Independent alpha audit remediation: signing, storage, entropy, and CI evidence - #587

Merged

BitHighlander merged 33 commits into

alphafrom

fix/alpha-auditor-review

Aug 26, 2026

Commits on Aug 25, 2026

fix(storage): preserve setup state and make commits crash-recoverable
BitHighlander
committed
aa88b99
fix(rng): fail closed when PIN and recovery permutations lose entropy
BitHighlander
committed
307b593
fix(nanopb): reject bytes beyond exact schema capacity
BitHighlander
committed
57f5675
fix(confirm): display exact binary payload without UTF-8 truncation
BitHighlander
committed
8a906d6
test(ethereum): exercise successful Uniswap liquidity confirmations
BitHighlander
committed
ab7c658
build(python): require signing-path report evidence
BitHighlander
committed
5ed6396
test(signing): enforce Solana and Ripple parser boundaries
BitHighlander
committed
1fb4635
fix(solana): bind clear-sign prompts to signed identities
BitHighlander
committed
f30a9a3
fix(ci): scope secret scan to the triggering revision range
BitHighlander
committed
bcbe0db
fix(solana): bind remaining verified instructions to accounts
BitHighlander
committed
84b5296
build(python): align retired signing integration vectors
BitHighlander
committed
3f6834c
fix(ci): assert the verified scanner version
BitHighlander
committed
7a2eae4
test(solana): prove reviewed and signed message slices match
BitHighlander
committed
616b8d3
build(python): preserve the RC18 compatibility gate
BitHighlander
committed
c644d0e
fix(bitcoin): validate multisig quorum before fee accounting
BitHighlander
committed
4003e4a
fix(secrets): scrub wallet caches on authorization loss
BitHighlander
committed
4ca24b8
test(bitcoin): isolate multisig quorum regression
BitHighlander
committed
c6fe3a0

Commits on Aug 26, 2026

test(binance): retain retirement regression
BitHighlander
committed
2043162
Merge alpha after independent Round 4 review
BitHighlander
committed
283a83f
fix(nanopb): preserve descriptor layout for oneof fields
BitHighlander
committed
93291e6
test(nanopb): prove descriptor pointer placement
BitHighlander
committed
b0afc98
fix(omni): disclose unsupported transaction bytes
BitHighlander
committed
7dfff0b
fix(ethereum): disclose complete transform route
BitHighlander
committed
04b529f
fix(tests): share confirmation driver across variants
BitHighlander
committed
087615a
fix(ethereum): commit complete streamed calldata
BitHighlander
committed
d27a684
fix(build): reject empty token definitions
BitHighlander
committed
92ae970
build(python): add alpha audit follow-ups
BitHighlander
committed
ec9ced7
build(python): pin companion CI target
BitHighlander
committed
facefc7
build(python): include fork CI repair
BitHighlander
committed
78731bc
test(report): require native evidence before python report
BitHighlander
committed
54b169a
build(python): pin complete report remediation
BitHighlander
committed
7d3cf27
build(python): pin RC18-compatible report coverage
BitHighlander
committed
896743d
build(python): pin merged alpha audit harness
BitHighlander
committed
e4ec531