Block a user
isolation pattern and a capability file that says why for every permission
a typed command client in the webview, generated from wallet-entities
test(ci): a hand-edited generated type must fail the gate (do not merge)
epic: btc/qtc swaps through arbitrated multisig escrow
Sequencing decision, 2026-09-15
This epic is deferred to the end of the plan, after every other epic. It depends on the wallet being useful first: a swap needs takers who already hold and move…
epic: btc/qtc swaps through arbitrated multisig escrow
Correction, 2026-09-15: no bonds
The epic body and the original #62 assumed Bisq-style security deposits from both parties. That does not fit this market: only miners and the team hold QTC, so…
epic: btc/qtc swaps through arbitrated multisig escrow
Children, in dependency order: #55 (multisig spike on a dev node) and #56 (bitcoind on our infra) can start now, in parallel → #57 (protocol document and entities) → #58 (wallet-arbiter), #59…
rehearsal on planck and signet: happy path, silent maker, no-show buyer, hot signer down
bonds and limits: make walking away expensive, cap what an unbonded party can do
taker flow in the wallet: buy qtc with btc, sell qtc for btc, through the escrow provider
wallet-maker: a daemon makers run, quoting their own price
coordinator: offers, matching and trade records, holding nothing
wallet-arbiter: a hot signer that can only choose between two agreed outcomes
the escrow protocol, written down: trade state machine, the two call templates, messages
bitcoind on our infra: the judge's only source of evidence
prove the multisig pallet does what the escrow needs, on a dev node
epic: btc/qtc swaps through arbitrated multisig escrow
a fedora rpm published to rpm.lair.cafe, following the existing signed-repo pipeline
Operator decision, 2026-09-15
Fedora 44 only for v1. Prebuilt-binary spec from the rust-gtk3 runner, packaged on rpm, published to fedora/44/x86_64/ on rpm.lair.cafe. No source build…