release: review 7.15 after finalized 7.14.3 - #629
Open
BitHighlander wants to merge 1 commit into
Open
Conversation
Owner
Author
Audit index — 7.15 stacked deltaThis is the durable top-level ledger. Detailed checkboxes live in the commit-pinned line maps below. A checkbox means every listed base and candidate range in that file was reviewed; findings must cite the exact range and head. Immutable review identity
The 7.14.3 audit is inherited only for unchanged bytes. Any 7.15 hunk touching an inherited invariant is explicitly present in the line maps below. Canonical dependency identity
Every committed submodule URL is canonical upstream. The stale Line-addressable audit surfaces
The firmware maps cover all 181 changed files exactly once. Roadmaps and RFCs are audit inputs, not claims that their future mechanisms ship in 7.15. Gates
Head-change log
Copilot delivery status
No merge, tag, signing, publishing, release, upstream firmware PR, or physical-test claim is made by this fork audit vehicle. |
Squash the 7.15 delta onto the finalized 7.14.3 candidate: core UI and transport work, chain signing and clear-sign metadata, Zcash Orchard support, storage and RNG hardening, dependency updates, tests, documentation, and release evidence gates. Keep every dependency on its canonical upstream URL.
BitHighlander
force-pushed
the
release/7.14.3-bitcoin-only
branch
from
August 28, 2026 18:54
c636edf to
abe29d1
Compare
BitHighlander
force-pushed
the
release/7.15
branch
from
August 28, 2026 18:54
fb3e338 to
a56fb3e
Compare
Owner
Author
7.15 line audit — core, build, EVM and SolanaExact range: Checkbox rule: mark a file complete only after reviewing every listed base and candidate range, including removed/replaced base lines. Findings must cite the surface, path, range, and exact head. Generated files and tests are reviewable evidence, not substitutes for reviewing runtime code. Changed files represented in this checklist: 81. 715-BUILD — product composition, platform and memory layout
715-CORE — board, confirmation UI, transport and emulator
715-DEP — dependency identity, crypto and build integration
715-EVM — EVM and clear-sign metadata
715-SOL — Solana instruction and metadata disclosure
|
Owner
Author
7.15 line audit — signing, Zcash and state securityExact range: Checkbox rule: mark a file complete only after reviewing every listed base and candidate range, including removed/replaced base lines. Findings must cite the surface, path, range, and exact head. Generated files and tests are reviewable evidence, not substitutes for reviewing runtime code. Changed files represented in this checklist: 56. 715-CHAIN — other chain signing and disclosure
715-CHAIN — other chain signing and regression coverage
715-STATE — storage, RNG and secret/session lifecycle
715-ZEC — Zcash, Orchard, Pallas and RedPallas
|
Owner
Author
7.15 line audit — CI, release evidence and documentationExact range: Checkbox rule: mark a file complete only after reviewing every listed base and candidate range, including removed/replaced base lines. Findings must cite the surface, path, range, and exact head. Generated files and tests are reviewable evidence, not substitutes for reviewing runtime code. Changed files represented in this checklist: 44. 715-CI — CI, release evidence, manifests and static gates
715-DOC — shipping requirements, audit guidance and non-shipping designs
|
Owner
Author
7.15 line audit — trezor-crypto dependency deltaExact range: Checkbox rule: mark a file complete only after reviewing every listed base and candidate range, including removed/replaced base lines. Findings must cite the surface, path, range, and exact head. Generated files and tests are reviewable evidence, not substitutes for reviewing runtime code. Changed files represented in this checklist: 5. DEP-CRYPTO-ZEC — Pallas, RedPallas and Orchard primitives
|
6 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Review target
Fork-only stacked audit PR for the squashed 7.15 release candidate.
release/7.14.3-bitcoin-only@abe29d1288638867dc64dfe04219b89f7a593133release/7.15@a56fb3e88d7dbbe31a321179c10a8fd2023d8f0cfb3e3389is preserved atpreserve/release-7.15-pre-upstream-squash-20260828The audit ledger links checkable, commit-pinned file/line maps for all 181 firmware files plus the five-file canonical trezor-crypto delta. Every dependency URL is canonical upstream; the trezor gitlink is merged upstream PR #11 at
8a392f70.Current gates
No merge, signing, tagging, publishing, release, upstream firmware PR, or upstream firmware comment is authorized by this fork review.