CommitWatch RSS
BS
← All projectsBlockstream

Blockstream Jade

Firmware for Jade and Jade Plus Bitcoin hardware wallets.

BitcoinHardware walletsElevated watch
Source repository ↗
Repository coverage

414 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

93security candidates58second-pass queue106AI analyses
10commits · 30 days
67commits · 60 days
198commits · 180 days
414commits · 365 days
Backfill bands
Aug 5 → Feb 6216 seen38 candidatesComplete
Feb 6 → Jun 6131 seen9 candidatesComplete
Jun 6 → Jul 657 seen10 candidatesComplete
Jul 6 → Aug 510 seen0 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

57/100 average clarity
32Strong · 80–100
147Adequate · 60–79
203Thin · 40–59
32Opaque · 0–39
3security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Jon Griffiths2755260157
Mike Tolkachev311114155
Daniel Newton651516055
Mihailo Milenkovic878057
Jamie C. Driver522053
Gustavo Cateim711079
Austin-Fulbright411060
cmiguelrn111045
quantpoet111072
roderico111045
tokyovyse111063
Valerio Vaccaro200045
Analysis record

Published AI watches

Last scanned 46 minutes ago

Low 27 AI analysisMessage 86 · Strong
BS BlockstreamBlockstream Jade BitcoinHardware wallets

input: release touch handles before deleting the i2c bus

This commit fixes a bug where the touchscreen driver failed to clean up internal handles when shutting down. On newer ESP-IDF firmware, this cleanup failure caused the device to panic and freeze during boot and when using the camera or QR …

Device freeze/DoS-like symptom on affected hardwareMemory leak fixedNo input validation, authentication, or cryptographic weakness visible
36776fecby Gustavo Cateim+3−01 file
No security note in commit
Open full analysis →Source commit ↗
Low 42 AI analysisMessage 95 · Strong
BS BlockstreamBlockstream Jade BitcoinHardware wallets

Liquid (taproot): add sign_liquid_tx genesis blockhash support

This commit changes how Blockstream Jade handles the 'genesis blockhash' when signing Liquid transactions. Previously, the device only accepted the network's built-in genesis hash. Now it lets users provide a custom genesis hash for test n…

Adds input validation for caller-supplied genesis blockhashPrevents mainnet genesis hash from being used on Liquid test networksRestricts genesis_hash parameter to Liquid networks only
888eff30by Jon Griffiths+82−264 files
No security note in commit
Open full analysis →Source commit ↗
Low 48 AI analysisMessage 62 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

rpc: annotate functions returning error codes to ensure they are checked

This commit adds compiler annotations (WARN_UNUSED_RESULT) to functions that return success/failure codes, so the compiler will warn if a caller ignores the result. It also fixes a few places where return values were being ignored, replaci…

Functions returning error/success codes annotated with WARN_UNUSED_RESULTCallers now check return values of rpc_get_bip32_path() and rpc_get_boolean()Use of default-value helpers (rpc_get_boolean_or) to ensure predictable behavior on missing fields
517075baby Mike Tolkachev+24−215 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

rpc: rename get_uint64_t to get_uint64

This commit simply renames an internal helper function from `rpc_get_uint64_t` to `rpc_get_uint64` and updates every place that calls it. There are no changes to what the function does, how it checks data, or how secure it is. It is a rout…

8e0de45eby Jon Griffiths+11−117 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

rpc: rename get_boolean to get_bool

This commit is a simple rename of two internal helper functions from `rpc_get_boolean`/`rpc_get_boolean_or` to `rpc_get_bool`/`rpc_get_bool_or`, updating all call sites accordingly. There is no change to what the code does, no bug fix, and…

f6e946acby Jon Griffiths+24−2518 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

rpc: refactor app code to use getters with default values

This commit is a straightforward code cleanup that replaces verbose 'read this optional value, or leave the default' patterns with shorter helper functions that do the same thing. There is no change in behavior and no security issue visibl…

b6a07147by Mike Tolkachev+22−348 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 35 · Opaque
BS BlockstreamBlockstream Jade BitcoinHardware wallets

assets: improve precision checking

This commit tightens how Blockstream Jade handles the 'precision' value in asset contracts for Liquid assets. Previously, a very large precision value could be accepted and later used to read past the end of an internal lookup table (POW_1…

Out-of-bounds read mitigation: bounds-checking of user-controlled precision before indexing fixed-size POW_10 arrayInteger truncation safety: explicit cast of validated precision to uint8_t after range checkCompile-time invariant enforcement: JADE_STATIC_ASSERT ties array size to ASSET_PRECISION_MAX
fd0f625dby Mike Tolkachev+13−13 files
No security note in commit
Open full analysis →Source commit ↗
Low 40 AI analysisMessage 78 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

libjade: add camera/input/nvs support, refactor

This commit is a large feature/refactor patch for Blockstream Jade's libjade (a desktop emulator of the Jade hardware wallet). It adds RPC endpoints that let a host application read the emulated device's screen, push fake button presses, r…

New RPC endpoints allow external read/write of emulated NVS storageNew RPC endpoints allow external screen capture and synthetic input injectionNew RPC endpoints allow external camera frame injection
f7184945by Daniel Newton+1806−75832 files
Vendor flagged security relevance
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

Fix M5StickC Plus 2 PIN navigation

This commit fixes a user-interface navigation quirk on the M5StickC Plus 2 hardware for Blockstream Jade. When entering a PIN, the up/down button directions were not inverted to match the rest of the device's menus, making number entry con…

9de1409eby roderico+3−21 file
No security note in commit
Open full analysis →Source commit ↗
Low 36 AI analysisMessage 74 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

build: annotate functions returning error codes to ensure they are checked

This commit is a preventive build-hardening change. It adds compiler annotations (WARN_UNUSED_RESULT) to many functions that return success/failure codes, so the compiler will warn if a caller ignores the result. The goal is to catch futur…

Compiler annotation added to enforce checking of error-returning functionsNo specific vulnerability fixed in the diffNo functional code changes or call-site fixes included
909a89aaby Mike Tolkachev+215−15225 files
No security note in commit
Open full analysis →Source commit ↗
Low 46 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

identity: add identity string validation

This commit adds a safety check to Blockstream Jade's 'sign identity' feature. Before the change, the device would accept any identity string a connected app sent. Now it rejects identities that contain non-printable or unusual characters.…

Input validation added to a signing/identity processNew length-bounded string helper reduces reliance on null-terminationRejection of non-printable characters in user-presented identity string
53752b98by Mike Tolkachev+22−02 files
No security note in commit
Open full analysis →Source commit ↗
Informational 22 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

otp: show error on invalid issuer, share logging strings

This commit tightens error handling when decoding the 'issuer' field of an OTP (one-time password) setup URI. Previously, a malformed issuer string could fail to decode silently; now the device shows an error and cancels the operation inst…

Input validation added for OTP URI issuer fieldSilent failure on malformed URL-decoding replaced with explicit error returnDebug assertion added for label/issuer URL-decoding in UI display path
66c945f2by Mike Tolkachev+9−52 files
No security note in commit
Open full analysis →Source commit ↗
Low 42 AI analysisMessage 28 · Opaque
BS BlockstreamBlockstream Jade BitcoinHardware wallets

psbt: fix path size

This commit fixes a small but meaningful bug in how Jade, a hardware wallet, reads key paths from Bitcoin PSBT data. The code was passing the byte size of a buffer when it should have passed the number of 32-bit entries. Depending on how t…

Buffer-size semantic mismatch in security-critical PSBT parsingUse of sizeof() on uint32_t array where element count is expectedCode path involved in 2of3 multisig recovery key identification
9e0c3747by Mike Tolkachev+2−21 file
No security note in commit
Open full analysis →Source commit ↗
Moderate 57 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

sign: match sign_tx logic for output commitment checking

This commit fixes a logic gap in how Blockstream Jade checks cryptographic commitments for transaction outputs during signing. Previously, the code treated a missing commitment the same as an invalid one, which could cause the device to re…

Inconsistent commitment validation between signing code pathsPossible transaction signing failure or acceptance of unvalidated output commitmentsLogic alignment with existing sign_tx commitment handling
be05deacby Jon Griffiths+5−21 file
No security note in commit
Open full analysis →Source commit ↗
Low 26 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

utils: fix params_additional_info return type

This commit changes the declared return type of a transaction-signing helper function from a transaction-type code (TxType_t) to a simple success/fail boolean (bool). The function body already appears to return true/false, so the change fi…

Return-type mismatch between function declaration/definition and headerFunction is in transaction-signing utility code (sign_utils.c/h)Function handles CBOR transaction parameters and writes output transaction metadata
3d6cdbcbby Jon Griffiths+2−22 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

sign_psbt: add early reject on wrong genesis blockhash

This commit fixes a bug in the Blockstream Jade hardware wallet's PSBT (Partially Signed Bitcoin Transaction) signing code. Previously, when the transaction's genesis block hash did not match the expected network, the code set an error mes…

Missing return in error path allows execution to continue after validation failureCross-network genesis hash mismatch not enforced as a hard failurePSBT signing logic accepts mismatched network parameters
56e130b0by Mike Tolkachev+1−01 file
No security note in commit
Open full analysis →Source commit ↗
Low 42 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

main: fix error handling during PIN change

This commit fixes a bug in the PIN-change flow on Blockstream Jade hardware wallets. Previously, if re-encrypting the wallet keys with a new PIN failed, or if the user abandoned the PIN change, the code did not jump to cleanup as intended.…

Missing error-path control flow in cryptographic key handlingPotential use of stale or partially initialized key material after PIN-change failureCleanup bypass in sensitive authentication code path
64c30823by Mike Tolkachev+2−01 file
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

attestation: harden error handling of challenge signing

This commit fixes a bug in the Blockstream Jade hardware wallet's attestation signing process. Previously, if signing the attestation challenge failed, the device would send an error message but then continue running the rest of the functi…

Missing return after error path allows fall-through to success-path replyUninitialized output.ext_signature_len could leak stack data or cause undefined behaviorAttestation signing failure could result in sending an invalid attestation reply
ecc5871bby Mike Tolkachev+2−01 file
No security note in commit
Open full analysis →Source commit ↗
Low 39 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

attestation: fix missing cleanup on failed efuse write

This commit fixes a small but real bug in the device attestation setup code for Blockstream Jade, a hardware crypto wallet. When a one-time programmable security fuse failed to burn, the code used to exit immediately without releasing memo…

Missing cleanup on error path in security-critical initializationResource leak on failed efuse writePotential inconsistent attestation state after partial initialization
d37d88b7by Mike Tolkachev+1−11 file
No security note in commit
Open full analysis →Source commit ↗
Low 29 AI analysisMessage 73 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

descriptor: add support for liquid confidential descriptors

This commit adds support for Liquid confidential descriptors to the Blockstream Jade hardware wallet. It is a feature addition, not a fix for a known vulnerability. The code introduces new validation rules that reject non-SLIP77 blinding k…

Feature-gated Liquid confidential descriptor supportNew validation rejecting non-SLIP77 blinding keys on LiquidNew validation rejecting confidential descriptors on Bitcoin mainchain
0e009e4fby Daniel Newton+160−419 files
No security note in commit
Open full analysis →Source commit ↗
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-priorityconsistency: rename qr_frame_guides_t to qr_guide_type_tby Daniel Newton · ec9b9908 · Dec 16, 2025 · 13 filesMessage 65 · AdequateTriage 0Details
Commit message · Daniel Newton

consistency: rename qr_frame_guides_t to qr_guide_type_t

Also remove extraneous qr_frame_guides variables where we can pass the value directly to jade_camera_scan_qr()

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI review queuedconsistency: fix spellingby Jon Griffiths · 4239cb6c · Dec 16, 2025 · 8 filesMessage 35 · OpaqueTriage 0Details
Commit message · Jon Griffiths

consistency: fix spelling

35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
Lower-priorityFix: Waveshare S3 Touch LCD 2 Windows connectivity & USB detectionby Gustavo Cateim · dc41c671 · Dec 16, 2025 · 2 filesMessage 85 · StrongTriage 0Details
Commit message · Gustavo Cateim

Fix: Waveshare S3 Touch LCD 2 Windows connectivity & USB detection

Disable native hardware USB JTAG interface in favor of TinyUSB CDC stack
to resolve driver enumeration issues on Windows hosts.

Updates:
- configs/sdkconfig_display_waveshares3_touch_lcd2.defaults: Switch USB stack
- main/power/wslcdtouch2.inc: Use TinyUSB tud_mounted() for reliable power detection

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Security candidateFix TTGO PIN entry navigationby cmiguelrn · c5ad31dc · Dec 15, 2025 · 1 fileMessage 45 · ThinInformational 20Details
Commit message · cmiguelrn

Fix TTGO PIN entry navigation

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
access controlauthentication path
AI analysis · Informational 20/100

This commit fixes the direction of PIN-entry wheel navigation on TTGO hardware variants of the Blockstream Jade hardware wallet so it matches the rest of the device's user interface. It is a device-specific usability fix, not a cryptographic or network security fix. There is no indication it allows an attacker to steal funds, bypass the PIN, or access private keys.

Lower-priorityFix: Enable USB JTAG serial for Jade on ESP32S3by Gustavo Cateim · b48520f1 · Dec 8, 2025 · 1 fileMessage 80 · StrongTriage 0Details
Commit message · Gustavo Cateim

Fix: Enable USB JTAG serial for Jade on ESP32S3

Set CONFIG_JADE_USE_USB_JTAG_SERIAL to 'y' in the Waveshare S3 touch LCD2 defaults to enable USB JTAG serial support for Jade on the ESP32S3 target.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Lower-priorityFix: Swap A/B buttons logic for TTGO T-Display & T-Display S3by Gustavo Cateim · 9c20f9ba · Dec 8, 2025 · 1 fileMessage 62 · AdequateTriage 0Details
Commit message · Gustavo Cateim

Fix: Swap A/B buttons logic for TTGO T-Display & T-Display S3

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Lower-prioritybuild: update github build workflow for recent changesby Jon Griffiths · bd5a3ed5 · Dec 5, 2025 · 1 fileMessage 62 · AdequateTriage 0Details
Commit message · Jon Griffiths

build: update github build workflow for recent changes

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
documentation-only discount
Lower-prioritydocs: update README.md to cover recent build/config changesby Jon Griffiths · 6ff10c6a · Dec 5, 2025 · 1 fileMessage 62 · AdequateTriage 0Details
Commit message · Jon Griffiths

docs: update README.md to cover recent build/config changes

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
documentation-only discount
Lower-priorityFix release date for version 1.0.38 in CHANGELOGby Jacob Heider · bc072653 · Dec 3, 2025 · 1 fileMessage 60 · AdequateTriage 0Details
Commit message · Jacob Heider

Fix release date for version 1.0.38 in CHANGELOG

Correct the release date for version 1.0.38. We don't want people waiting till Decembruary for the update.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
documentation-only discount
Lower-prioritycamera: skip every second screen refresh during continuous scanningby Jon Griffiths · 369b182e · Dec 3, 2025 · 1 fileMessage 65 · AdequateTriage 0Details
Commit message · Jon Griffiths

camera: skip every second screen refresh during continuous scanning

Allows us to scan more frames per second overall.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Lower-prioritychore: fix a large number of spelling issuesby fengyuchuanshen · d8528f03 · Dec 3, 2025 · 9 filesMessage 72 · AdequateTriage 0Details
Commit message · fengyuchuanshen

chore: fix a large number of spelling issues

Signed-off-by: fengyuchuanshen <fengyuchuanshen@outlook.com>

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
Lower-prioritybuild: use switch_to.sh for config generationby Jon Griffiths · e04adeb2 · Dec 3, 2025 · 4 filesMessage 57 · ThinTriage 0Details
Commit message · Jon Griffiths

build: use switch_to.sh for config generation

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Lower-priorityconfig: remove the debug jade configsby Jon Griffiths · 3fe8cf31 · Dec 3, 2025 · 6 filesMessage 60 · AdequateTriage 0Details
Commit message · Jon Griffiths

config: remove the debug jade configs

These can be created with:
./tools/switch_to.sh [jade|jade_v1_1|jade_v2] --dev --debug [--log|--log-cbor] [--jtag]

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Security candidatepsbt: fix a (harmless) off-by-one assert checkby Jon Griffiths · 42f6948c · Dec 3, 2025 · 1 fileMessage 45 · ThinInformational 18Details
Commit message · Jon Griffiths

psbt: fix a (harmless) off-by-one assert check

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing boundarysigning or wallet path
AI analysis · Informational 18/100

This commit fixes a boundary check in code that walks through parts of a Bitcoin transaction (PSBT). The old check allowed an index equal to the number of items, which is one too high. The commit message calls it 'harmless,' meaning it should not cause a real security problem in practice. It is a defensive correction to an assert that guards internal iteration.

Lower-priorityconfig: enable maximum stack protections for dev devicesby Jon Griffiths · 8e9636a9 · Dec 3, 2025 · 4 filesMessage 65 · AdequateTriage 0Details
Commit message · Jon Griffiths

config: enable maximum stack protections for dev devices

A preparatory step for increasing production stack checking.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI review queuedquirc: fix compiler warningby Jon Griffiths · ea03ce7d · Dec 3, 2025 · 1 fileMessage 35 · OpaqueTriage 7Details
Commit message · Jon Griffiths

quirc: fix compiler warning

35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
parser or protocol pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path
Lower-priorityci: allow ci_flash to run on local development envsby Jon Griffiths · 522dffda · Dec 3, 2025 · 1 fileMessage 62 · AdequateTriage 0Details
Commit message · Jon Griffiths

ci: allow ci_flash to run on local development envs

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Lower-priorityci: increase the time allowance for v2 selfcheckby Jon Griffiths · 590823af · Dec 3, 2025 · 1 fileMessage 80 · StrongTriage 0Details
Commit message · Jon Griffiths

ci: increase the time allowance for v2 selfcheck

This is likely caused by increased stack checks; increasing the speed of
individual RPC calls will be made in the future on a case by case basis.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Lower-prioritylog: socket server logger that communicates over wifiby Daniel Newton · 68751302 · Dec 3, 2025 · 7 filesMessage 65 · AdequateTriage 0Details
Commit message · Daniel Newton

log: socket server logger that communicates over wifi

Set CONFIG_LOG_WIFI (default off) to enable

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Security candidateotp: clearer message when device does not have current time for TOTP functionby Daniel Newton · e9f544ff · Dec 3, 2025 · 4 filesMessage 50 · ThinInformational 20Details
Commit message · Daniel Newton

otp: clearer message when device does not have current time for TOTP function

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
authentication path
AI analysis · Informational 20/100

This commit improves the on-screen error messages shown when a Blockstream Jade hardware wallet cannot generate a TOTP (time-based one-time password) code because the device does not know the current time. It does not change the security rules or fix a vulnerability; it only makes the failure message clearer to the user, suggesting they unlock the device with the Blockstream app to set the time.

Security candidatelibjade: enable building the Jade firmware as a native libraryby Jon Griffiths · 30aef5c7 · Dec 3, 2025 · 63 filesMessage 83 · StrongInformational 15Details
Commit message · Jon Griffiths

libjade: enable building the Jade firmware as a native library

Implements an in-process instance of the Jade firmware. This can be
thought of as an emulated or virtual Jade device that runs in the address
space of the application that links to it.

Also expose a daemon process which allows using libjade from another
process using the existing jadepy API.

This initial implementation is highly experimental and incomplete, and
should under no circumstances be used beyond development and testing.

Co-authored-by: Lawrence Nahum <lawrence@greenaddress.it>

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
cryptography-sensitive pathauthentication path
AI analysis · Informational 15/100

This commit adds a new experimental developer/testing feature called libjade that lets the Jade hardware-wallet firmware be compiled and run as a normal Linux software library or daemon. It is explicitly marked as incomplete, not for real funds, and for development/testing only. There is no indication this is a security fix or that it addresses any vulnerability.

Lower-priorityquirc: always inline perspective_map functionby Jon Griffiths · d84629ce · Dec 3, 2025 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Jon Griffiths

quirc: always inline perspective_map function

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-prioritybc_ur: update to include native build supportby Jon Griffiths · e68c832a · Dec 3, 2025 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Jon Griffiths

bc_ur: update to include native build support

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-priorityota: shorten error code text for 1.x displaysby Jon Griffiths · 62fa83d6 · Dec 3, 2025 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Jon Griffiths

ota: shorten error code text for 1.x displays

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-prioritybuild: add 'tools/switch_to.sh' to switch between different configsby Daniel Newton · 84578147 · Dec 3, 2025 · 1 fileMessage 77 · AdequateTriage 0Details
Commit message · Daniel Newton

build: add 'tools/switch_to.sh' to switch between different configs

Preferred to adding more sdkconfig.default files.

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body