BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2900 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

254security candidates607second-pass queue2881AI analyses
206commits · 30 days
502commits · 60 days
1535commits · 180 days
2884commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
937Strong · 80–100
1188Adequate · 60–79
687Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow15750157064
MarcoFalke41021406074
Lőrinc17721177081
fanquake22719226057
Hennadii Stepanov20914208063
rkrux57957074
Sjors Provoost89889074
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Hodlinator66566076
Analysis record

Published AI watches

Last scanned 57 minutes ago

Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable misc-definitions-in-headers

This commit is a code cleanup: it turns on a clang-tidy style check called 'misc-definitions-in-headers' and suppresses that check around a large inline implementation block in a benchmark header. There is no change to Bitcoin's runtime be…

fa93132dby MarcoFalke+3−02 files
No security note in commit
Informational 15 AI analysisMessage 85 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable clang-tidy rule to reject anon namespace in header

This commit only changes a linting configuration file for the project's code style checker. It enables a rule that prevents anonymous namespaces from being used in header files, which is a code-quality and build-hygiene practice. There is …

No security-relevant signals in the diff or commit message.Change is purely a static-analysis/linting configuration update.
fa5ca877by MarcoFalke+2−11 file
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Use C++20 std::identity over IntIdentity

This commit is a straightforward code cleanup: it replaces a small custom helper named IntIdentity with the standard C++20 std::identity from the <functional> header. The behavior of the ConvertBits function is unchanged; only the implemen…

fafe5042by MarcoFalke+4−111 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test the result order of a multiple import request is correct

This commit only adds a new automated test to Bitcoin Core. It checks that when a user asks the wallet to import multiple descriptors at once, the list of results comes back in the same order as the original request, including any error me…

3ac8b806by Pol Espinasa+40−01 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test invalid or missing timestamp throws importdescriptors

This commit only adds new automated tests for the Bitcoin Core wallet's importdescriptors RPC. It checks that the command correctly rejects requests with a missing or invalid timestamp. No production wallet code is changed, so this cannot …

No changes to consensus, networking, wallet logic, or cryptographyOnly functional test code is modifiedAdded assertions are for expected error handling paths
e4732bf0by Pol Espinasa+28−11 file
No security note in commit
Informational 15 AI analysisMessage 80 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Remove unused #include in common/system

This is a minor code cleanup that removes one unused header file include and swaps another for a more specific one. It does not change any program behavior or fix any security issue.

fa7304f3by MarcoFalke+1−22 files
No security note in commit
Informational 15 AI analysisMessage 50 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

iwyu: Fix warnings in `src/consensus` and treat them as errors

This commit is a routine code cleanup: it adjusts which C++ header files are included in several consensus-related source files and turns on a stricter compiler hygiene check (Include What You Use, or IWYU) for the src/consensus directory.…

13b53f8bby Hennadii Stepanov+42−79 files
No security note in commit
Informational 15 AI analysisMessage 55 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

fuzz: don't connman.ReceiveMsgFrom oversized msg

This is a small fix to a Bitcoin Core fuzz test (an automated internal testing harness), not to the live network code. The fuzzer was sometimes creating fake P2P messages larger than the real protocol allows and passing them into a test he…

Test-only fuzz harness hardeningOversized message guard added before ReceiveMsgFrom() in fuzz targetNo change to production P2P message acceptance logic
bb19f1daby Greg Sanders+5−01 file
No security note in commit
Informational 15 AI analysisMessage 97 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: Temporarily remove riscv32 config from GHA matrix

This commit simply removes one failing test configuration (RISC-V 32-bit bare metal) from the project's GitHub Actions CI matrix because it was failing. It is a routine CI maintenance change with no security implications.

fa06ea42by MarcoFalke+0−61 file
No security note in commit
Low 47 AI analysisMessage 90 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: verify cross-build SDK archives

This change adds checksum verification to the build system's downloads of Apple, FreeBSD, NetBSD, and OpenBSD software development kits (SDKs). Before this patch, those SDK archives were downloaded at build time and extracted without confi…

Adds cryptographic digest verification for downloaded SDK archivesRemoves unchecked extraction of remote SDK archives in CIHardens CI supply chain for macOS/BSD cross-builds
873550beby Lőrinc+25−126 files
Vendor flagged security relevance
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-priorityclusterlin: precompute reachable sets (optimization)by Pieter Wuille · 7194de3f · Feb 17, 2026 · 1 fileMessage 83 · StrongInformational 15Details
Commit message · Pieter Wuille

clusterlin: precompute reachable sets (optimization)

Instead of computing the set of reachable transactions inside
PickMergeCandidate, make the information precomputed, and updated in
Activate (by merging the two chunks' reachable sets) and Deactivate (by
recomputing).

This is a small performance gain on itself, but also a preparation for
future optimizations that rely on quickly testing whether dependencies
between chunks exist.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This is a routine performance optimization inside Bitcoin Core's transaction clustering code. It precomputes and caches which related transactions a chunk can reach, instead of recalculating that set on demand. The change includes extra assertions to verify the cached values stay correct. There is no security-relevant behavior change and no indication this fixes a vulnerability.

Lower-priorityclusterlin: abstract out functions from MergeStep (refactor)by Pieter Wuille · cbd684a4 · Feb 17, 2026 · 1 fileMessage 65 · AdequateInformational 15Details
Commit message · Pieter Wuille

clusterlin: abstract out functions from MergeStep (refactor)

This is a simple refactor to make the code more readable.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This is a pure code cleanup: a single function was split into three smaller, clearer helper functions with no change to what the code actually does. There is no security issue visible in the commit.

Lower-priorityclusterlin: split up OptimizeStep (refactor)by Pieter Wuille · dcf458ff · Feb 17, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Pieter Wuille

clusterlin: split up OptimizeStep (refactor)

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a straightforward code cleanup inside Bitcoin Core's transaction-cluster linearization logic. It takes one large function, OptimizeStep, and splits it into two smaller helper functions, PickChunkToOptimize and PickDependencyToSplit, without changing what the code actually does. There is no security-relevant change here.

Lower-priorityclusterlin: add more Assumes and sanity checks (tests)by Pieter Wuille · 268fcb6a · Feb 17, 2026 · 1 fileMessage 60 · AdequateInformational 16Details
Commit message · Pieter Wuille

clusterlin: add more Assumes and sanity checks (tests)

60/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 16/100

This commit adds extra internal safety checks and test-like assertions to a Bitcoin Core transaction-cluster linearization module. It does not change normal network behavior; it only helps developers catch programming mistakes during testing or debugging. There is no indication it fixes an active security bug or is exploitable by users.

Lower-priorityclusterlin: unidirectional MakeTopological initially (optimization)by Pieter Wuille · b684f954 · Feb 17, 2026 · 2 filesMessage 73 · AdequateInformational 13Details
Commit message · Pieter Wuille

clusterlin: unidirectional MakeTopological initially (optimization)

It suffices to initially only attempt one direction of merges in
MakeTopological(), and only try both directions on chunks that are the
result of other merges.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 13/100

This commit is an internal performance optimization for Bitcoin Core's transaction clustering algorithm. It changes how the code tries to combine groups of related transactions during fee estimation, doing less work upfront while still checking both directions for newly merged groups. The test file updates expected iteration counts accordingly. There is no indication this change affects security, consensus, network behavior, or user funds.

Lower-priorityclusterlin: track suboptimal chunks (optimization)by Pieter Wuille · 1daa600c · Feb 17, 2026 · 2 filesMessage 65 · AdequateInformational 13Details
Commit message · Pieter Wuille

clusterlin: track suboptimal chunks (optimization)

This avoids adding them a second time to m_suboptimal_chunks when they
happen to already be there.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 13/100

This commit is a performance optimization inside Bitcoin Core's transaction-cluster linearization code. It adds a tracking set so the algorithm does not enqueue the same chunk twice for later improvement. The change is described by the author as an optimization, not a security fix, and the diff shows no behavior change beyond avoiding duplicate work and updating corresponding test iteration limits.

Lower-priorityclusterlin: simplify PickMergeCandidate (optimization)by Pieter Wuille · 6f898dbb · Feb 17, 2026 · 2 filesMessage 63 · AdequateInformational 15Details
Commit message · Pieter Wuille

clusterlin: simplify PickMergeCandidate (optimization)

The current process consists of iterating over the transactions of the
chunk one by one, and then for each figuring out which of its
parents/children are in unprocessed chunks.

Simplify this (and speed it up slightly) by splitting this process into
two phases: first determine the union of all parents/children, and then
find which chunks those belong to.

63/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a routine code cleanup and performance tweak inside Bitcoin Core's transaction-cluster linearization logic. It rewrites how the algorithm picks which chunk of transactions to merge next, making the code simpler and slightly faster. There is no indication of a security bug being fixed.

Lower-priorityscripted-diff: rename _rep -> _idx in SFLby Pieter Wuille · 20e2f3e9 · Feb 17, 2026 · 1 fileMessage 78 · AdequateInformational 15Details
Commit message · Pieter Wuille

scripted-diff: rename _rep -> _idx in SFL

This is a preparation for the next commit, where chunks will no longer
be identified using a representative transaction, but using a set index.
Reduce the load of line changes by doing this rename ahead of time.

-BEGIN VERIFY SCRIPT-
sed --in-place 's/_rep/_idx/g' src/cluster_linearize.h
-END VERIFY SCRIPT-

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit is a purely mechanical rename of internal variable names in Bitcoin Core's transaction clustering code. Every occurrence of '_rep' (short for 'representative') is changed to '_idx' (short for 'index') in a single header file. There are no logic changes, no bug fixes, and no security implications. The commit message explicitly says this is a preparatory cleanup to make the next change easier to review.

Lower-priorityclusterlin: make MergeSequence take SetIdx (simplification)by Pieter Wuille · 3221f1a0 · Feb 17, 2026 · 1 fileMessage 73 · AdequateInformational 15Details
Commit message · Pieter Wuille

clusterlin: make MergeSequence take SetIdx (simplification)

Future changes will rely on knowing the chunk indexes of the two created
chunks after a split. It is natural to return this information from
Deactivate, which also simplifies MergeSequence.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a small internal code cleanup in Bitcoin Core's transaction clustering/linearization logic. It changes a helper function so it returns chunk indexes directly instead of having callers look them up afterward. There is no user-facing behavior change, no network change, and no security fix.

Lower-priorityclusterlin: split tx/chunk dep counting (preparation)by Pieter Wuille · f66fa69c · Feb 17, 2026 · 2 filesMessage 95 · StrongInformational 15Details
Commit message · Pieter Wuille

clusterlin: split tx/chunk dep counting (preparation)

This splits the chunk_deps variable in LoadLinearization in two, one for
tracking tx dependencies and one for chunk dependencies. This is a
preparation for a later commit, where chunks won't be identified anymore
by a representative transaction in them, but by a separate index. With
that, it seems weird to keep them both in the same structure if they
will be indexed in an unrelated way.

Note that the changes in src/test/util/cluster_linearize.h to the table
of worst observed iteration counts are due to switching to a different
data set, and are unrelated to the changes in this commit.

95/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This is a routine internal code cleanup in Bitcoin Core's transaction clustering/linearization logic. It splits one combined counter into two separate counters for clarity, with no functional change intended. There is no security issue visible in the commit.

Lower-priorityclusterlin: avoid depgraph argument in SanityCheck (cleanup)by Pieter Wuille · 900e4597 · Feb 17, 2026 · 2 filesMessage 73 · AdequateInformational 15Details
Commit message · Pieter Wuille

clusterlin: avoid depgraph argument in SanityCheck (cleanup)

Since the deterministic ordering change, SpanningForestState holds a
reference to the DepGraph it is linearizing. So this means we do not
need to pass it to SanityCheck() as an argument anymore.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a small internal cleanup in Bitcoin Core's transaction-cluster linearization code. It removes an unnecessary argument from a debugging/self-check function called SanityCheck(), because the object already stores a reference to the same data. There is no user-facing change, no network behavior change, and no security fix.

Lower-priorityclusterlin: fix type to count dependenciesby Pieter Wuille · 666b3797 · Feb 17, 2026 · 1 fileMessage 45 · ThinInformational 20Details
Commit message · Pieter Wuille

clusterlin: fix type to count dependencies

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 20/100

This commit fixes a variable type mismatch in Bitcoin Core's transaction clustering code. The code counts dependencies between groups of transactions, but was using a transaction-index type for the count. If that count type is smaller than the actual number of dependencies, it could overflow or behave incorrectly when many dependencies exist. The fix changes the count and random-picker variables to a plain unsigned integer, which is the appropriate type for counting.

Lower-prioritybuild: define CMAKE_COMPILE_WARNING_AS_ERROR as a cache optionby will · 231dd04b · Feb 17, 2026 · 1 fileMessage 85 · StrongInformational 15Details
Commit message · will

build: define CMAKE_COMPILE_WARNING_AS_ERROR as a cache option

CMAKE_COMPILE_WARNING_AS_ERROR is not a cache variable by default in
CMake, so it has no value in the configure summary when not set, and
even when set cannot be toggled in ccmake. Define it as an option() to
make it a cache BOOL with a default of OFF.

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This is a minor build-system change. It makes a CMake setting called CMAKE_COMPILE_WARNING_AS_ERROR appear in the configuration summary and be toggleable in the ccmake tool. It does not change how Bitcoin Core is compiled, what warnings are treated as errors, or any runtime behavior. There is no security relevance.

Lower-prioritytest: Stricter unit testby MarcoFalke · fa48d421 · Feb 17, 2026 · 1 fileMessage 85 · StrongInformational 15Details
Commit message · MarcoFalke

test: Stricter unit test

Now that the previous commit fixed a unit test bug, make the test
stricter, to prevent this issue from happening again in the future.

85/100 · StrongMessage clarity
✓ Subject identifies a change✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only tightens a unit test's error-message check. It does not change production code, network behavior, or wallet logic, so it has no direct security impact on users.

AI review queuedutil: Remove brittle and confusing sp::Popen(std::string)by MarcoFalke · fa626bd1 · Feb 17, 2026 · 6 filesMessage 50 · ThinLow 42Details
Commit message · MarcoFalke

util: Remove brittle and confusing sp::Popen(std::string)

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Low 42/100

This commit refactors how Bitcoin Core launches external helper programs (used for hardware wallet signing). Previously, commands were passed as a single string that the library split into arguments automatically. Now, callers must provide the command and its arguments as a pre-split list. The change reduces the risk of shell-style injection or mis-parsing when command paths or arguments contain spaces or special characters, but it is a code-quality and hardening change rather than a fix for a known exploitable bug.

Lower-prioritytest: Indices can not start based on block data without undo databy Fabian Jahr · 312919c9 · Feb 17, 2026 · 1 fileMessage 72 · AdequateInformational 15Details
Commit message · Fabian Jahr

test: Indices can not start based on block data without undo data

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only adds a new test to Bitcoin Core. It checks that two optional index features (block filter index and coinstatsindex) cannot be started on a pruned node even if the missing raw blocks are fetched from a peer, because those indexes also need 'undo data' that getblockfrompeer does not provide. There is no product code change and no security fix.

Lower-prioritytest: Add coverage for restarted node without any block syncby Fabian Jahr · fd06157d · Feb 17, 2026 · 1 fileMessage 72 · AdequateInformational 15Details
Commit message · Fabian Jahr

test: Add coverage for restarted node without any block sync

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only adds a new test case to Bitcoin Core's test suite. It checks that a node can be stopped and restarted safely even if it has never synced or generated any blocks, including with optional indexes enabled. There is no change to production code, no bug fix, and no security-relevant behavior change.

Lower-priorityrpc, test: Address feedback from #29668by Fabian Jahr · 3d7ab7ec · Feb 17, 2026 · 3 filesMessage 63 · AdequateInformational 17Details
Commit message · Fabian Jahr

rpc, test: Address feedback from #29668

63/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference! No meaningful explanatory body
AI analysis · Informational 17/100

This commit is a small cleanup following an earlier pull request. It rewrites one boolean condition in a clearer but equivalent way, updates a user-facing help string to describe a value more accurately, and makes some internal variables and function parameters read-only (const). There is no indication it fixes an active security bug or changes behavior in a way attackers could exploit.

Lower-priorityindex: Check availability of undo data for indicesby Fabian Jahr · a9a3b29d · Feb 17, 2026 · 7 filesMessage 50 · ThinLow 42Details
Commit message · Fabian Jahr

index: Check availability of undo data for indices

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Low 42/100

This Bitcoin Core commit tightens startup checks for optional indexes (like the block filter and coin stats indexes) when a node is running in pruned mode. Previously, the startup check only verified that raw block data was available on disk. Some indexes, however, also need 'undo' data to catch up from an older block. If a user pruned blocks but kept the index enabled, the index could try to sync past the pruned undo data and fail or behave incorrectly. The fix now separately checks whether both block and undo data are available for indexes that require undo data, and only checks block data for indexes that do not. It is a defensive correctness fix rather than a remote-exploitable vulnerability.

Lower-priorityci: Allow running iwyu ci in worktreeby MarcoFalke · fafdb8f6 · Feb 17, 2026 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · MarcoFalke

ci: Allow running iwyu ci in worktree

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This is a harmless CI (continuous integration) maintenance change. It lets an optional code-style check called IWYU run in environments like git worktrees or archives where a full git history isn't present. It does not touch Bitcoin's network code, wallet, consensus, or any user-facing behavior.

Lower-priorityci: Reject unsafe execution of shell scriptsby MarcoFalke · fab73e21 · Feb 17, 2026 · 4 filesMessage 92 · StrongLow 34Details
Commit message · MarcoFalke

ci: Reject unsafe execution of shell scripts

The shell scripts are inherently unsafe, because they will install new
software packages, modify global configuration settings, write to the
root / or $HOME, and possibly modify the git repo.

The only safe way to run them is through the CI system itself, that is
the ci_exec python function.

The ci_exec funtion ensures that the user has set up a sandbox
externally and set DANGER_RUN_CI_ON_HOST=1 at their own risk, or that a
sandbox was set up with the given container_id, in which case it is safe
to set DANGER_RUN_CI_ON_HOST=1 for that sandbox.
Also, it is safe to set DANGER_RUN_CI_ON_HOST=1 when building the
sandbox image in ci/test_imagefile.

Then, the two shell scripts can reject early if unsafe execution is
detected.

92/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Low 34/100

This commit adds safety guards to Bitcoin Core's continuous integration (CI) shell scripts. The scripts install software and change system settings, so they could damage a developer's computer or the source code repository if run directly by mistake. The change makes the scripts refuse to run unless a special safety flag, DANGER_RUN_CI_ON_HOST=1, is set, and it arranges for that flag to be set automatically only inside the intended container environment. It is a hardening improvement, not a fix for an active attack.

Lower-priorityguix: don't export TZ twiceby fanquake · 62e37858 · Feb 17, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · fanquake

guix: don't export TZ twice

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This is a trivial build-script cleanup. It removes a duplicate export of the TZ environment variable and moves another environment variable setting earlier in the script. There is no security issue here.

AI review queuedguix: fix typo in guix-codesignby fanquake · badcf1c6 · Feb 17, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · fanquake

guix: fix typo in guix-codesign

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit fixes a typo in a comment inside a Guix codesigning helper script. The comment incorrectly named the build script as 'build.sh' when it should read 'codesign.sh'. No executable code was changed, so this has no effect on Bitcoin Core's behavior or security.

AI review queuedqt: Use plurals where necessaryby Hennadii Stepanov · 746d8cdd · Feb 17, 2026 · 1 fileMessage 45 · ThinInformational 20Details
Commit message · Hennadii Stepanov

qt: Use plurals where necessary

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 20/100

This commit changes two user-facing text strings in the Bitcoin Core wallet's PSBT (Partially Signed Bitcoin Transaction) dialog so they correctly use singular/plural forms in different languages. It is a localization/translation fix with no security relevance.

Lower-priorityrefactor: addrman: move consts to .hby brunoerg · f611d3bd · Feb 16, 2026 · 2 filesMessage 57 · ThinInformational 15Details
Commit message · brunoerg

refactor: addrman: move consts to .h

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit simply moves a set of fixed numeric constants (such as how many buckets addresses are spread across, retry limits, and time windows) from the implementation file to the header file. It does not change any values, logic, or behavior. There is no security issue here.