external review before the first tagged release #52

New Issue

grenade · 2026-09-15T12:41:26Z

grenade commented

2026-09-15 12:41:26 +00:00

Parent: #10

Scope

A scoped review of the key handling, the IPC boundary, the keystore format handling and the updater, by someone outside the project. Findings filed as issues here, each closed by a commit or accepted in writing on the issue.

Operator decision to record here before starting

Who reviews, the budget, and whether a public bounty follows.

Acceptance

The report is linked from the release notes of the first tagged release with no open critical or high finding.

Depends on

The threat model; the secret handling audit.

Parent: #10 ## Scope A scoped review of the key handling, the IPC boundary, the keystore format handling and the updater, by someone outside the project. Findings filed as issues here, each closed by a commit or accepted in writing on the issue. ## Operator decision to record here before starting Who reviews, the budget, and whether a public bounty follows. ## Acceptance The report is linked from the release notes of the first tagged release with no open critical or high finding. ## Depends on The threat model; the secret handling audit.

grenade added the child label 2026-09-15 12:42:05 +00:00

grenade referenced this issue

2026-09-15 12:42:48 +00:00

epic: security hardening and release readiness #10

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: blackbeard/wallet#52