BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2924 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

258security candidates613second-pass queue2891AI analyses
186commits · 30 days
470commits · 60 days
1487commits · 180 days
2863commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
960Strong · 80–100
1188Adequate · 60–79
688Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow16351161065
MarcoFalke41021406074
Lőrinc17721177081
fanquake22819226057
Hennadii Stepanov21214208063
rkrux57957074
Sjors Provoost89889074
merge-script37718088
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Analysis record

Published AI watches

Last scanned 20 minutes ago

Low 28 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35959: Update secp256k1 subtree to latest master

This commit updates Bitcoin Core's embedded copy of the secp256k1 cryptographic library to a newer version. The update adds a new Silent Payments module, lets advanced users swap in a custom SHA256 compression function, removes some old de…

Dependency update of a core cryptographic library (libsecp256k1)New runtime SHA256 compression callback with self-test/smoke test to catch mis-implementations earlyBehavior change in ellswift_xdh to reject secret keys >= curve order (vendor states not a security issue)
625f951bby Ava Chow+297−11626 files
No security note in commit
Informational 23 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35605: wallet: rpc: Deprecate `removeprunedfunds` RPC

This commit deprecates a Bitcoin Core wallet RPC command called removeprunedfunds. The command lets users delete transactions from their own wallet, which can alter displayed balances. The change does not fix a software bug; it is a cleanu…

RPC allows deletion of arbitrary wallet transactions, affecting balancesDeprecation framed by authors as removing a dangerous and maintenance-burden featureNo authentication bypass, memory corruption, or consensus change present in diff
e9ed5e83by Ava Chow+64−695 files
No security note in commit
Informational 18 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35930: wallet: post-#35501 cleanups in CWalletTx

This is a follow-up cleanup and hardening patch for the Bitcoin Core wallet's handling of transactions that have multiple possible witness versions (same transaction ID but different witness data). It renames a variable, simplifies a helpe…

Added input-validation during wallet transaction deserializationNew unit test specifically exercises rejection of mismatched variant txidFollow-up to PR #35501 which introduced witness-variant tracking in the wallet
512dc9afby Ava Chow+68−315 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35729: refactor: test: Unroll `&&` conditions in macros

This commit only changes Bitcoin Core's internal test code. It splits combined conditions inside test-check macros (like BOOST_CHECK(a && b)) into separate checks so that when a test fails, the test output points to the exact failing condi…

aa0e0f79by merge-script+196−9519 files
No security note in commit
Low 26 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35493: wallet, descriptor: Fix MuSig private key completeness checks on `importdescriptors`

This commit fixes a bug in Bitcoin Core's wallet import logic for a new type of multi-signature setup called MuSig. Previously, when a user imported a MuSig descriptor that already contained all needed private keys, the wallet incorrectly …

False-positive warning in wallet import for fully-private MuSig descriptorsIncorrect private-key completeness check on synthetic aggregate public keyDescriptor logic now delegates completeness to `Descriptor::HavePrivateKeys()`
2c01832fby merge-script+76−374 files
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35943: doc: fix dead link in txrequest.h

This commit only fixes a broken web link in a code comment. It replaces an outdated URL to a research paper with a working URL to the same paper. There is no change to program logic, no security fix, and no vulnerability.

5d051c05by merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#33186: wallet, test: Ancient Wallet Migration from v0.14.3 (no-HD and Single Chain)

This commit only adds new automated tests for migrating very old Bitcoin Core wallets (version 0.14.3 from 2017) to the modern descriptor wallet format. It does not change any wallet production code, consensus rules, or network behavior. T…

757aa573by merge-script+246−124 files
No security note in commit
Low 28 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35925: wallet, rpc: Exclude non-owned addresses from listreceivedby*

This update fixes a wallet reporting bug. When a user asked their Bitcoin wallet to list every address that had received money, including empty ones, the result incorrectly included foreign addresses that the wallet merely knew about (for …

Information disclosure: wallet RPCs leaked existence/labels of foreign addressesIncorrect access-control boundary: non-owned addresses exposed in 'received' reportFix uses IsMine() rather than address purpose metadata, avoiding inconsistent purpose handling
e8cc21c5by Ava Chow+19−32 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35937: test: Append print_suppressions=0 to LSAN_OPTIONS, and suppress bitcoin-qt

This commit only changes test configuration. It tells the LeakSanitizer tool used during automated testing to stop printing long lists of suppressed memory leaks, and it narrows the list of ignored leaks to the bitcoin-qt GUI test binary. …

5973e075by merge-script+3−42 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-prioritycmake, test: Improve locality of `bitcoin_ipc_test` library descriptionby Hennadii Stepanov · 866bbb98 · Nov 5, 2025 · 8 filesMessage 60 · AdequateInformational 15Details
Commit message · Hennadii Stepanov

cmake, test: Improve locality of `bitcoin_ipc_test` library description

60/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a pure build-system and file relocation cleanup. It moves the bitcoin_ipc_test library definition and its associated test files from src/test/ to src/ipc/test/ so the Cap'n Proto compiler can use simpler relative import paths. No runtime behavior of Bitcoin Core changes, and no security vulnerability is introduced or fixed.

AI review queuedtest: add case where `TOTAL_TRIES` is exceeded yet solution remainsby yancy · b189a345 · Nov 5, 2025 · 1 fileMessage 95 · StrongInformational 15Details
Commit message · yancy

test: add case where `TOTAL_TRIES` is exceeded yet solution remains

Show that `CoinGrider` halts searching when the number of attempts exceeds
`TOTAL_TRIES`. To do so, show that a solution is found, then add one
more entry to the same set of inputs. Since the search orders by
`effective_value`, the solution is constructed such that only values
with the lowest `effective_value` have the least weight. Only the
lowest weight values will not exceed the `max_selection_weight`.
Therefore, `CoinGrinder` will not evaluate all lowest weight solutions
together before exceeding `TOTAL_TRIES` since they are last found.

This test case was inspired by a similar test for `BnB` currently
named `bnb_test`.

95/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit only adds a new test case to Bitcoin Core's automated test suite. It demonstrates an existing behavior of the CoinGrinder coin-selection algorithm: if too many combinations must be tried, the algorithm stops before finding a valid solution. The commit does not change any production wallet code, so it cannot by itself introduce a security vulnerability or fix one in live software.

Lower-priorityguix: move static-libc++ into CMAKE_EXE_LINKER_FLAGS flagsby fanquake · 078a72c3 · Nov 5, 2025 · 1 fileMessage 65 · AdequateInformational 15Details
Commit message · fanquake

guix: move static-libc++ into CMAKE_EXE_LINKER_FLAGS flags

Make it clearer that we are only applying this to executables.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit is a build-system cleanup for Bitcoin Core's Guix reproducible-build scripts. It moves the '-static-libstdc++' linker flag from the general host linker flags into the CMake executable-only linker flags, so the static C++ standard library is linked only for executables and not accidentally applied elsewhere. There is no security-relevant change here.

Lower-prioritytest: move create_malleated_version() to messages.py for reuseby Vasil Dimov · 2bd155e6 · Nov 5, 2025 · 2 filesMessage 72 · AdequateInformational 15Details
Commit message · Vasil Dimov

test: move create_malleated_version() to messages.py for reuse

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a simple code cleanup in Bitcoin Core's test suite. It moves a helper function that creates a deliberately broken transaction from one test file into a shared test library so other tests can reuse it. No production code, network rules, or wallet behavior are changed.

Lower-prioritykernel: Use enumeration type for flags argumentby TheCharlatan · ed572050 · Nov 5, 2025 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · TheCharlatan

kernel: Use enumeration type for flags argument

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This is a tiny, non-functional code cleanup in Bitcoin Core's public C kernel API header. It changes one function parameter from a plain unsigned integer to a named enumeration type, and fixes a grammar typo in a comment. There is no security relevance.

Lower-prioritydoc: Add cmake help option in Windows build instructionsby frankomosh · 9577daa3 · Nov 5, 2025 · 2 filesMessage 73 · AdequateInformational 15Details
Commit message · frankomosh

doc: Add cmake help option in Windows build instructions

Used to display available configuration options, for consistency with recent changes in Unix build docs

Co-authored-by: stickies-v <stickies-v@users.noreply.github.com>

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only updates two Windows build instruction documents to mention a standard CMake help command. It does not change any program code, build scripts, or configuration logic, and has no security relevance.

Lower-priorityrefactor: Use const reference to std::source_locationby MarcoFalke · fae1d996 · Nov 5, 2025 · 3 filesMessage 93 · StrongInformational 14Details
Commit message · MarcoFalke

refactor: Use const reference to std::source_location

Performance likely does not matter here, but from a perspective of
code-readablilty, a const reference should be preferred for read-only
access.

So use it here.

This requires to set -Wno-error=dangling-reference for GCC 13.1
compilations, but this false-positive is fixed in later GCC versions.

See also https://godbolt.org/z/fjc6be65M

93/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 14/100

This is a minor code cleanup (refactor) that changes how a diagnostic helper passes a C++ standard library object. It does not fix a security bug, change behavior, or introduce a vulnerability. The accompanying build-script changes only suppress a compiler warning that newer compilers would not emit anyway.

Lower-priorityutil: Allow Assert() in contexts without __func__by MarcoFalke · fa5fbcd6 · Nov 5, 2025 · 2 filesMessage 76 · AdequateInformational 15Details
Commit message · MarcoFalke

util: Allow Assert() in contexts without __func__

Without this, compile warnings could be hit about __func__ being only
valid inside functions.

warning: predefined identifier is only valid inside function [-Wpredefined-identifier-outside-function]
note: expanded from macro Assert
115 | #define Assert(val) inline_assertion_check<true>(val, __FILE__, __LINE__, __func__, #val)
| ^

Ref https://github.com/bitcoin/bitcoin/pull/32740#discussion_r2486258473

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 15/100

This is a routine code-quality change that swaps the old way of recording file, line, and function names in assertion helpers for a modern C++ standard feature. It fixes a compiler warning that could appear when assertions are used in certain contexts, but it does not change what the program does or fix any security bug.

Lower-priorityrefactor: remove dead code in `CountWitnessSigOps`by Lőrinc · 24bcad3d · Nov 4, 2025 · 5 filesMessage 100 · StrongInformational 15Details
Commit message · Lőrinc

refactor: remove dead code in `CountWitnessSigOps`

Found while reviewing #32840

The `nullptr` witness path was dead in normal code paths: removing it deletes unreachable logic.

Code coverage proof:
https://maflcko.github.io/b-c-cov/total.coverage/src/script/interpreter.cpp.gcov.html#L2135

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 15/100

This commit is a code cleanup: it removes an unused 'nullptr witness' code path from a Bitcoin Core function that counts signature operations in SegWit transactions. The change does not alter behavior in normal operation because the nullptr path was never reached. It is not a security fix.

Lower-prioritycmake: Replace recursive globbing with explicit globbing in foldersby Hennadii Stepanov · 76dae5d6 · Nov 4, 2025 · 1 fileMessage 50 · ThinInformational 15Details
Commit message · Hennadii Stepanov

cmake: Replace recursive globbing with explicit globbing in folders

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit changes how Bitcoin Core's test files are copied into the build directory during compilation. It replaces a broad 'grab everything recursively' approach with explicit lists of file types per folder. There is no security vulnerability here; it is a build-system cleanup that makes the test setup more predictable and avoids accidentally linking unexpected files.

AI review queuedtest: remove obsolete `get_{key,multisig}` helpers from wallet_util.pyby Sebastian Falbesoner · ec8516ce · Nov 4, 2025 · 1 fileMessage 95 · StrongInformational 15Details
Commit message · Sebastian Falbesoner

test: remove obsolete `get_{key,multisig}` helpers from wallet_util.py

These helpers use a legacy wallet RPC (`dumpprivkey`) and thus don't
work anymore. They were only ever used for testing the `importmulti`
RPC, which also doesn't exist anymore.

95/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit simply removes two unused helper functions from Bitcoin Core's test code. The helpers relied on an old wallet command that no longer works and were only used for another removed test feature. There is no security issue here.

Security candidateclang-tidy: Remove no longer needed NOLINTby Hennadii Stepanov · 038849e2 · Nov 4, 2025 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Hennadii Stepanov

clang-tidy: Remove no longer needed NOLINT

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
seed or entropy path
AI analysis · Informational 15/100

This is a minor code cleanup change. It removes a comment marker used by an automated linting tool (clang-tidy) because the tool no longer needs it. The actual code behavior is unchanged.

Lower-priorityguix: disable libsanitizer in Linux GCC buildby fanquake · 5c41fa29 · Nov 4, 2025 · 1 fileMessage 76 · AdequateInformational 17Details
Commit message · fanquake

guix: disable libsanitizer in Linux GCC build

This causes issues when building against newer glibcs (i.e 2.42), and isn't needed
in any case.

```bash
../../../../gcc-14.3.0/libsanitizer/sanitizer_common/sanitizer_platform_limits_posix.cpp:483:31: error: invalid application of ‘sizeof’ to incomplete type ‘__sanitizer::termio’
483 | unsigned struct_termio_sz = sizeof(struct termio);
| ^~~~~~~~~~~~~~~~~~~~~
```

Extracted from #25573.

76/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
Why it was queued
defensive validation
AI analysis · Informational 17/100

This commit changes the build setup for Bitcoin Core's Linux releases so that a GCC component called libsanitizer is not compiled. The change is purely a build-compatibility fix: newer versions of glibc (the GNU C library) cause libsanitizer to fail to compile, so the Bitcoin Core developers disabled it because they do not need it for their release builds. There is no indication this fixes a security vulnerability in Bitcoin Core itself.

Lower-prioritycmake: Move IPC tests to `ipc/test`by Hennadii Stepanov · ae2e438b · Nov 4, 2025 · 4 filesMessage 55 · ThinInformational 15Details
Commit message · Hennadii Stepanov

cmake: Move IPC tests to `ipc/test`

55/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a routine build-system cleanup. It moves existing inter-process communication (IPC) test files from one directory to another and updates CMake instructions accordingly. No production code, no security-sensitive logic, and no bug fixes are present.

AI review queuedci: run native fuzz with MSAN jobby fanquake · 1e6e32fa · Nov 4, 2025 · 1 fileMessage 82 · StrongInformational 15Details
Commit message · fanquake

ci: run native fuzz with MSAN job

Set the timout to 150, to give some leeway to the slow GHA runners, that
were close to timing out with a 120m limit.

82/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Mentions testing or verification
Why it was queued
fuzzing or regression evidencedocumentation-only discountsecond-pass: broader security terminology
AI analysis · Informational 15/100

This commit only adds a new automated testing job to Bitcoin Core's continuous integration (CI) pipeline. It runs the existing fuzz tests under MemorySanitizer (MSan), a tool that detects use of uninitialized memory. The change does not modify Bitcoin Core's actual source code, network behavior, or wallet logic, so it cannot directly introduce or fix a security vulnerability in the software users run.

Lower-priorityci: use LLVM libcxx 21.1.5by fanquake · 3784d15b · Nov 4, 2025 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · fanquake

ci: use LLVM libcxx 21.1.5

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit simply updates the version of a testing tool (LLVM's libc++) used in automated continuous integration builds from 21.1.1 to 21.1.5. It does not change any Bitcoin Core code that runs on user machines, and there is no indication it fixes a security issue.

Lower-prioritykernel: Add Purpose section to header documentationby TheCharlatan · 6c7a34f3 · Nov 4, 2025 · 1 fileMessage 50 · ThinInformational 15Details
Commit message · TheCharlatan

kernel: Add Purpose section to header documentation

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only adds plain-English documentation to a header file. It describes what the bitcoinkernel library is for and warns that the API is unstable and not yet released. No code behavior changed.

Lower-prioritykernel: Allowing reducing exportsby TheCharlatan · 7e9f00bc · Nov 4, 2025 · 1 fileMessage 58 · ThinInformational 17Details
Commit message · TheCharlatan

kernel: Allowing reducing exports

Now that an API has been defined, remove the override for symbol
visibility of the library. It is now possible to build the library with
reduced exports.

58/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context
Why it was queued
documentation-only discount
AI analysis · Informational 17/100

This commit removes a temporary build setting that forced the Bitcoin Core kernel library to expose all of its internal symbols. Now that the library's public API has been defined, the project can rely on normal symbol-hiding rules when users build with reduced exports. This is a hardening and cleanup change, not a fix for an active security bug.

Lower-prioritykernel: Add pure kernel bitcoin-chainstateby TheCharlatan · 7990463b · Nov 4, 2025 · 4 filesMessage 60 · AdequateInformational 15Details
Commit message · TheCharlatan

kernel: Add pure kernel bitcoin-chainstate

Re-write the bitcoin-chainstate utility by only using the kernel C++ API
header instead of internal Bitcoin Core code.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit rewrites an internal, experimental Bitcoin Core developer utility called bitcoin-chainstate so that it uses only the public libbitcoinkernel C++ API instead of internal Bitcoin Core code. It is a refactoring and build-system change. There is no indication it fixes or introduces a security vulnerability.

Lower-priorityKernel: Add functions for working with outpointsby TheCharlatan · 36ec9a3e · Nov 4, 2025 · 4 filesMessage 78 · AdequateInformational 15Details
Commit message · TheCharlatan

Kernel: Add functions for working with outpoints

This introduces the transaction outpoint, input and id types. This now
allows a user to retrieve a transaction output from a prior transaction
that a transaction outpoint is pointing to by either scanning through
all available transactions, or maintaining a data structure for lookups.

This is exercised in the tests by verifying the script of every
transaction in the test chain.

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit adds new public programming interfaces (APIs) to the Bitcoin Core 'kernel' library so that developers can inspect transaction inputs, outpoints, and transaction IDs. It is a feature addition, not a fix for a security bug. The code does not change consensus rules, network behavior, or wallet handling. The new functions are covered by tests that verify they work correctly.

Lower-prioritykernel: Add block hash type and block tree utility functions to C headerby TheCharlatan · 5eec7fa9 · Nov 4, 2025 · 4 filesMessage 73 · AdequateInformational 15Details
Commit message · TheCharlatan

kernel: Add block hash type and block tree utility functions to C header

Introduce btck_BlockHash as a type-safe identifier for a block. Adds
functions to retrieve block tree entries by hash or height, get block
hashes and heights from entries. access the genesis block, and check if
blocks are in the active chain.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit adds new read-only ways for external programs using the Bitcoin Core kernel library to ask about blocks by their hash or height, and to compare block hashes. It is a straightforward expansion of the library's C API and its C++ wrapper, accompanied by tests. There is no indication it fixes a bug or closes a security hole.

Lower-prioritykernel: Add function to read block undo data from disk to C headerby TheCharlatan · f5d5d121 · Nov 4, 2025 · 4 filesMessage 73 · AdequateInformational 23Details
Commit message · TheCharlatan

kernel: Add function to read block undo data from disk to C header

This adds functions for reading the undo data from disk with a retrieved
block tree entry. The undo data of a block contains all the spent
script pubkeys of all the transactions in a block. For ease of
understanding the undo data is renamed to spent outputs with seperate
data structures exposed for a block's and a transaction's spent outputs.

In normal operations undo data is used during re-orgs. This data might
also be useful for building external indexes, or to scan for silent
payment transactions.

Internally the block undo data contains a vector of transaction undo
data which contains a vector of the coins consumed. The coins are all
int the order of the transaction inputs of the consuming transactions.
Each coin can be used to retrieve a transaction output and in turn a
script pubkey and amount.

This translates to the three-level hierarchy the api provides: Block
spent outputs contain transaction spent outputs, which contain
individual coins. Each coin includes the associated output, the height
of the block is contained in, and whether it is from a coinbase
transaction.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 23/100

This commit adds a new public programming interface (API) to the Bitcoin Core 'kernel' library that lets external callers read 'undo' data—renamed here as 'spent outputs'—from disk. Undo data records which previous coins were consumed by transactions in a block. It is normally used internally during chain reorganizations, but the change exposes it for external indexing and silent-payment scanning. The change is a feature addition, not a fix for a known vulnerability, and the commit message does not describe it as security-relevant.

Lower-prioritykernel: Add functions to read block from disk to C headerby TheCharlatan · 09d0f626 · Nov 4, 2025 · 4 filesMessage 73 · AdequateInformational 18Details
Commit message · TheCharlatan

kernel: Add functions to read block from disk to C header

This adds functions for reading a block from disk with a retrieved block
tree entry. External services that wish to build their own index, or
analyze blocks can use this to retrieve block data.

The block tree can now be traversed from the tip backwards. This is
guaranteed to work, since the chainstate maintains an internal block
tree index in memory and every block (besides the genesis) has an
ancestor.

The user can use this function to iterate through all blocks in the
chain (starting from the tip). The tip is retrieved from a separate
`Chain` object, which allows distinguishing whether entries are
currently in the best chain. Once the block tree entry for the genesis
block is reached a nullptr is returned if the user attempts to get the
previous entry.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 18/100

This commit adds new read-only functions to Bitcoin Core's libbitcoinkernel library so external programs can walk backward through the blockchain from the current tip and read raw block data from disk. It is a feature addition, not a fix for a known security problem. There is no evidence in the commit or supplied references that it addresses a vulnerability.

Lower-prioritykernel: Add function for copying block data to C headerby TheCharlatan · a263a4ca · Nov 4, 2025 · 4 filesMessage 83 · StrongInformational 15Details
Commit message · TheCharlatan

kernel: Add function for copying block data to C header

This adds a function for streaming bytes into a user-owned data
structure.

Use it in the tests for verifying the implementation of the validation
interface's `BlockChecked` method.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit adds a new public API function that lets users serialize a Bitcoin block to raw bytes through a callback. It also adds a C++ wrapper method and uses both in existing tests to verify that the validation interface reports the same block bytes that were originally submitted. There is no security fix here—this is a feature addition for testing and API completeness.

Lower-prioritykernel: Add functions for the block validation state to C headerby TheCharlatan · b30e15f4 · Nov 4, 2025 · 4 filesMessage 73 · AdequateInformational 19Details
Commit message · TheCharlatan

kernel: Add functions for the block validation state to C header

These allow for the interpretation of the data in a `BlockChecked`
validation interface callback. The validation state passed through
`BlockChecked` is the source of truth for the validity of a block (the
mode). It is
also useful to get richer information in case a block failed to
validate (the result).

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
defensive validation
AI analysis · Informational 19/100

This commit adds new read-only functions to Bitcoin Core's public kernel library so outside programs can ask 'Was this block valid?' and 'Why was it invalid?' when they receive a callback. It does not change any validation rules, fix a bug, or alter how Bitcoin itself processes blocks. It is a straightforward API expansion with no apparent security relevance.