BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2924 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

258security candidates613second-pass queue2891AI analyses
186commits · 30 days
470commits · 60 days
1487commits · 180 days
2863commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
960Strong · 80–100
1188Adequate · 60–79
688Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow16351161065
MarcoFalke41021406074
Lőrinc17721177081
fanquake22819226057
Hennadii Stepanov21214208063
rkrux57957074
Sjors Provoost89889074
merge-script37718088
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Analysis record

Published AI watches

Last scanned 18 minutes ago

Low 28 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35959: Update secp256k1 subtree to latest master

This commit updates Bitcoin Core's embedded copy of the secp256k1 cryptographic library to a newer version. The update adds a new Silent Payments module, lets advanced users swap in a custom SHA256 compression function, removes some old de…

Dependency update of a core cryptographic library (libsecp256k1)New runtime SHA256 compression callback with self-test/smoke test to catch mis-implementations earlyBehavior change in ellswift_xdh to reject secret keys >= curve order (vendor states not a security issue)
625f951bby Ava Chow+297−11626 files
No security note in commit
Informational 23 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35605: wallet: rpc: Deprecate `removeprunedfunds` RPC

This commit deprecates a Bitcoin Core wallet RPC command called removeprunedfunds. The command lets users delete transactions from their own wallet, which can alter displayed balances. The change does not fix a software bug; it is a cleanu…

RPC allows deletion of arbitrary wallet transactions, affecting balancesDeprecation framed by authors as removing a dangerous and maintenance-burden featureNo authentication bypass, memory corruption, or consensus change present in diff
e9ed5e83by Ava Chow+64−695 files
No security note in commit
Informational 18 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35930: wallet: post-#35501 cleanups in CWalletTx

This is a follow-up cleanup and hardening patch for the Bitcoin Core wallet's handling of transactions that have multiple possible witness versions (same transaction ID but different witness data). It renames a variable, simplifies a helpe…

Added input-validation during wallet transaction deserializationNew unit test specifically exercises rejection of mismatched variant txidFollow-up to PR #35501 which introduced witness-variant tracking in the wallet
512dc9afby Ava Chow+68−315 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35729: refactor: test: Unroll `&&` conditions in macros

This commit only changes Bitcoin Core's internal test code. It splits combined conditions inside test-check macros (like BOOST_CHECK(a && b)) into separate checks so that when a test fails, the test output points to the exact failing condi…

aa0e0f79by merge-script+196−9519 files
No security note in commit
Low 26 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35493: wallet, descriptor: Fix MuSig private key completeness checks on `importdescriptors`

This commit fixes a bug in Bitcoin Core's wallet import logic for a new type of multi-signature setup called MuSig. Previously, when a user imported a MuSig descriptor that already contained all needed private keys, the wallet incorrectly …

False-positive warning in wallet import for fully-private MuSig descriptorsIncorrect private-key completeness check on synthetic aggregate public keyDescriptor logic now delegates completeness to `Descriptor::HavePrivateKeys()`
2c01832fby merge-script+76−374 files
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35943: doc: fix dead link in txrequest.h

This commit only fixes a broken web link in a code comment. It replaces an outdated URL to a research paper with a working URL to the same paper. There is no change to program logic, no security fix, and no vulnerability.

5d051c05by merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#33186: wallet, test: Ancient Wallet Migration from v0.14.3 (no-HD and Single Chain)

This commit only adds new automated tests for migrating very old Bitcoin Core wallets (version 0.14.3 from 2017) to the modern descriptor wallet format. It does not change any wallet production code, consensus rules, or network behavior. T…

757aa573by merge-script+246−124 files
No security note in commit
Low 28 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35925: wallet, rpc: Exclude non-owned addresses from listreceivedby*

This update fixes a wallet reporting bug. When a user asked their Bitcoin wallet to list every address that had received money, including empty ones, the result incorrectly included foreign addresses that the wallet merely knew about (for …

Information disclosure: wallet RPCs leaked existence/labels of foreign addressesIncorrect access-control boundary: non-owned addresses exposed in 'received' reportFix uses IsMine() rather than address purpose metadata, avoiding inconsistent purpose handling
e8cc21c5by Ava Chow+19−32 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35937: test: Append print_suppressions=0 to LSAN_OPTIONS, and suppress bitcoin-qt

This commit only changes test configuration. It tells the LeakSanitizer tool used during automated testing to stop printing long lists of suppressed memory leaks, and it narrows the list of ignored leaks to the bitcoin-qt GUI test binary. …

5973e075by merge-script+3−42 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-prioritykernel: Add interrupt function to C headerby TheCharlatan · d27e2775 · Nov 4, 2025 · 4 filesMessage 68 · AdequateInformational 15Details
Commit message · TheCharlatan

kernel: Add interrupt function to C header

Calling interrupt can halt long-running functions associated with
objects that were created through the passed-in context.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit adds a new public API function that lets outside callers request an interruption of long-running Bitcoin Core kernel operations such as block processing or reindexing. It is a straightforward feature addition with no security-relevant bug fix or behavior change to existing code.

Lower-prioritykernel: Add validation interface to C headerby TheCharlatan · aa262da7 · Nov 4, 2025 · 4 filesMessage 80 · StrongInformational 15Details
Commit message · TheCharlatan

kernel: Add validation interface to C header

This adds the infrastructure required to process validation events. For
now the external validation interface only has support for the
`BlockChecked` , `NewPoWValidBlock`, `BlockConnected`, and
`BlockDisconnected` callback. Support for the other internal
validation interface methods can be added in the future.

The validation interface follows an architecture for defining its
callbacks and ownership that is similar to the notifications.

The task runner is created internally with a context, which itself
internally creates a unique ValidationSignals object. When the user
creates a new chainstate manager the validation signals are internally
passed to the chainstate manager through the context.

A validation interface can register for validation events with a
context. Internally the passed in validation interface is registerd with
the validation signals of a context.

The callbacks block any further validation execution when they are
called. It is up to the user to either multiplex them, or use them
otherwise in a multithreaded mechanism to make processing the validation
events non-blocking.

I.e. for a synchronous mechanism, the user executes instructions
directly at the end of the callback function:

```mermaid
sequenceDiagram
participant V as Validation
participant C as Callback
V->>C: Call callback
Note over C: Process event (blocks)
C-->>V: Return
Note over V: Validation resumes

```

To avoid blocking, the user can submit the data to e.g. a worker thread
or event manager, so processing happens asynchronously:

```mermaid
sequenceDiagram
participant V as Validation
participant C as Callback
participant W as Worker Thread
V->>C: Call callback
C->>W: Submit to worker thread
C-->>V: Return immediately
Note over V: Validation continues
Note over W: Process event async
```

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit adds a new public programming interface to the Bitcoin Core kernel library so that external programs can receive notifications about block validation events (for example, when a block is checked, connected, or disconnected). It is a feature addition, not a fix for a security flaw. There is no indication in the commit or supplied references that this change addresses a vulnerability or security incident.

Lower-prioritykernel: Add import blocks function to C headerby TheCharlatan · 1976b13b · Nov 4, 2025 · 4 filesMessage 68 · AdequateInformational 20Details
Commit message · TheCharlatan

kernel: Add import blocks function to C header

Add `btck_import_blocks` to import block data and rebuild indexes. The
function can either reindex all existing block files if the indexes were
previously wiped through the chainstate manager options, or import
blocks from specified file paths.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 20/100

This commit adds a new public function to Bitcoin Core's kernel library that lets callers import block files or trigger a reindex. It is a feature addition that exposes existing internal reindex/import logic through a C API. There is no direct evidence in the commit that it fixes a security bug; it appears to be ordinary API expansion for the libbitcoinkernel project.

Lower-prioritykernel: Add chainstate load options for in-memory dbs in C headerby TheCharlatan · a747ca1f · Nov 4, 2025 · 4 filesMessage 73 · AdequateInformational 19Details
Commit message · TheCharlatan

kernel: Add chainstate load options for in-memory dbs in C header

This allows a user to run the kernel without creating on-disk files for
the block tree and chainstate indexes. This is potentially useful in
scenarios where the user needs to do some ephemeral validation
operations.

One specific use case is when linearizing the blocks on disk. The block
files store blocks out of order, so a program may utilize the library
and its header to read the blocks with one chainstate manager, and then
write them back in order, and without orphans, with another chainstate
maanger. To save disk resources and if the indexes are not required once
done, it may be beneficial to keep the indexes in memory for the
chainstate manager that writes the blocks back again.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 19/100

This commit adds new configuration options to the Bitcoin Core kernel library that let developers run the blockchain validation indexes entirely in memory instead of writing them to disk. It is a feature addition for ephemeral or resource-saving use cases, not a security fix or vulnerability. There is no indication in the commit that it addresses a security bug.

Lower-prioritykernel: Add options for reindexing in C headerby TheCharlatan · 070e7773 · Nov 4, 2025 · 4 filesMessage 68 · AdequateInformational 18Details
Commit message · TheCharlatan

kernel: Add options for reindexing in C header

Adds options for wiping the chainstate and block tree indexes to the
chainstate manager options. In combination and once the
`*_import_blocks(...)` function is added in a later commit, this
triggers a reindex. For now, it just wipes the existing data.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 18/100

This commit adds a new configuration option to the Bitcoin Core kernel library that lets a caller choose to delete (wipe) the block database, the chainstate database, or both when starting up. It is intended to support a future reindex feature. The change is purely additive: it exposes existing internal wipe flags through the public C API and adds tests. There is no bug fix, no reported vulnerability, and no evidence this introduces a security issue on its own.

AI review queuedkernel: Add block validation to C headerby TheCharlatan · ad80abc7 · Nov 4, 2025 · 5 filesMessage 78 · AdequateInformational 20Details
Commit message · TheCharlatan

kernel: Add block validation to C header

The added function allows the user process and validate a given block
with the chainstate manager. The *_process_block(...) function does some
preliminary checks on the block before passing it to
`ProcessNewBlock(...)`. These are similar to the checks in the
`submitblock()` rpc.

Richer processing of the block validation result will be made available
in the following commits through the validation interface.

The commits also adds a utility for deserializing a `CBlock`
(`kernel_block_create()`) that may then be passed to the library for
processing.

The tests exercise the function for both mainnet and regtest. The
commit also adds the data of 206 regtest blocks (some blocks also
contain transactions).

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
defensive validationsecond-pass: broader security terminology
AI analysis · Informational 20/100

This commit adds a new public library API to Bitcoin Core's 'kernel' module that lets outside programs create block objects from raw bytes and ask the chainstate manager to process/validate them. It is a feature addition, not a fix. The code mostly forwards work to existing internal validation routines and adds tests using 206 regtest blocks. There is no direct evidence in the commit that this introduces a security vulnerability, but any new block-processing surface can affect consensus-critical code paths.

Lower-prioritykernel: Add chainstate loading when instantiating a ChainstateManagerby TheCharlatan · cb1590b0 · Nov 4, 2025 · 2 filesMessage 73 · AdequateInformational 19Details
Commit message · TheCharlatan

kernel: Add chainstate loading when instantiating a ChainstateManager

The library will now internally load the chainstate when a new
ChainstateManager is instantiated.

Options for controlling details of loading the chainstate will be added
over the next few commits.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 19/100

This commit changes the Bitcoin Core kernel library so that creating a ChainstateManager automatically loads and verifies the existing blockchain data and connects to the best known block. It is a normal initialization improvement, not a security fix. There is no evidence of a vulnerability being patched.

Lower-prioritykernel: Add chainstate manager option for setting worker threadsby TheCharlatan · e2c1bd3d · Nov 4, 2025 · 4 filesMessage 73 · AdequateInformational 15Details
Commit message · TheCharlatan

kernel: Add chainstate manager option for setting worker threads

Re-use the same pattern used for the context options. This allows users
to set the number of threads used in the validation thread pool.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit adds a new configuration option to the Bitcoin Core kernel library that lets callers choose how many worker threads are used during blockchain validation. It is a straightforward feature addition with no security-relevant behavior changes visible in the diff.

Lower-prioritykernel: Add chainstate manager object to C headerby TheCharlatan · 65571c36 · Nov 4, 2025 · 5 filesMessage 78 · AdequateInformational 19Details
Commit message · TheCharlatan

kernel: Add chainstate manager object to C header

This is the main driver class for anything validation related, so expose
it here.

Creating the chainstate manager options will currently also trigger the
creation of their respectively configured directories.

The chainstate manager and block manager options are consolidated into a
single object. The kernel might eventually introduce a separate block
manager object for the purposes of being a light-weight block store
reader.

The chainstate manager will associate with the context with which it was
created for the duration of its lifetime and it keeps it in memory with
a shared pointer.

The tests now also create dedicated temporary directories. This is
similar to the behaviour in the existing unit test framework.

Co-authored-by: stickies-v <stickies-v@protonmail.com>

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 19/100

This commit adds a new 'chainstate manager' object to Bitcoin Core's public C API. It is a routine feature addition that exposes existing internal validation machinery through a stable library interface. There is no direct evidence in the commit that it fixes a security bug or introduces a vulnerability; it mainly expands what external programs can do with the Bitcoin kernel library.

Lower-prioritykernel: Add notifications context option to C headerby TheCharlatan · c62f657b · Nov 4, 2025 · 4 filesMessage 73 · AdequateInformational 18Details
Commit message · TheCharlatan

kernel: Add notifications context option to C header

The notifications are used for notifying on connected blocks and on
warning and fatal error conditions.

The user of the C header may define callbacks that gets passed to the
internal notification object in the
`kernel_NotificationInterfaceCallbacks` struct.

Each of the callbacks take a `user_data` argument that gets populated
from the `user_data` value in the struct. It can be used to recreate the
structure containing the callbacks on the user's side, or to give the
callbacks additional contextual information.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 18/100

This commit adds a new public API feature to the Bitcoin Core kernel library that lets outside programs register callback functions to receive notifications about new blocks, sync progress, warnings, and serious errors. It is a feature addition, not a fix for a known security bug. There is no evidence in the commit or supplied references that this change addresses a security issue or introduces a vulnerability.

Lower-prioritykernel: Add chain params context option to C headerby TheCharlatan · 9e1bac45 · Nov 4, 2025 · 4 filesMessage 73 · AdequateInformational 15Details
Commit message · TheCharlatan

kernel: Add chain params context option to C header

As a first option, add the chainparams. For now these can only be
instantiated with default values. In future they may be expanded to take
their own options for regtest and signet configurations.

This commit also introduces a unique pattern for setting the option
values when calling the `*_set(...)` function.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit adds a new configuration option to the Bitcoin Core kernel library's C API, allowing users to choose which blockchain network (mainnet, testnet, signet, or regtest) the kernel should use. It is a feature addition with no apparent security relevance.

Lower-prioritykernel: Add kernel library context objectby TheCharlatan · 337ea860 · Nov 4, 2025 · 4 filesMessage 68 · AdequateInformational 15Details
Commit message · TheCharlatan

kernel: Add kernel library context object

The context introduced here holds the objects that will be required for
running validation tasks, such as the chosen chain parameters, callbacks
for validation events, and interrupt handling. These will be used by the
chainstate manager introduced in subsequent commits.

This commit also introduces conventions for defining option objects. A
common pattern throughout the C header will be:
```
options = object_option_create();
object = object_create(options);
```
This allows for more consistent usage of a "builder pattern" for
objects where options can be configured independently from
instantiation.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit adds a new 'context' object to the Bitcoin Core kernel library. It is purely an infrastructure/API change that creates a container for chain parameters, callbacks, and interrupt handling. There is no bug fix, no change to consensus rules, and no security-relevant behavior introduced.

Lower-prioritykernel: Add logging to kernel library C headerby TheCharlatan · 28d679ba · Nov 4, 2025 · 6 filesMessage 68 · AdequateInformational 19Details
Commit message · TheCharlatan

kernel: Add logging to kernel library C header

Exposing logging in the kernel library allows users to follow
operations. Users of the C header can use
`kernel_logging_connection_create(...)` to pass a callback function to
Bitcoin Core's internal logger. Additionally the level and category can
be globally configured.

By default, the logger buffers messages until
`kernel_loggin_connection_create(...)` is called. If the user does not
want any logging messages, it is recommended that
`kernel_disable_logging()` is called, which permanently disables the
logging and any buffering of messages.

Co-authored-by: stringintech <stringintech@gmail.com>

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 19/100

This commit adds a new logging feature to Bitcoin Core's kernel library so that outside programs using the library can receive internal log messages through a callback. It is a feature addition, not a fix for a security flaw. There is no indication in the commit or supplied references that this addresses a vulnerability.

AI review queuedkernel: Introduce initial kernel C header APIby TheCharlatan · 2cf136de · Nov 4, 2025 · 14 filesMessage 90 · StrongLow 26Details
Commit message · TheCharlatan

kernel: Introduce initial kernel C header API

As a first step, implement the equivalent of what was implemented in the
now deprecated libbitcoinconsensus header. Also add a test binary to
exercise the header and library.

Unlike the deprecated libbitcoinconsensus the kernel library can now use
the hardware-accelerated sha256 implementations thanks for its
statically-initialzed context. The functions kept around for
backwards-compatibility in the libbitcoinconsensus header are not ported
over. As a new header, it should not be burdened by previous
implementations. Also add a new error code for handling invalid flag
combinations, which would otherwise cause a crash.

The macros used in the new C header were adapted from the libsecp256k1
header.

To make use of the C header from C++ code, a C++ header is also
introduced for wrapping the C header. This makes it safer and easier to
use from C++ code.

Co-authored-by: stickies-v <stickies-v@protonmail.com>

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
Why it was queued
signing or wallet pathsecond-pass: broader security terminologysecond-pass: security-sensitive path
AI analysis · Low 26/100

This commit introduces a brand-new C and C++ programming interface for Bitcoin Core's experimental "kernel" library. It exposes functions for parsing transactions, reading transaction outputs, and verifying Bitcoin scripts. The change is primarily a feature addition: it replaces the older libbitcoinconsensus-style API with a cleaner, modern one and adds tests. The commit message notes that one new error code was added specifically to prevent crashes when callers combine script-verification flags in invalid ways. There is no direct evidence in the commit of an exploitable vulnerability in existing code, but the new API does handle untrusted transaction data and must be used carefully.

AI review queuedqt: Modernize custom filteringby Hennadii Stepanov · e15e8cba · Nov 3, 2025 · 1 fileMessage 58 · ThinInformational 15Details
Commit message · Hennadii Stepanov

qt: Modernize custom filtering

In `QSortFilterProxyModel`, `invalidateFilter()` is scheduled for
deprecation in Qt 6.13.
`beginFilterChange()` was introduced in Qt 6.9.
`endFilterChange()` was introduced in Qt 6.10.

58/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context
Why it was queued
defensive validationsigning or wallet pathsecond-pass: near security thresholdsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This is a routine code modernization change in Bitcoin Core's Qt wallet interface. It replaces an older Qt filtering API call (invalidateFilter) with newer equivalents (beginFilterChange/endFilterChange) for future Qt 6 compatibility. There is no security-relevant behavior change.

AI review queueddepends: disable builtin variablesby fanquake · 52b15958 · Nov 3, 2025 · 1 fileMessage 35 · OpaqueInformational 15Details
Commit message · fanquake

depends: disable builtin variables

35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This commit changes the Bitcoin Core dependency build system (the 'depends' Makefile) to tell GNU Make not to use its built-in default variable values. Built-in variables like 'CC' or 'CFLAGS' can silently override or mix with project-specific settings, which in rare cases could cause the wrong compiler or flags to be used when building third-party dependencies. The patch is a hardening measure rather than a fix for a known active vulnerability.

Lower-prioritydepends: disable builtin rules and suffixes.by Dmitry Goncharov · 8b5a28fa · Nov 3, 2025 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · Dmitry Goncharov

depends: disable builtin rules and suffixes.

When there is no rule to build a target in the makefile, make looks
for a builtin rule.
When --no-builtin-rules is specified make no longer performs this lookup.

E.g. the following in an excerpt from make -d output.
Here, make looks for a rule to build 'all'.

Considering target file 'all'.
File 'all' does not exist.
Looking for an implicit rule for 'all'.
Trying pattern rule with stem 'all'.
Trying implicit prerequisite 'all.o'.
Trying pattern rule with stem 'all'.
Trying implicit prerequisite 'all.c'.
Trying pattern rule with stem 'all'.
Trying implicit prerequisite 'all.cc'.
Trying pattern rule with stem 'all'.
Trying implicit prerequisite 'all.C'.
Trying pattern rule with stem 'all'.
Trying implicit prerequisite 'all.cpp'.
Trying pattern rule with stem 'all'.
Trying implicit prerequisite 'all.p'.
Trying pattern rule with stem 'all'.
Trying implicit prerequisite 'all.f'.
...
Many more lines like this are omitted.

Because this build system does not use make builtin rules or suffixes,
there is no benefit in having builtin rules enabled.

There are 2 benefits in having builtin rules disabled.

1. Improves performance by eliminating redundant lookups.
2. Simplifies troubleshooting by reducing the output of make -d or
make -p.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit changes the Bitcoin Core dependency build system to tell GNU make to stop searching for built-in pattern rules (like automatically trying to compile a .c file into an .o file). This is purely a performance and debugging cleanup: builds run slightly faster and 'make -d' output is much shorter. There is no security relevance.

Lower-priorityci: fix configure docker action inputsby will · 7632e0ba · Nov 3, 2025 · 1 fileMessage 90 · StrongInformational 18Details
Commit message · will

ci: fix configure docker action inputs

The options used were wrong in two ways: firstly they were not enforced
as a "choice" (i.e. invalid input valudes could be provided without
error) and one of the options was listed as `gh` when we passed it as
`gha` from ci.yml.

"Fix" this by removing the choice altogether but sanity-testing the
input value against an expected list using a GHA "warning" to notify of
unknown inputs.

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
documentation-only discount
AI analysis · Informational 18/100

This is a minor fix to a GitHub Actions helper used in Bitcoin Core's continuous integration (CI). The action had a typo in one of its allowed options ('gh' instead of 'gha') and did not actually enforce the list of allowed values. The patch removes the broken option list and instead prints a warning if an unexpected value is provided. It is a workflow-quality fix, not a security patch for Bitcoin's code or network.

Lower-priorityrefactor: Prefer `<=>` over multiple relational operatorsby Daniel Pfeifer · 48840bfc · Nov 3, 2025 · 4 filesMessage 77 · AdequateInformational 15Details
Commit message · Daniel Pfeifer

refactor: Prefer `<=>` over multiple relational operators

Define `operator<=>` in classes that have all of `<`, `<=`, `>`, `>=`.

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit is a routine code cleanup that replaces several older-style comparison operators with C++20's newer three-way comparison operator (<=>). It does not change what the code does, only how it is written. There is no security issue here.

AI review queuedrefactor: Remove all `operator!=` definitionsby Daniel Pfeifer · 5a0f49bd · Nov 3, 2025 · 14 filesMessage 72 · AdequateInformational 15Details
Commit message · Daniel Pfeifer

refactor: Remove all `operator!=` definitions

The compiler can deduce `operator!=` from `operator==`.

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a routine code cleanup: it removes hand-written 'not equal' comparison operators across many files because modern C++ compilers can automatically generate them from the existing 'equal' operators. There is no functional change and no security risk.

AI review queuedrefactor: remove dead branches in `SingletonClusterImpl`by Lőrinc · 2d23820e · Nov 3, 2025 · 1 fileMessage 100 · StrongInformational 15Details
Commit message · Lőrinc

refactor: remove dead branches in `SingletonClusterImpl`

`SplitAll()` always calls `ApplyRemovals()` first, for a singleton, it empties the cluster, therefore any `SingletonClusterImpl` passed to `Split()` must be empty.

`TxGraphImpl::ApplyDependencies()` first merges each dependency group and asserts the group has at least one dependency.
Since `parent` != `child`, `TxGraphImpl::Merge()` upgrades the merge target to `GenericClusterImpl`, therefore the `ApplyDependencies()` is never dispatched to `SingletonClusterImpl`.

Found during review: https://github.com/bitcoin/bitcoin/pull/33157#discussion_r2423058928
Coverage evidence:
* https://maflcko.github.io/b-c-cov/fuzz.coverage/src/txgraph.cpp.gcov.html#L1446
* https://storage.googleapis.com/oss-fuzz-coverage/bitcoin-core/reports/20251103/linux/src/bitcoin-core/src/txgraph.cpp.html#L1446

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
Why it was queued
fuzzing or regression evidencesecond-pass: broader security terminology
AI analysis · Informational 15/100

This is a code cleanup change in Bitcoin Core's internal transaction graph logic. It removes branches of code that the author proved can never actually run, replacing them with explicit 'this should never happen' assumptions. There is no security bug being fixed; it is purely a refactoring to simplify the code and document invariants.

Lower-priorityrefactor: Use initializer list in CompressedHeaderby Daniela Brozzoni · e37555e5 · Nov 3, 2025 · 1 fileMessage 77 · AdequateInformational 15Details
Commit message · Daniela Brozzoni

refactor: Use initializer list in CompressedHeader

Also mark CompressedHeader as explicit, and GetFullHeader as const

Co-Authored-By: Aurèle Oulès <aurele@oules.com>

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Informational 15/100

This is a small, safe code cleanup in Bitcoin Core's header synchronization code. It changes how one internal data structure is initialized, marks a constructor as explicit to prevent accidental implicit conversions, and marks a helper method as const to indicate it does not modify the object. There is no security-relevant behavior change.

Lower-priorityrefactor: Remove unused parameter in ReportHeadersPresyncby Daniela Brozzoni · 0488bdfe · Nov 3, 2025 · 3 filesMessage 77 · AdequateInformational 15Details
Commit message · Daniela Brozzoni

refactor: Remove unused parameter in ReportHeadersPresync

Co-Authored-By: Aurèle Oulès <aurele@oules.com>

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Informational 15/100

This is a simple code cleanup: a function called ReportHeadersPresync had a 'work' parameter that was never used, so the commit removes that parameter from the function definition and from every place that calls it. There is no change to program behavior, no bug fix, and no security relevance.

Lower-priorityrefactor: Remove redundant parameter from CheckHeadersPoWby Daniela Brozzoni · 256246a9 · Nov 3, 2025 · 1 fileMessage 85 · StrongInformational 15Details
Commit message · Daniela Brozzoni

refactor: Remove redundant parameter from CheckHeadersPoW

No need to pass consensusParams, as CheckHeadersPoW already has access
to m_chainparams.GetConsensus()

Co-Authored-By: maflcko <6399679+maflcko@users.noreply.github.com>

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a minor code cleanup (refactor) in Bitcoin Core. It removes an unneeded input parameter from an internal function and makes that function fetch the same information from an existing member variable instead. The behavior of the program is unchanged.

Lower-priorityrefactor: Remove useless CBlock::GetBlockHeaderby Pieter Wuille · ca0243e3 · Nov 3, 2025 · 7 filesMessage 72 · AdequateInformational 15Details
Commit message · Pieter Wuille

refactor: Remove useless CBlock::GetBlockHeader

There is no need for a function to convert a CBlock to a CBlockHeader, as it's a child
class of it.

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit is a simple code cleanup. It removes a helper function called GetBlockHeader that copied a few fields from a full block into a block header object. Because a full block already is a block header in this codebase, the function was unnecessary. All call sites now use the block directly instead of making a copy. There is no security-relevant change.