Block a user
epic: workspace, toolchain and CI gate
Children, in dependency order: #11 (isolation and capabilities), #12 (CI green on rust-gtk3), #13 (typed command client). The scaffold commit on main is the starting point for all three.
external review before the first tagged release
reproducible builds: the rpm from the spec matches the ci artifact
secret handling audit and a test that greps for known test secrets
dependency policy in ci: cargo-deny, cargo-machete, frozen lockfiles
a threat model in the repo that matches the code
wormhole exit: submit the proof and land the amount in a transparent account
proof generation off the ui thread, with circuit binaries fetched once and hash-pinned
wormhole derivation and the shielded balance behind a mining address
first provider integration, with order status through relay webhooks
fiatramp port, relay session endpoint, open in the system browser
the quantus leg: deposit path spike, and the memo question raised with quantus and near
swap ui, preview: quote, pay the deposit address, watch the order
wallet-api: a relay on our infra that holds the partner secrets
swap orders as a state machine persisted in sqlite, resumed on restart
a 1click client generated from the openapi spec, and a token list mapped through the registry
accounts across profiles from one mnemonic, and addresses refused by name
an asset registry that maps our asset ids to external ones
the updater: minisign-verified manifests published with every release
windows and macos builders, signing and notarization