BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2902 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

254security candidates607second-pass queue2881AI analyses
194commits · 30 days
489commits · 60 days
1508commits · 180 days
2875commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
939Strong · 80–100
1188Adequate · 60–79
687Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow15750157064
MarcoFalke41021406074
Lőrinc17721177081
fanquake22719226057
Hennadii Stepanov20914208063
rkrux57957074
Sjors Provoost89889074
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Hodlinator66566076
Analysis record

Published AI watches

Last scanned 15 minutes ago

Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable misc-definitions-in-headers

This commit is a code cleanup: it turns on a clang-tidy style check called 'misc-definitions-in-headers' and suppresses that check around a large inline implementation block in a benchmark header. There is no change to Bitcoin's runtime be…

fa93132dby MarcoFalke+3−02 files
No security note in commit
Informational 15 AI analysisMessage 85 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable clang-tidy rule to reject anon namespace in header

This commit only changes a linting configuration file for the project's code style checker. It enables a rule that prevents anonymous namespaces from being used in header files, which is a code-quality and build-hygiene practice. There is …

No security-relevant signals in the diff or commit message.Change is purely a static-analysis/linting configuration update.
fa5ca877by MarcoFalke+2−11 file
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Use C++20 std::identity over IntIdentity

This commit is a straightforward code cleanup: it replaces a small custom helper named IntIdentity with the standard C++20 std::identity from the <functional> header. The behavior of the ConvertBits function is unchanged; only the implemen…

fafe5042by MarcoFalke+4−111 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test the result order of a multiple import request is correct

This commit only adds a new automated test to Bitcoin Core. It checks that when a user asks the wallet to import multiple descriptors at once, the list of results comes back in the same order as the original request, including any error me…

3ac8b806by Pol Espinasa+40−01 file
No security note in commit
Informational 15 AI analysisMessage 87 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

test: test invalid or missing timestamp throws importdescriptors

This commit only adds new automated tests for the Bitcoin Core wallet's importdescriptors RPC. It checks that the command correctly rejects requests with a missing or invalid timestamp. No production wallet code is changed, so this cannot …

No changes to consensus, networking, wallet logic, or cryptographyOnly functional test code is modifiedAdded assertions are for expected error handling paths
e4732bf0by Pol Espinasa+28−11 file
No security note in commit
Informational 15 AI analysisMessage 80 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Remove unused #include in common/system

This is a minor code cleanup that removes one unused header file include and swaps another for a more specific one. It does not change any program behavior or fix any security issue.

fa7304f3by MarcoFalke+1−22 files
No security note in commit
Informational 15 AI analysisMessage 50 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

iwyu: Fix warnings in `src/consensus` and treat them as errors

This commit is a routine code cleanup: it adjusts which C++ header files are included in several consensus-related source files and turns on a stricter compiler hygiene check (Include What You Use, or IWYU) for the src/consensus directory.…

13b53f8bby Hennadii Stepanov+42−79 files
No security note in commit
Informational 15 AI analysisMessage 55 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

fuzz: don't connman.ReceiveMsgFrom oversized msg

This is a small fix to a Bitcoin Core fuzz test (an automated internal testing harness), not to the live network code. The fuzzer was sometimes creating fake P2P messages larger than the real protocol allows and passing them into a test he…

Test-only fuzz harness hardeningOversized message guard added before ReceiveMsgFrom() in fuzz targetNo change to production P2P message acceptance logic
bb19f1daby Greg Sanders+5−01 file
No security note in commit
Informational 15 AI analysisMessage 97 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: Temporarily remove riscv32 config from GHA matrix

This commit simply removes one failing test configuration (RISC-V 32-bit bare metal) from the project's GitHub Actions CI matrix because it was failing. It is a routine CI maintenance change with no security implications.

fa06ea42by MarcoFalke+0−61 file
No security note in commit
Low 47 AI analysisMessage 90 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

ci: verify cross-build SDK archives

This change adds checksum verification to the build system's downloads of Apple, FreeBSD, NetBSD, and OpenBSD software development kits (SDKs). Before this patch, those SDK archives were downloaded at build time and extracted without confi…

Adds cryptographic digest verification for downloaded SDK archivesRemoves unchecked extraction of remote SDK archives in CIHardens CI supply chain for macOS/BSD cross-builds
873550beby Lőrinc+25−126 files
Vendor flagged security relevance
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

AI review queuedwallet: disallow unnamed wallets in createwallet and restorewalletby Ava Chow · 5875a9c5 · Jan 19, 2026 · 8 filesMessage 73 · AdequateLow 31Details
Commit message · Ava Chow

wallet: disallow unnamed wallets in createwallet and restorewallet

Migration still needs to be able to restore unnamed wallets, so
allow_unnamed is added to RestoreWallet to explicitly allow that
behavior for migration only.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Low 31/100

This Bitcoin Core change stops users from creating or restoring wallets with an empty name through the normal RPC commands. Empty wallet names could cause confusion or unexpected behavior, so the patch now rejects them with a clear error. The only exception is during wallet migration, where an existing unnamed wallet is allowed to be restored. The change is a hardening fix, not a response to an active exploit.

Lower-priorityclang-format: use AngleBracket for main includesby stickies-v · 0dafc0d8 · Jan 19, 2026 · 1 fileMessage 68 · AdequateInformational 15Details
Commit message · stickies-v

clang-format: use AngleBracket for main includes

This project uses angle brackets instead of quotes for project-specific
headers. Setting MainIncludeChar enables clang-format to automatically
detect the main header, so it can be kept as the top group of includes.

For example, without this change, the below command would demote
<signet.h> from being the main header. With this change, the order is
preserved.

`clang-format -i src/signet.cpp`

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a purely cosmetic change to the project's code formatting configuration file. It tells the clang-format tool to treat project header files included with angle brackets (like <signet.h>) as 'main headers' so they stay at the top of include lists. There is no functional code change and no security impact.

AI review queueddoc: Document IWYU workaroundby Hennadii Stepanov · 03f363d3 · Jan 19, 2026 · 1 fileMessage 35 · OpaqueInformational 15Details
Commit message · Hennadii Stepanov

doc: Document IWYU workaround

35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This commit only adds a comment explaining why a particular code header must be kept. It does not change any program logic, data handling, or security behavior. There is no security issue here.

Lower-prioritydoc: Add "Using IWYU" to Developer Notesby Hennadii Stepanov · d938947b · Jan 19, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Hennadii Stepanov

doc: Add "Using IWYU" to Developer Notes

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only updates the project's developer documentation. It adds a new section explaining how to use a code-quality tool called 'include-what-you-use' (IWYU) and links it from an existing style rule. No program code was changed, so it cannot introduce a security vulnerability or fix one.

Lower-priorityiwyu: Do not export `crypto/hex_base.h` headerby Hennadii Stepanov · e1a90bce · Jan 19, 2026 · 4 filesMessage 45 · ThinInformational 15Details
Commit message · Hennadii Stepanov

iwyu: Do not export `crypto/hex_base.h` header

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This is a code cleanup change about which C++ header files include other header files. It removes an 'export' annotation from an internal header so that tools checking include correctness no longer treat it as publicly re-exported. There is no functional change to Bitcoin's behavior and no security relevance.

Lower-priorityiwyu: Do not export C++ headers in most casesby Hennadii Stepanov · 19a2edde · Jan 19, 2026 · 2 filesMessage 68 · AdequateInformational 15Details
Commit message · Hennadii Stepanov

iwyu: Do not export C++ headers in most cases

`IWYU pragma: export` enforces the transitive inclusion of the headers,
which undermines the purpose of IWYU.

The remained cases seem useful and could be considered separately:
- `<cassert>` in `util/check.h`
- `<filesystem>` in `util/fs.h`
- `<chrono>` in `util/time.h`

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a code-cleanup change that removes 'export' markers from two C++ header files. It tells the compiler's include-what-you-use tool not to force other files to automatically pull in <string> and <string_view> just because they include these utility headers. There is no security impact.

Lower-prioritychore: Update outdated GitHub Actions versionsby Padraic Slattery · 9482f00d · Jan 19, 2026 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · Padraic Slattery

chore: Update outdated GitHub Actions versions

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit simply bumps three GitHub Actions dependencies to newer major versions in the project's automated CI workflow file. There is no code change to Bitcoin Core itself, no bug fix, and no security patch. It is a routine maintenance update to keep CI tooling current.

Lower-priorityrpc: make `uptime` monotonic across NTP jumpsby Lőrinc · 14f99cfe · Jan 19, 2026 · 5 filesMessage 78 · AdequateInformational 21Details
Commit message · Lőrinc

rpc: make `uptime` monotonic across NTP jumps

Compute `uptime` from `SteadyClock` so it is unaffected by system time changes after startup.

Derive GUI startup time by subtracting the monotonic uptime from the wall clock time.

Add a functional test covering a large `setmocktime` jump.

Co-authored-by: MarcoFalke <*~=`'#}+{/-|&$^_@721217.xyz>

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 21/100

This commit fixes the `uptime` RPC command in Bitcoin Core so it no longer jumps around when the system clock or mock time is changed. Previously, uptime was calculated by subtracting the startup wall-clock time from the current wall-clock time, so a large NTP adjustment or `setmocktime` call could make the node appear to have been running for thousands of seconds instantly, or even report a negative uptime. The change uses a monotonic clock that only counts real elapsed time. It is a correctness/reliability fix, not a direct theft-of-funds vulnerability.

Lower-prioritydoc: Fix typo found by LLMby MarcoFalke · faf07bd1 · Jan 19, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · MarcoFalke

doc: Fix typo found by LLM

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit fixes a typo in a code comment. It changes 'contains' to 'contain' and the comment marker from two slashes to three slashes. There is no change to actual program code, so it cannot affect security or functionality.

Lower-priorityrefactor: [move-only] Merge core_io moduleby MarcoFalke · faf66673 · Jan 19, 2026 · 6 filesMessage 72 · AdequateInformational 15Details
Commit message · MarcoFalke

refactor: [move-only] Merge core_io module

This can be reviewed with the git option
--color-moved=dimmed-zebra

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit is a pure code reorganization: it merges the contents of two source files (core_read.cpp and core_write.cpp) into a single new file (core_io.cpp) and updates build scripts accordingly. No program behavior changes, no security fixes, and no vulnerability is introduced.

Lower-prioritykernel: Remove unused core_read.cpp from kernelby MarcoFalke · fa6947f4 · Jan 19, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · MarcoFalke

kernel: Remove unused core_read.cpp from kernel

Also, util/string and util/strencodings

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit simply removes three source files from the list used to build the Bitcoin Core kernel library, because they are no longer needed there. It is a routine cleanup change with no security relevance.

Lower-priorityutil: add `TicksSeconds`by Lőrinc · a9440b15 · Jan 19, 2026 · 2 filesMessage 43 · ThinInformational 15Details
Commit message · Lőrinc

util: add `TicksSeconds`

Add a helper to convert durations to integer seconds.

43/100 · ThinMessage clarity
✓ Subject identifies a change✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit adds a small helper function called TicksSeconds that converts a time duration into whole seconds, along with a few unit tests. It is a routine code cleanup/refactoring change with no security relevance.

AI review queuedtest: Add getreceivedbyaddress coverage to wallet_listreceivedbyby b-l-u-e · d45ec3fb · Jan 18, 2026 · 1 fileMessage 87 · StrongInformational 15Details
Commit message · b-l-u-e

test: Add getreceivedbyaddress coverage to wallet_listreceivedby

- Add test for multiple transactions to same address
- Add test for invalid address format error

87/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Mentions testing or verification
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit only adds new test cases to an existing Bitcoin Core functional test file. It checks that sending multiple transactions to the same address correctly sums the received amount, and that an invalid address string produces a proper error. There is no change to production wallet code, no bug fix, and no security-relevant behavior change.

AI review queuedrefactor: wallet: move error handling to PopulateWalletFromDB()by David Gumberg · a48e23f5 · Jan 16, 2026 · 5 filesMessage 62 · AdequateInformational 15Details
Commit message · David Gumberg

refactor: wallet: move error handling to PopulateWalletFromDB()

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a straightforward internal code cleanup in Bitcoin Core's wallet module. It moves the code that translates database load errors into user-facing error and warning messages from two separate callers into the single function that actually loads the wallet data. There is no change to what errors are detected, what messages are shown, or how the wallet behaves when problems occur.

AI review queuedwallet: refactor: PopulateWalletFromDB use switch statement.by David Gumberg · 411caf72 · Jan 16, 2026 · 1 fileMessage 65 · AdequateInformational 15Details
Commit message · David Gumberg

wallet: refactor: PopulateWalletFromDB use switch statement.

Co-authored-by: @w0xlt <w0xlt@users.noreply.github.com>

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a straightforward code cleanup in Bitcoin Core's wallet loading logic. It replaces a long chain of 'if/else if' checks with a 'switch' statement that handles the same set of wallet database error codes. No behavior changes are visible in the diff, and no security issue is introduced or fixed.

AI review queuedrefactor: Move -walletbroadcast setting initby David Gumberg · a02c4a82 · Jan 16, 2026 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · David Gumberg

refactor: Move -walletbroadcast setting init

Modifying `fBroadcastTransactions` does not require any locks,
initialization of this wallet parameter can be relocated with all of the
other argument parsing in this function.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This is a simple code cleanup change. It moves where a wallet setting called -walletbroadcast is read from the command-line/config into the wallet object. Previously it happened inside a locked section; now it happens earlier with other similar settings. The commit message explicitly says this does not require locks and is just relocating initialization. There is no security issue visible in the change.

AI review queuedci, iwyu: Fix warnings in `src/kernel` and treat them as errorsby Hennadii Stepanov · a5a8c413 · Jan 16, 2026 · 8 filesMessage 50 · ThinInformational 15Details
Commit message · Hennadii Stepanov

ci, iwyu: Fix warnings in `src/kernel` and treat them as errors

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a routine code-quality cleanup. It adjusts which C++ header files are included in several source files under src/kernel and tells the continuous-integration system to treat missing-header warnings in that directory as errors. There is no change to program logic, no bug fix, and no security-relevant behavior.

Lower-prioritycontrib: [refactor] Use shorter read_text from pathlibby MarcoFalke · fa38ffac · Jan 16, 2026 · 1 fileMessage 50 · ThinInformational 15Details
Commit message · MarcoFalke

contrib: [refactor] Use shorter read_text from pathlib

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This is a minor code cleanup in a helper script that checks Git commit signatures. It replaces several verbose file-reading instructions with shorter, equivalent ones using Python's pathlib module. There is no security-relevant change.

Lower-prioritycontrib: Revert "verify-commits sha1 exceptions"by MarcoFalke · fab8bc03 · Jan 16, 2026 · 2 filesMessage 82 · StrongInformational 18Details
Commit message · MarcoFalke

contrib: Revert "verify-commits sha1 exceptions"

This reverts commit 8ac134be5e57680eb1c6ef596e5de085825e83ee, because it
is no longer needed.

82/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 18/100

This commit removes a special exception list that let one specific old commit be verified using the older, weaker SHA-1 algorithm. The exception is no longer needed, so the code now treats all commits consistently under the stronger SHA-512 verification rules. By itself, this is a cleanup that slightly tightens the project's commit-verification script; it is not a fix for an active security bug in Bitcoin Core's network code or wallet.

Lower-priorityfuzz: Use min option in ConsumeTimeby MarcoFalke · faa5a9eb · Jan 16, 2026 · 1 fileMessage 70 · AdequateInformational 15Details
Commit message · MarcoFalke

fuzz: Use min option in ConsumeTime

This is less code and also required for the next commit.

70/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Mentions testing or verification
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 15/100

This commit is a minor code cleanup inside a fuzz test (automated randomized testing) for Bitcoin's header synchronization logic. It replaces a manual check that skipped invalid mock times with a built-in minimum-time option in the test helper. There is no change to production Bitcoin node code, no user-facing behavior change, and no security fix.

AI review queuedwallet: Delete unnecessary PopulateWalletFromDB() callsby David Gumberg · 0972785f · Jan 16, 2026 · 3 filesMessage 50 · ThinInformational 17Details
Commit message · David Gumberg

wallet: Delete unnecessary PopulateWalletFromDB() calls

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 17/100

This commit removes calls to a database-loading helper in three places where they were unnecessary. In two test files and one wallet dump/import tool, the code was calling PopulateWalletFromDB() on a freshly created, empty wallet database before immediately writing new data into it. The change is a code cleanup: it deletes redundant work and, in the dump tool, removes an error check that could never fail meaningfully because the wallet had just been created. There is no direct evidence this fixes a security vulnerability.

AI review queuedscripted-diff: refactor: CWallet::LoadWallet->PopulateWalletFromDBby David Gumberg · f0a04609 · Jan 16, 2026 · 8 filesMessage 83 · StrongInformational 15Details
Commit message · David Gumberg

scripted-diff: refactor: CWallet::LoadWallet->PopulateWalletFromDB

There are too many functions in CWallet with names like "Load" and
"Create", disambiguate what CWallet::LoadWallet does by renaming it to
PopulateWalletFromDB.

-BEGIN VERIFY SCRIPT-
sed -i 's|\bLoadWallet()|PopulateWalletFromDB()|g' $(git grep -l 'LoadWallet()' -- ':(exclude)src/wallet/walletdb.cpp')
-END VERIFY SCRIPT-

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a simple rename of one internal wallet function from LoadWallet() to PopulateWalletFromDB(). It does not change what the code does, only its name. There is no security impact.

Lower-priorityiwyu: Add missed line to IWYU patchby Hennadii Stepanov · de509c6d · Jan 15, 2026 · 1 fileMessage 60 · AdequateInformational 15Details
Commit message · Hennadii Stepanov

iwyu: Add missed line to IWYU patch

This makes IWYU suggest `<cassert>` over `<assert.h>`.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This is a tiny maintenance patch for a code-style checking tool used in Bitcoin Core's continuous integration. It adds one missing line to a patch file that tells the Include What You Use (IWYU) tool to recommend the C++ header <cassert> instead of the C header <assert.h>. It does not change any Bitcoin Core runtime code, consensus rules, networking, wallet logic, or build outputs. There is no security relevance.

AI review queuedutil: Add Expected::swap()by MarcoFalke · faa59b36 · Jan 15, 2026 · 2 filesMessage 35 · OpaqueInformational 15Details
Commit message · MarcoFalke

util: Add Expected::swap()

35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This commit adds a standard swap() method to a small utility helper class (Expected) used to represent either a successful value or an error. It also adds a unit test. There is no security relevance in the change itself.

Lower-priorityutil: Implement Expected::operator*()&&by MarcoFalke · fabb47e4 · Jan 15, 2026 · 2 filesMessage 50 · ThinInformational 15Details
Commit message · MarcoFalke

util: Implement Expected::operator*()&&

It is currently unused, but implementing it is closer to std::expected.

50/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit adds a new C++ language feature to Bitcoin Core's custom Expected helper class: the ability to safely move a value out of a temporary Expected object when using the * operator. It also adds a unit test. There is no security issue here; it is a routine code-quality and standards-conformance improvement.