SP
← All projectsSpecter

Specter DIY

DIY air-gapped Bitcoin hardware-wallet firmware.

BitcoinHardware walletsNormal
Repository coverage

23 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

11security candidates2second-pass queue7AI analyses
0commits · 30 days
0commits · 60 days
5commits · 180 days
23commits · 365 days
Backfill bands
Aug 5 → Feb 618 seen6 candidatesComplete
Feb 6 → Jun 65 seen1 candidatesComplete
Jun 6 → Jul 60 seen0 candidatesComplete
Jul 6 → Aug 50 seen0 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

64/100 average clarity
4Strong · 80–100
7Adequate · 60–79
12Thin · 40–59
0Opaque · 0–39
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
k9ert1075064
3rd Iteration511056
Tads210076
Oren111073
Schnuartz110058
al-munazzim200083
Azzbo77100058
Mike Tolkachev100053
Analysis record

Published AI watches

Last scanned 43 minutes ago

Informational 0 AI analysisMessage 68 · Adequate
SP SpecterSpecter DIY BitcoinHardware wallets

Update bootloader submodule to latest (#350)

This commit only updates a Git submodule pointer for the bootloader to a newer commit. No actual source code changes are shown, and no verified security references were provided. There is no direct evidence in the materials that this updat…

95353b64by k9ert+1−11 file
No security note in commit
Informational 19 AI analysisMessage 73 · Adequate
SP SpecterSpecter DIY BitcoinHardware wallets

Show Transaction Version, Locktime and inputs' sequences when signing transactions! (#321)

This commit adds more information to the transaction signing screen of the Specter DIY hardware wallet. It now shows the transaction version, locktime, and each input's sequence number, helping users spot unusual transaction settings (such…

UI now surfaces transaction version, nLockTime, and input nSequence during signingSequence values are interpreted to warn about RBF and relative locktimeLocktime is flagged when all inputs have sequence=0xFFFFFFFF (locktime disabled)
3d1bb8edby Oren+207−108 files
No security note in commit
Informational 11 AI analysisMessage 53 · Thin
SP SpecterSpecter DIY BitcoinHardware wallets

Add bootloader to upgrade binary (#323)

This commit changes a build script so that the upgrade package now includes the bootloader alongside the main application firmware, and adds a safety flag that stops the script on first error. There is no direct evidence in the commit that…

Build script now includes bootloader in upgrade binaryBuild script now fails fast with set -eNo explicit security claim in commit message or diff
ed9ad9a6by k9ert+4−21 file
No security note in commit
Informational 15 AI analysisMessage 58 · Thin
SP SpecterSpecter DIY BitcoinHardware wallets

Update build firmware.sh to add no bootloader build by default (#315)

This change simply updates the project's firmware build script and documentation to also produce a 'no bootloader' firmware image by default. It is a developer convenience for testing on development boards and does not alter any runtime co…

6f66962aby 3rd Iteration+21−03 files
No security note in commit
Informational 11 AI analysisMessage 65 · Adequate
SP SpecterSpecter DIY BitcoinHardware wallets

Revert "chore: adding the bootloader to upgrade binary for next release"

This commit undoes a previous change that added the bootloader to the device's upgrade binary. It removes the bootloader from the generated upgrade file and also removes a 'set -e' safety flag from the build script. On its own, this revert…

Build script change affecting firmware packagingBootloader removed from upgrade binary generationset -e error-on-fail flag removed from shell script
b6778187by k9ert+2−51 file
No security note in commit
Informational 11 AI analysisMessage 62 · Adequate
SP SpecterSpecter DIY BitcoinHardware wallets

chore: adding the bootloader to upgrade binary for next release

This is a build-script change for a hardware-wallet project. It adds a command-line flag so that the upgrade package generator includes the bootloader file alongside the main firmware. It also adds `set -e` so the build script stops on err…

Build script now bundles bootloader into upgrade binaryBuild script now exits on first error (`set -e`)No security-relevant description in commit message or diff
54a38094by k9ert+5−21 file
No security note in commit
Informational 15 AI analysisMessage 88 · Strong
SP SpecterSpecter DIY BitcoinHardware wallets

chore: Get build back to work and some CI (#307)

This commit is a routine build and continuous-integration (CI) maintenance change for the Specter DIY hardware wallet project. It adds Nix package-manager files to pin build dependencies, a GitHub Actions workflow to compile the firmware, …

ce35419bby k9ert+45671−0243 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

AI review queuedFix: minor comment cleanups (#343)by al-munazzim · 8131bc93 · Feb 10, 2026 · 2 filesMessage 80 · StrongTriage 12Details
Commit message · al-munazzim

Fix: minor comment cleanups (#343)

Co-authored-by: al-munazzim <al-munazzim@users.noreply.github.com>

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI review queuedExpand detection of possible multisig descriptors & Add data input parsing CI tests (#301)by 3rd Iteration · a5c99266 · Oct 23, 2025 · 9 filesMessage 68 · AdequateTriage 12Details
Commit message · 3rd Iteration

Expand detection of possible multisig descriptors & Add data input parsing CI tests (#301)

68/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path