CommitWatch RSS
BS
← All projectsBlockstream

Blockstream Jade

Firmware for Jade and Jade Plus Bitcoin hardware wallets.

BitcoinHardware walletsElevated watch
Source repository ↗
Repository coverage

414 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

93security candidates58second-pass queue106AI analyses
10commits · 30 days
67commits · 60 days
198commits · 180 days
414commits · 365 days
Backfill bands
Aug 5 → Feb 6216 seen38 candidatesComplete
Feb 6 → Jun 6131 seen9 candidatesComplete
Jun 6 → Jul 657 seen10 candidatesComplete
Jul 6 → Aug 510 seen0 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

57/100 average clarity
32Strong · 80–100
147Adequate · 60–79
203Thin · 40–59
32Opaque · 0–39
3security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Jon Griffiths2755260157
Mike Tolkachev311114155
Daniel Newton651516055
Mihailo Milenkovic878057
Jamie C. Driver522053
Gustavo Cateim711079
Austin-Fulbright411060
cmiguelrn111045
quantpoet111072
roderico111045
tokyovyse111063
Valerio Vaccaro200045
Analysis record

Published AI watches

Last scanned 58 minutes ago

Low 27 AI analysisMessage 86 · Strong
BS BlockstreamBlockstream Jade BitcoinHardware wallets

input: release touch handles before deleting the i2c bus

This commit fixes a bug where the touchscreen driver failed to clean up internal handles when shutting down. On newer ESP-IDF firmware, this cleanup failure caused the device to panic and freeze during boot and when using the camera or QR …

Device freeze/DoS-like symptom on affected hardwareMemory leak fixedNo input validation, authentication, or cryptographic weakness visible
36776fecby Gustavo Cateim+3−01 file
No security note in commit
Open full analysis →Source commit ↗
Low 42 AI analysisMessage 95 · Strong
BS BlockstreamBlockstream Jade BitcoinHardware wallets

Liquid (taproot): add sign_liquid_tx genesis blockhash support

This commit changes how Blockstream Jade handles the 'genesis blockhash' when signing Liquid transactions. Previously, the device only accepted the network's built-in genesis hash. Now it lets users provide a custom genesis hash for test n…

Adds input validation for caller-supplied genesis blockhashPrevents mainnet genesis hash from being used on Liquid test networksRestricts genesis_hash parameter to Liquid networks only
888eff30by Jon Griffiths+82−264 files
No security note in commit
Open full analysis →Source commit ↗
Low 48 AI analysisMessage 62 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

rpc: annotate functions returning error codes to ensure they are checked

This commit adds compiler annotations (WARN_UNUSED_RESULT) to functions that return success/failure codes, so the compiler will warn if a caller ignores the result. It also fixes a few places where return values were being ignored, replaci…

Functions returning error/success codes annotated with WARN_UNUSED_RESULTCallers now check return values of rpc_get_bip32_path() and rpc_get_boolean()Use of default-value helpers (rpc_get_boolean_or) to ensure predictable behavior on missing fields
517075baby Mike Tolkachev+24−215 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

rpc: rename get_uint64_t to get_uint64

This commit simply renames an internal helper function from `rpc_get_uint64_t` to `rpc_get_uint64` and updates every place that calls it. There are no changes to what the function does, how it checks data, or how secure it is. It is a rout…

8e0de45eby Jon Griffiths+11−117 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

rpc: rename get_boolean to get_bool

This commit is a simple rename of two internal helper functions from `rpc_get_boolean`/`rpc_get_boolean_or` to `rpc_get_bool`/`rpc_get_bool_or`, updating all call sites accordingly. There is no change to what the code does, no bug fix, and…

f6e946acby Jon Griffiths+24−2518 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

rpc: refactor app code to use getters with default values

This commit is a straightforward code cleanup that replaces verbose 'read this optional value, or leave the default' patterns with shorter helper functions that do the same thing. There is no change in behavior and no security issue visibl…

b6a07147by Mike Tolkachev+22−348 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 35 · Opaque
BS BlockstreamBlockstream Jade BitcoinHardware wallets

assets: improve precision checking

This commit tightens how Blockstream Jade handles the 'precision' value in asset contracts for Liquid assets. Previously, a very large precision value could be accepted and later used to read past the end of an internal lookup table (POW_1…

Out-of-bounds read mitigation: bounds-checking of user-controlled precision before indexing fixed-size POW_10 arrayInteger truncation safety: explicit cast of validated precision to uint8_t after range checkCompile-time invariant enforcement: JADE_STATIC_ASSERT ties array size to ASSET_PRECISION_MAX
fd0f625dby Mike Tolkachev+13−13 files
No security note in commit
Open full analysis →Source commit ↗
Low 40 AI analysisMessage 78 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

libjade: add camera/input/nvs support, refactor

This commit is a large feature/refactor patch for Blockstream Jade's libjade (a desktop emulator of the Jade hardware wallet). It adds RPC endpoints that let a host application read the emulated device's screen, push fake button presses, r…

New RPC endpoints allow external read/write of emulated NVS storageNew RPC endpoints allow external screen capture and synthetic input injectionNew RPC endpoints allow external camera frame injection
f7184945by Daniel Newton+1806−75832 files
Vendor flagged security relevance
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

Fix M5StickC Plus 2 PIN navigation

This commit fixes a user-interface navigation quirk on the M5StickC Plus 2 hardware for Blockstream Jade. When entering a PIN, the up/down button directions were not inverted to match the rest of the device's menus, making number entry con…

9de1409eby roderico+3−21 file
No security note in commit
Open full analysis →Source commit ↗
Low 36 AI analysisMessage 74 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

build: annotate functions returning error codes to ensure they are checked

This commit is a preventive build-hardening change. It adds compiler annotations (WARN_UNUSED_RESULT) to many functions that return success/failure codes, so the compiler will warn if a caller ignores the result. The goal is to catch futur…

Compiler annotation added to enforce checking of error-returning functionsNo specific vulnerability fixed in the diffNo functional code changes or call-site fixes included
909a89aaby Mike Tolkachev+215−15225 files
No security note in commit
Open full analysis →Source commit ↗
Low 46 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

identity: add identity string validation

This commit adds a safety check to Blockstream Jade's 'sign identity' feature. Before the change, the device would accept any identity string a connected app sent. Now it rejects identities that contain non-printable or unusual characters.…

Input validation added to a signing/identity processNew length-bounded string helper reduces reliance on null-terminationRejection of non-printable characters in user-presented identity string
53752b98by Mike Tolkachev+22−02 files
No security note in commit
Open full analysis →Source commit ↗
Informational 22 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

otp: show error on invalid issuer, share logging strings

This commit tightens error handling when decoding the 'issuer' field of an OTP (one-time password) setup URI. Previously, a malformed issuer string could fail to decode silently; now the device shows an error and cancels the operation inst…

Input validation added for OTP URI issuer fieldSilent failure on malformed URL-decoding replaced with explicit error returnDebug assertion added for label/issuer URL-decoding in UI display path
66c945f2by Mike Tolkachev+9−52 files
No security note in commit
Open full analysis →Source commit ↗
Low 42 AI analysisMessage 28 · Opaque
BS BlockstreamBlockstream Jade BitcoinHardware wallets

psbt: fix path size

This commit fixes a small but meaningful bug in how Jade, a hardware wallet, reads key paths from Bitcoin PSBT data. The code was passing the byte size of a buffer when it should have passed the number of 32-bit entries. Depending on how t…

Buffer-size semantic mismatch in security-critical PSBT parsingUse of sizeof() on uint32_t array where element count is expectedCode path involved in 2of3 multisig recovery key identification
9e0c3747by Mike Tolkachev+2−21 file
No security note in commit
Open full analysis →Source commit ↗
Moderate 57 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

sign: match sign_tx logic for output commitment checking

This commit fixes a logic gap in how Blockstream Jade checks cryptographic commitments for transaction outputs during signing. Previously, the code treated a missing commitment the same as an invalid one, which could cause the device to re…

Inconsistent commitment validation between signing code pathsPossible transaction signing failure or acceptance of unvalidated output commitmentsLogic alignment with existing sign_tx commitment handling
be05deacby Jon Griffiths+5−21 file
No security note in commit
Open full analysis →Source commit ↗
Low 26 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

utils: fix params_additional_info return type

This commit changes the declared return type of a transaction-signing helper function from a transaction-type code (TxType_t) to a simple success/fail boolean (bool). The function body already appears to return true/false, so the change fi…

Return-type mismatch between function declaration/definition and headerFunction is in transaction-signing utility code (sign_utils.c/h)Function handles CBOR transaction parameters and writes output transaction metadata
3d6cdbcbby Jon Griffiths+2−22 files
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

sign_psbt: add early reject on wrong genesis blockhash

This commit fixes a bug in the Blockstream Jade hardware wallet's PSBT (Partially Signed Bitcoin Transaction) signing code. Previously, when the transaction's genesis block hash did not match the expected network, the code set an error mes…

Missing return in error path allows execution to continue after validation failureCross-network genesis hash mismatch not enforced as a hard failurePSBT signing logic accepts mismatched network parameters
56e130b0by Mike Tolkachev+1−01 file
No security note in commit
Open full analysis →Source commit ↗
Low 42 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

main: fix error handling during PIN change

This commit fixes a bug in the PIN-change flow on Blockstream Jade hardware wallets. Previously, if re-encrypting the wallet keys with a new PIN failed, or if the user abandoned the PIN change, the code did not jump to cleanup as intended.…

Missing error-path control flow in cryptographic key handlingPotential use of stale or partially initialized key material after PIN-change failureCleanup bypass in sensitive authentication code path
64c30823by Mike Tolkachev+2−01 file
No security note in commit
Open full analysis →Source commit ↗
Moderate 59 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

attestation: harden error handling of challenge signing

This commit fixes a bug in the Blockstream Jade hardware wallet's attestation signing process. Previously, if signing the attestation challenge failed, the device would send an error message but then continue running the rest of the functi…

Missing return after error path allows fall-through to success-path replyUninitialized output.ext_signature_len could leak stack data or cause undefined behaviorAttestation signing failure could result in sending an invalid attestation reply
ecc5871bby Mike Tolkachev+2−01 file
No security note in commit
Open full analysis →Source commit ↗
Low 39 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

attestation: fix missing cleanup on failed efuse write

This commit fixes a small but real bug in the device attestation setup code for Blockstream Jade, a hardware crypto wallet. When a one-time programmable security fuse failed to burn, the code used to exit immediately without releasing memo…

Missing cleanup on error path in security-critical initializationResource leak on failed efuse writePotential inconsistent attestation state after partial initialization
d37d88b7by Mike Tolkachev+1−11 file
No security note in commit
Open full analysis →Source commit ↗
Low 29 AI analysisMessage 73 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

descriptor: add support for liquid confidential descriptors

This commit adds support for Liquid confidential descriptors to the Blockstream Jade hardware wallet. It is a feature addition, not a fix for a known vulnerability. The code introduces new validation rules that reject non-SLIP77 blinding k…

Feature-gated Liquid confidential descriptor supportNew validation rejecting non-SLIP77 blinding keys on LiquidNew validation rejecting confidential descriptors on Bitcoin mainchain
0e009e4fby Daniel Newton+160−419 files
No security note in commit
Open full analysis →Source commit ↗
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-prioritydocker: remove defunct qemu scriptsby Jon Griffiths · 1ff40cc7 · Feb 23, 2026 · 3 filesMessage 45 · ThinTriage 0Details
Commit message · Jon Griffiths

docker: remove defunct qemu scripts

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-prioritydocker: fix Dockerfile.qemu, use jade_builderby Jon Griffiths · c00a4513 · Feb 23, 2026 · 2 filesMessage 78 · AdequateTriage 0Details
Commit message · Jon Griffiths

docker: fix Dockerfile.qemu, use jade_builder

Update the dockerfile to run from the jade_builder image. Don't try to
optimise the final image, since qemu is used for development, testing
and debugging (and not running Jade long term).

The README.md commands to run qemu headless/CI now work as documented.

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Lower-priorityqemu: fix qemu_run/qemu_gdbby Jon Griffiths · ebeed35a · Feb 23, 2026 · 2 filesMessage 70 · AdequateTriage 0Details
Commit message · Jon Griffiths

qemu: fix qemu_run/qemu_gdb

Fix pipefail piping into the true builtin instead of using it to ensure
pkill doesn't fail. Then remove pipefail becuase its redundant in these
scripts.

70/100 · AdequateMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context✓ Explains rationale or failure mode
Lower-prioritydocker: allow host git operations from within dockerby Jon Griffiths · 9c0d179d · Feb 23, 2026 · 1 fileMessage 50 · ThinTriage 0Details
Commit message · Jon Griffiths

docker: allow host git operations from within docker

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-prioritybuild: switch_to.sh: enable idf automatically if installedby Jon Griffiths · 3ff57c52 · Feb 23, 2026 · 1 fileMessage 62 · AdequateTriage 0Details
Commit message · Jon Griffiths

build: switch_to.sh: enable idf automatically if installed

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Lower-prioritybuild: remove Dockerfile.cliby Jon Griffiths · b9397b0f · Feb 22, 2026 · 2 filesMessage 62 · AdequateTriage 0Details
Commit message · Jon Griffiths

build: remove Dockerfile.cli

The cli (and all other tools) can be run via docker compose.

62/100 · AdequateMessage clarity
✓ Descriptive subject✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI review queuedUpdate CHANGELOG.mdby Jon Griffiths · 370b93d7 · Feb 20, 2026 · 1 fileMessage 28 · OpaqueTriage 0Details
Commit message · Jon Griffiths

Update CHANGELOG.md

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
Why it was queued
documentation-only discountsecond-pass: opaque commit message
Lower-prioritydocs: update docs for build updatesby Jon Griffiths · f8bf5d4b · Feb 20, 2026 · 1 fileMessage 57 · ThinTriage 0Details
Commit message · Jon Griffiths

docs: update docs for build updates

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
documentation-only discount
Lower-prioritybuild: flash via docker, add jadev2.0c, skip submodules for faster testingby Jon Griffiths · 4d6a77ea · Feb 20, 2026 · 1 fileMessage 72 · AdequateTriage 0Details
Commit message · Jon Griffiths

build: flash via docker, add jadev2.0c, skip submodules for faster testing

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
Lower-priorityci: disable strict mode for v2.0c devicesby Jon Griffiths · f9f23509 · Feb 20, 2026 · 1 fileMessage 57 · ThinTriage 0Details
Commit message · Jon Griffiths

ci: disable strict mode for v2.0c devices

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Lower-prioritybuild: reformat sources to clang-format-19by Jon Griffiths · 4765740e · Feb 20, 2026 · 8 filesMessage 57 · ThinTriage 0Details
Commit message · Jon Griffiths

build: reformat sources to clang-format-19

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Lower-prioritybuild: add a ci job for the jade_builder docker imageby Jon Griffiths · 34cf370e · Feb 20, 2026 · 2 filesMessage 62 · AdequateTriage 0Details
Commit message · Jon Griffiths

build: add a ci job for the jade_builder docker image

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Security candidatepinserver: update to latest masterby Jon Griffiths · 3aae124f · Feb 20, 2026 · 1 fileMessage 45 · ThinInformational 0Details
Commit message · Jon Griffiths

pinserver: update to latest master

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
authentication path
AI analysis · Informational 0/100

This commit is described as updating a submodule or external dependency called 'pinserver' to the latest master version. No actual code diff was provided, and there are no verified references explaining what changed in the pinserver update. Based only on the supplied materials, we cannot determine whether this update fixes a security issue, adds a feature, or is routine maintenance.

AI review queuedbuild: migrate from verde to jade_builderby Jon Griffiths · c758f6dc · Feb 20, 2026 · 23 filesMessage 57 · ThinTriage 0Details
Commit message · Jon Griffiths

build: migrate from verde to jade_builder

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
second-pass: unusually broad change
Lower-prioritybuild: use clang-format-19 for source formattingby Jon Griffiths · cc4684a6 · Feb 20, 2026 · 1 fileMessage 57 · ThinTriage 0Details
Commit message · Jon Griffiths

build: use clang-format-19 for source formatting

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Security candidateci: remove pin files on test completionby Jon Griffiths · 0ad5e6f7 · Feb 20, 2026 · 1 fileMessage 67 · AdequateInformational 17Details
Commit message · Jon Griffiths

ci: remove pin files on test completion

67/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
access control
AI analysis · Informational 17/100

This change cleans up temporary '.pin' test files after automated tests finish. It is a minor hygiene improvement in test code, not a fix for an exploitable product vulnerability. There is no indication these leftover files create meaningful security risk in normal use.

Lower-prioritybuild: use the main dockerfile for building, remove .devby Jon Griffiths · 460b10f3 · Feb 20, 2026 · 2 filesMessage 62 · AdequateTriage 0Details
Commit message · Jon Griffiths

build: use the main dockerfile for building, remove .dev

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Lower-prioritybuild: use the espressif-provided docker file to buildby Jon Griffiths · 533ec8ff · Feb 20, 2026 · 1 fileMessage 62 · AdequateTriage 0Details
Commit message · Jon Griffiths

build: use the espressif-provided docker file to build

Bumps the idf version to 5.4.3.

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Lower-prioritydeps: bump deps for trixie/idf compatibilityby Jon Griffiths · c5147a0c · Feb 17, 2026 · 1 fileMessage 60 · AdequateTriage 0Details
Commit message · Jon Griffiths

deps: bump deps for trixie/idf compatibility

Note that cbor2 is held back since the latest version is buggy.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
documentation-only discount
Lower-prioritypython: misc pycodestyle cleanupsby Jon Griffiths · ec4b9136 · Feb 17, 2026 · 3 filesMessage 50 · ThinTriage 0Details
Commit message · Jon Griffiths

python: misc pycodestyle cleanups

These are false positives in that they occur inside strings, but this
lets the CI pass.

50/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides an explanatory body
AI review queuedUpdate CHANGELOG.mdby Jon Griffiths · 61e14f44 · Feb 17, 2026 · 1 fileMessage 28 · OpaqueTriage 0Details
Commit message · Jon Griffiths

Update CHANGELOG.md

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
Why it was queued
documentation-only discountsecond-pass: opaque commit message
Lower-priorityjadepy: update jadepy version numberby Jon Griffiths · 5fce733d · Feb 17, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Jon Griffiths

jadepy: update jadepy version number

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Lower-prioritywally: update to latest wally masterby Jon Griffiths · be43e8c7 · Feb 13, 2026 · 1 fileMessage 45 · ThinTriage 0Details
Commit message · Jon Griffiths

wally: update to latest wally master

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI review queuedbuild: update release script directoriesby Jon Griffiths · a9d475b9 · Feb 6, 2026 · 3 filesMessage 57 · ThinInformational 15Details
Commit message · Jon Griffiths

build: update release script directories

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a routine build-script maintenance change. It updates three release helper scripts so they use different firmware output directory names for two hardware variants (jade2.0 and jade2.0c). There is no user-facing security change, no vulnerability fix, and no change to cryptographic signing logic.

AI review queuedUpdate CHANGELOG.mdby Jon Griffiths · d70930c5 · Feb 5, 2026 · 1 fileMessage 28 · OpaqueTriage 0Details
Commit message · Jon Griffiths

Update CHANGELOG.md

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
Why it was queued
documentation-only discountsecond-pass: opaque commit message