tolkachev+17−11 file
Vendor flagged security relevance
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

ui: tidy up message/error activities

This commit is a straightforward code cleanup. It replaces a verbose way of showing on-screen messages and errors with simpler helper functions, and fixes a spelling mistake ('re-encypt' to 're-encrypt'). There is no change to security log…

No security-relevant logic changesRefactoring only: API simplification for UI message displaySpelling correction in user-facing error string
1914ace0by Daniel Newton+162−24625 files
No security note in commit
Open full analysis →Source commit ↗
Low 25 AI analysisMessage 60 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

wire: reduce stack usage sending replies

This commit changes how message context is passed between functions in the Blockstream Jade hardware wallet firmware. Instead of copying the entire message context structure on the stack, functions now receive a pointer to it. The stated g…

Stack usage reduction in embedded firmwarePointer passing instead of structure copyingNo direct vulnerability described in commit message
c41f5fddby Jon Griffiths+65−6429 files
No security note in commit
Open full analysis →Source commit ↗
Informational 24 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

rpc: add show_bip85_bip39_entropy RPC command

This commit adds a new device command that lets a connected computer or phone ask a Blockstream Jade hardware wallet to display an encrypted BIP85 seed-entropy backup as a QR code. The change also tightens validation of the BIP32 index in …

New RPC exposes encrypted BIP85 entropy via on-device QR displayBIP32 index bounds checks added in multiple RPC parameter parsersSensitive stack buffers now marked with SENSITIVE_PUSH/POP in QR reply path
3392661cby Daniel Newton+115−277 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 62 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

docs: add show_bip85_bip39_entropy RPC documentation

This commit only adds documentation for an existing RPC command called show_bip85_bip39_entropy. It does not change any code, so it cannot introduce or fix a security vulnerability by itself.

2e829638by Daniel Newton+37−01 file
No security note in commit
Open full analysis →Source commit ↗
Moderate 57 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

psbt: always confirm green outputs when recovery signing

This commit changes the logic in Blockstream Jade's PSBT signing flow so that, when the hardware wallet is acting as a 'recovery' key for a Green 2-of-3 wallet, it always asks the user to confirm outputs that belong to Green, rather than s…

Logic inversion in authorization/confirmation pathRecovery-key signing path previously trusted Green-classified outputs without user confirmationComment explicitly frames change around inability to verify output ownership in recovery path
a963f628by Jon Griffiths+2−21 file
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 91 · Strong
BS BlockstreamBlockstream Jade BitcoinHardware wallets

mnemonic: gracefully handle invalid bcur-bip39 mnemonics, improve tests

This update fixes how Blockstream Jade handles QR-code-based recovery phrases imported in a specific format (bcur-bip39). Previously, a malformed or invalid recovery phrase could crash the device because the code used internal 'assert' che…

Replaces assertion failures with controlled error returns on malformed mnemonic inputAdds input validation for word count, word length, and empty words in bcur-bip39 parserReduces stack buffer size for mnemonic handling
898b9fb2by Jon Griffiths+94−615 files
Vendor flagged security relevance
Open full analysis →Source commit ↗
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-prioritydisplay: add check for screen power on statusby Mike Tolkachev · 1883d343 · Jun 23, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Mike Tolkachev

display: add check for screen power on status

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-prioritydescriptor: validate registered descriptors when re-loading themby Mike Tolkachev · 0aa7c99c · Jun 23, 2026 · 1 fileMessage 50 · ThinTriage 8Details
Commit message · Mike Tolkachev

descriptor: validate registered descriptors when re-loading them

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
defensive validation
Security candidateattestation: fix missing cleanup on failed efuse writeby Mike Tolkachev · d37d88b7 · Jun 23, 2026 · 1 fileMessage 50 · ThinLow 39Details
Commit message · Mike Tolkachev

attestation: fix missing cleanup on failed efuse write

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
update trustboot or update path
AI analysis · Low 39/100

This commit fixes a small but real bug in the device attestation setup code for Blockstream Jade, a hardware crypto wallet. When a one-time programmable security fuse failed to burn, the code used to exit immediately without releasing memory or undoing earlier setup steps. The fix makes it jump to a cleanup routine instead. The direct risk is mainly a resource leak or partial initialization state on a rare hardware failure, not an obvious remote attack.

Security candidateattestation: harden error handling of challenge signingby Mike Tolkachev · ecc5871b · Jun 23, 2026 · 1 fileMessage 50 · ThinModerate 59Details
Commit message · Mike Tolkachev

attestation: harden error handling of challenge signing

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing boundaryupdate trustdefensive validationsigning or wallet pathboot or update path
AI analysis · Moderate 59/100

This commit fixes a bug in the Blockstream Jade hardware wallet's attestation signing process. Previously, if signing the attestation challenge failed, the device would send an error message but then continue running the rest of the function anyway, potentially sending an invalid or uninitialized reply back to the caller. The fix ensures the function stops immediately after reporting the error.

Lower-priorityassets: fix unchecked fmemopen resultby Mike Tolkachev · b467fb5a · Jun 23, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Mike Tolkachev

assets: fix unchecked fmemopen result

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-prioritylibjade: clear keychain on libjade_stop()by Daniel Newton · 38a0e808 · Jun 23, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Daniel Newton

libjade: clear keychain on libjade_stop()

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-prioritybuild: update QEMU Docker containerby Mike Tolkachev · 05fc59d6 · Jun 23, 2026 · 1 fileMessage 80 · StrongTriage 0Details
Commit message · Mike Tolkachev

build: update QEMU Docker container

Update the QEMU Docker container to keep it buildable with a recent
version of Docker. Also fix issue with non-activated ESP environment
before running make_flash_img.sh.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Lower-prioritytests: update main test suite with descriptor parsing changesby Daniel Newton · be0c5fd3 · Jun 18, 2026 · 1 fileMessage 75 · AdequateTriage 0Details
Commit message · Daniel Newton

tests: update main test suite with descriptor parsing changes

Co-authored-by: Jon Griffiths <jon_p_griffiths@yahoo.com>

75/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Mentions testing or verification
Lower-prioritytests: add liquid descriptor to debug_selfcheck()by Daniel Newton · f1da3eba · Jun 18, 2026 · 1 fileMessage 55 · ThinTriage 0Details
Commit message · Daniel Newton

tests: add liquid descriptor to debug_selfcheck()

55/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
AI review queueddescriptor: add support for liquid confidential descriptorsby Daniel Newton · 0e009e4f · Jun 18, 2026 · 9 filesMessage 73 · AdequateTriage 12Details
Commit message · Daniel Newton

descriptor: add support for liquid confidential descriptors

Show any blinding key details in the descriptor details UX.

Currently supported for debug builds only unless LIQUID_DESCRIPTORS is
defined at build time.

Co-authored-by: Jon Griffiths <jon_p_griffiths@yahoo.com>

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
Lower-prioritywally: update to latest master to pick up liquid descriptor supportby Daniel Newton · baeedee5 · Jun 18, 2026 · 1 fileMessage 50 · ThinTriage 0Details
Commit message · Daniel Newton

wally: update to latest master to pick up liquid descriptor support

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-prioritytest: fix test_generic_multisig_matches_ga_addressesby Mike Tolkachev · bab82e2c · Jun 12, 2026 · 1 fileMessage 85 · StrongTriage 0Details
Commit message · Mike Tolkachev

test: fix test_generic_multisig_matches_ga_addresses

Restores original intent to run blinding key and commitments tests as
inner loops. Also add local wallet registration to fix the issue with
Liquid wallets overwritten by Bitcoin ones and to remove from reliance
on wallet registration tests.

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
Lower-prioritytest: add test case filtering by glob patternby Mike Tolkachev · 9c35e4b6 · Jun 12, 2026 · 1 fileMessage 90 · StrongTriage 0Details
Commit message · Mike Tolkachev

test: add test case filtering by glob pattern

A new CLI option is added allowing selective execution of test cases
filtered by glob pattern applied to JSON test fixtures in test_data/
directory.

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
Lower-prioritytests: add test cases for invalid asset summariesby Mike Tolkachev · 942101fb · Jun 9, 2026 · 3 filesMessage 55 · ThinTriage 0Details
Commit message · Mike Tolkachev

tests: add test cases for invalid asset summaries

55/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
Security candidatewallet: fix unhandled wrong asset in wallet summariesby Mike Tolkachev · b33cf02b · Jun 9, 2026 · 3 filesMessage 77 · AdequateModerate 59Details
Commit message · Mike Tolkachev

wallet: fix unhandled wrong asset in wallet summaries

Verifies that asset_summary_update returns true, otherwise aborts
transaction or PSBT processing with error.

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Explains rationale or failure mode
Why it was queued
signing boundarysigning or wallet path
AI analysis · Moderate 59/100

This commit fixes a bug in the Blockstream Jade hardware wallet where a function that tracks assets during transaction signing could fail silently. Previously, if an unexpected or wrong asset was encountered while building a summary of transaction inputs and outputs, the wallet ignored the failure and continued signing. The patch now checks the function's return value and aborts signing with an error. This could have allowed a malicious or malformed transaction to bypass the wallet's balance checks, potentially misleading the user about what assets were actually being moved.

Security candidatepinserver: update to latest masterby Jon Griffiths · f51613c9 · Jun 8, 2026 · 1 fileMessage 45 · ThinTriage 10Details
Commit message · Jon Griffiths

pinserver: update to latest master

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
authentication path
Lower-prioritypython: sync deps to pinserverby Jon Griffiths · 6f43f541 · Jun 8, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Jon Griffiths

python: sync deps to pinserver

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
Lower-priorityci: disable 1.0 flashing jobsby Jon Griffiths · 1873c5a5 · May 21, 2026 · 1 fileMessage 72 · AdequateTriage 0Details
Commit message · Jon Griffiths

ci: disable 1.0 flashing jobs

These devices do not always cleanly reboot and thus the CI is
not suitable for automatation.

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
Security candidatesign: update output logic, rename and document output flags for clarityby Mike Tolkachev · cf79a3aa · May 16, 2026 · 5 filesMessage 85 · StrongModerate 59Details
Commit message · Mike Tolkachev

sign: update output logic, rename and document output flags for clarity

Re-fixes change output marking so that it is only ever set if the
output is also marked as a wallet output. Downstream code can thus
check the change bit alone to determine wallet change.

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
Why it was queued
signing boundarysigning or wallet path
AI analysis · Moderate 59/100

This commit reworks how a Blockstream Jade hardware wallet labels transaction outputs. The key change is that the 'change' flag is now only set when the output is also confirmed as belonging to the wallet ('is ours'). Previously, downstream code had to check both 'validated' and 'change' bits to safely hide a change output; now it can rely on the 'change' bit alone. The commit also renames the flag from VALIDATED to IS_OURS and adds comments. The stated intent is to prevent a change output from being marked as change unless it is also confirmed as a wallet output, which could reduce the risk of an attacker tricking the device into hiding a payment to an external address.

Lower-prioritybuild: update jade_builder docker image script to latest jade_builder_baseby Daniel Newton · 543e3d64 · May 15, 2026 · 1 fileMessage 77 · AdequateTriage 0Details
Commit message · Daniel Newton

build: update jade_builder docker image script to latest jade_builder_base

Co-authored-by: Jon Griffiths <jon_p_griffiths@yahoo.com>

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
Lower-prioritybuild: update jade_builder image referencesby Daniel Newton · 4ee1ffa2 · May 15, 2026 · 4 filesMessage 57 · ThinTriage 0Details
Commit message · Daniel Newton

build: update jade_builder image references

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Lower-prioritybuild: update jade_builder_base docker image to esp-idf v5.5.4by Daniel Newton · d4adb65d · May 15, 2026 · 1 fileMessage 62 · AdequateTriage 0Details
Commit message · Daniel Newton

build: update jade_builder_base docker image to esp-idf v5.5.4

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Lower-prioritybuild: update github action to 5.5.4by Jon Griffiths · 5a4dfcac · May 15, 2026 · 1 fileMessage 57 · ThinTriage 0Details
Commit message · Jon Griffiths

build: update github action to 5.5.4

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
documentation-only discount
Lower-priorityserial: set UART0 pins on esp32by Daniel Newton · f2cb1e11 · May 15, 2026 · 1 fileMessage 60 · AdequateTriage 0Details
Commit message · Daniel Newton

serial: set UART0 pins on esp32

before ESP-IDF v5.5 these were set by default

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Security candidateesp-idf: update to v5.5.4, take multisig bootloader component from https://github.com/Blockstream/esp-idf/tree/securebootv2_multisig_v5.5.4by Daniel Newton · d931d543 · May 15, 2026 · 104 filesMessage 58 · ThinModerate 57Details
Commit message · Daniel Newton

esp-idf: update to v5.5.4, take multisig bootloader component from https://github.com/Blockstream/esp-idf/tree/securebootv2_multisig_v5.5.4

58/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Links an issue, advisory, or supporting reference! No meaningful explanatory body
Why it was queued
update trustcryptography-sensitive pathseed or entropy pathsigning or wallet pathboot or update path
AI analysis · Moderate 57/100

This is a large update that pulls in Espressif's ESP-IDF v5.5.4 bootloader code, plus Blockstream's own multi-signature secure-boot patches. Most of the visible changes are routine: support for newer ESP32 chips, larger flash sizes, and a new Trusted Execution Environment (TEE) mode. There are also several security-hardening touches, such as preventing the TEE from writing or erasing its own active flash partition and adding anti-fault-injection checks. However, the commit is a broad vendor SDK refresh rather than a single focused security fix, and the diff provided is only a partial sample of the whole change.