BS
← All projectsBlockstream

Blockstream Jade

Firmware for Jade and Jade Plus Bitcoin hardware wallets.

BitcoinHardware walletsElevated watch
Repository coverage

502 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

106security candidates69second-pass queue437AI analyses
25commits · 30 days
67commits · 60 days
220commits · 180 days
417commits · 365 days
Backfill bands
Aug 5 → Feb 6216 seen38 candidatesComplete
Feb 6 → Jun 6131 seen9 candidatesComplete
Jun 6 → Jul 657 seen10 candidatesComplete
Jul 6 → Aug 510 seen0 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

57/100 average clarity
32Strong · 80–100
182Adequate · 60–79
250Thin · 40–59
38Opaque · 0–39
5security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Jon Griffiths31357282157
Mike Tolkachev431438152
Daniel Newton771668055
Mihailo Milenkovic878057
roderico333060
Valerio Vaccaro1526054
Jamie C. Driver525053
Gustavo Cateim917078
Austin-Fulbright414060
quantpoet111072
cmiguelrn111045
tokyovyse111063
Analysis record

Published AI watches

Last scanned 12 minutes ago

Informational 20 AI analysisMessage 65 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

fmt: fix and prevent future use of unsupported format spec "zu"

This commit fixes the use of the "%zu" printf format specifier, which is not supported by the ESP32 toolchain used in this project. The unsupported format could cause log messages and user-facing strings to display incorrect or garbage val…

Use of unsupported printf format specifier %zu on embedded targetPotential for malformed log/UI output due to undefined format behaviorAddition of CI guard to prevent recurrence
26042182by Jon Griffiths+21−145 files
No security note in commit
Low 33 AI analysisMessage 30 · Opaque
BS BlockstreamBlockstream Jade BitcoinHardware wallets

otp: release md context on failure and clean temporary buffers

This commit fixes cleanup in the one-time-password (OTP) code. Previously, if setting up the cryptographic hash context failed, the code could return without freeing that context, and temporary buffers holding sensitive counter/HMAC data w…

Resource leak fix: mbedtls_md_free() now called on prepare_md_ctx failure pathSensitive buffer zeroization: wally_bzero() added for rcnt_buf and hmacControl-flow change from macro-based early return to explicit success checks
6e2cb6b6by Mike Tolkachev+26−141 file
No security note in commit
Low 47 AI analysisMessage 25 · Opaque
BS BlockstreamBlockstream Jade BitcoinHardware wallets

identity: clean temporary hash buffer

This commit fixes a small but real security hygiene issue in Blockstream Jade, a hardware wallet. A temporary buffer that holds a sensitive cryptographic hash (HMAC-SHA512 output used to derive child private keys) was not marked as sensiti…

Sensitive memory not marked for clearing (missing SENSITIVE_PUSH/POP)Buffer holds HMAC-SHA512 output used in BIP32 hardened child key derivationPatch adds explicit sensitive-memory lifecycle management
b5c35779by Mike Tolkachev+2−01 file
No security note in commit
Low 36 AI analysisMessage 15 · Opaque
BS BlockstreamBlockstream Jade BitcoinHardware wallets

qrmode: clean temporary buffer

This commit adds cleanup of a temporary memory buffer used when turning data into QR codes on the Blockstream Jade hardware wallet. The buffer could previously remain in memory after use, potentially leaving sensitive QR data behind for la…

Sensitive temporary buffer not cleared before fixUse of SENSITIVE_PUSH/SENSITIVE_POP memory-clearing macrosQR payload data may include private or confidential material
34f68c20by Mike Tolkachev+2−01 file
No security note in commit
Low 43 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

pinserver: retain unit private key on url change

This commit changes how Blockstream Jade handles its PIN server settings. Previously, changing the PIN server web address (URL) also wiped the device's private PIN encryption key, forcing the device to create a fresh one. The patch keeps t…

PIN private key lifecycle change: key retained on URL-only pinserver updatePublic-key change still triggers private-key erasure/regenerationDebug-clean and full reset still erase private key
ddcd93a3by Mike Tolkachev+38−324 files
No security note in commit
Informational 15 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

add more boards and descriptions

This commit is a documentation update for the do-it-yourself (DIY) hardware section of the Blockstream Jade project. It adds descriptions and photos for additional supported circuit boards and updates image file references. There are no co…

f4fb150dby Valerio Vaccaro+65−1625 files
No security note in commit
Moderate 63 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

process: limit array sizes in sign_tx, register_multisig and sign_bip85_digests

This commit adds size limits to several message-handling functions in the Blockstream Jade hardware wallet firmware. It caps how many asset records, transaction inputs/outputs, multisig signers, and BIP85 RSA digests a single RPC message c…

Adds explicit upper bounds on attacker-controllable array sizesRejects zero-input/zero-output transactions before further processingMoves BIP85 digest count validation before memory allocation
e87f26bfby Daniel Newton+251−8114 files
No security note in commit
Informational 15 AI analysisMessage 28 · Opaque
BS BlockstreamBlockstream Jade BitcoinHardware wallets

Update CHANGELOG.md

This commit only updates the project's CHANGELOG.md file to add release notes for version 1.0.41. It does not change any source code, build scripts, or configuration. The changelog text itself states that version 1.0.41 contains important …

Changelog describes prior security fixes in release 1.0.41Mentions external security researchers and tools (Loupe, Kvazar)References security-relevant improvements: stack protection, entropy, secure version, memory scrubbing, thread safety
dd45a7dcby Jon Griffiths+49−01 file
Vendor flagged security relevance
Informational 15 AI analysisMessage 35 · Opaque
BS BlockstreamBlockstream Jade BitcoinHardware wallets

jadepy: update jadepy release

This commit simply bumps the version of a Python dependency called jade-client from 1.0.40 to 1.0.41, along with its matching cryptographic hashes and a fresh PGP signature. There is no code change visible here, and nothing in the commit m…

75eeada4by Jon Griffiths+19−192 files
No security note in commit
Informational 15 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

consistency: fix docs/comment/script typos

This commit fixes five spelling mistakes in documentation, code comments, and a script comment. None of the changes alter program behavior or affect security.

9ea7eed3by Jon Griffiths+5−55 files
No security note in commit
Informational 17 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

esp_lcd: vendor the esp_lcd component (ESP-IDF v5.5.4)

This commit copies the ESP-IDF 'esp_lcd' display-driver component directly into the Blockstream Jade firmware repository (a process called 'vendoring') at version 5.5.4. It adds about 8,700 lines of display-interface code for LCD panels us…

Large vendored third-party driver import (+8,718 lines, 43 files)Driver code runs in interrupt context and uses DMA, which historically carries memory-safety and cache-coherency risksNo explicit security fix or bug-fix narrative in commit title/message
d89207bfby Daniel Newton+8718−043 files
No security note in commit
Informational 21 AI analysisMessage 57 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

build: "fakeprod" prod-like development mode

This commit adds an official developer-only 'fakeprod' build mode for Blockstream Jade hardware wallets. It deliberately weakens several security settings (single signature, committed private keys, readable flash-encryption key, enabled JT…

In-tree private keys committed to repository (tools/fakeprod_v2.pem, tools/fakeprod_attest.pem)Secure boot minimum signatures reduced from 2 to 1Flash encryption set to DEVELOPMENT mode with key readable
cecedc76by Daniel Newton+350−59 files
Vendor flagged security relevance
Low 45 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

urldecode: add validation for URL encoding

This commit hardens a URL-decoding helper in Blockstream Jade's firmware. It adds validation so malformed percent-encoding, embedded null bytes, control characters, and non-ASCII bytes are rejected instead of being silently decoded. A new …

Input validation added for percent-encoded sequencesRejection of embedded NUL bytes and control characters in decoded outputRejection of non-ASCII decoded bytes (>=0x80 and DEL 0x7f)
dd0d699dby Mike Tolkachev+100−272 files
No security note in commit
Low 26 AI analysisMessage 73 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

qr: split datastream data into its own allocation, reorder alloc/free calls

This change rewrites how a small QR-code scanning library allocates memory. Instead of one big 16 KB block, it now uses two separate 8 KB blocks, and it frees them in the reverse order they were allocated. The stated goal is to avoid memor…

Memory allocation pattern changed from single large allocation to two smaller allocationsAllocation/free ordering changed to LIFO-style reverse pairingPointer field added to struct that previously held an inline array
43640f8cby Jon Griffiths+24−153 files
No security note in commit
Low 46 AI analysisMessage 45 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

psbt: check output amount presence before reading

This commit tightens how Blockstream Jade reads output amounts from a Partially Signed Bitcoin Transaction (PSBT). Before, the code tried to read the amount directly without first confirming it was actually present. Now it checks whether t…

Missing-field check added before sensitive value readPSBT output amount parsing hardenedDefensive validation of libwally presence flags
9f2b916dby Jon Griffiths+2−11 file
No security note in commit
Moderate 59 AI analysisMessage 50 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

psbt: require that all psbt bytes are consumed when parsing

This commit tightens how Blockstream Jade verifies a Bitcoin transaction file (PSBT) before signing. It now requires that every byte in the file is part of the transaction, with no leftover or trailing data allowed. Previously, extra bytes…

Parsing now rejects trailing/unconsumed bytes in PSBT inputChange is in the signing code path, directly affecting what the hardware wallet will signUse of stricter libwally-core parse flag (COMPLETE) indicates parser hardening
605d86acby Jon Griffiths+1−11 file
No security note in commit
Informational 15 AI analysisMessage 68 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

hardware: add Jade Plus design files

This commit reorganizes existing hardware design files for the original Jade device into a new subfolder and adds the open-source hardware design files for a new product, the Jade Plus. It does not change any software, firmware, or device …

5ad85661by bitcoinhelp+2573−122520 files
No security note in commit
Informational 15 AI analysisMessage 55 · Thin
BS BlockstreamBlockstream Jade BitcoinHardware wallets

tests: migrate low level tests

This commit only moves and reorganizes existing test code. It adds a new helper to check whether the current transport is a specific type, moves a shared wait() function into a common test package file, and migrates a large set of low-leve…

767006a0by Valerio Vaccaro+1580−54 files
No security note in commit
Low 27 AI analysisMessage 68 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

mnemonic: restore recovery phrase by word number

This commit adds a new way to restore a Bitcoin wallet on a Blockstream Jade hardware device: instead of typing each recovery word, users can enter each word's one-based BIP39 number (for example, '1' for 'abandon'). The change also refact…

New user-input path for seed recovery (word numbers instead of words)Refactoring of mnemonic input/validation helpersAddition of SENSITIVE_PUSH/POP for local mnemonic buffers
99927491by roderico+580−3183 files
No security note in commit
Informational 18 AI analysisMessage 68 · Adequate
BS BlockstreamBlockstream Jade BitcoinHardware wallets

ui: support bounded variable-length digit entry

This commit refactors the on-screen digit-entry keypad in Blockstream Jade so callers can ask for shorter number fields (for example 4 digits instead of 6) and optionally cap the entered value. The existing 6-digit PIN and index entry beha…

New bounded numeric input path may prevent out-of-range values in future callersRefactoring centralizes input validation rather than relying on callersNo buffer-size changes observed; digit array remains DIGIT_ENTRY_SIZE (6) elements
69627745by roderico+128−332 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Security candidatebuild: add a script for testing v1 firmware signingby Jon Griffiths · 76a30841 · Sep 29, 2025 · 1 fileMessage 72 · AdequateInformational 15Details
Commit message · Jon Griffiths

build: add a script for testing v1 firmware signing

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
signing boundary
AI analysis · Informational 15/100

This commit adds a new build helper script that signs production firmware files with a private key during release testing. It does not change any device code, cryptographic checks, or user-facing behavior. It is purely a release-engineering convenience script.

Security candidatechore: fix some minor issues in the commentsby quantpoet · f96353b1 · Sep 28, 2025 · 6 filesMessage 72 · AdequateInformational 15Details
Commit message · quantpoet

chore: fix some minor issues in the comments

Signed-off-by: quantpoet <quantway@outlook.com>

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
Why it was queued
signing or wallet pathauthentication path
AI analysis · Informational 15/100

This commit only fixes spelling mistakes inside code comments (for example, changing 'sufficent' to 'sufficient' and 'Explcitly' to 'Explicitly'). No actual program instructions were changed, so it cannot affect security or functionality.

Lower-prioritydocs: fix firmware version note for extended repliesby Filiprogrammer · 888ea1fc · Sep 28, 2025 · 1 fileMessage 85 · StrongInformational 15Details
Commit message · Filiprogrammer

docs: fix firmware version note for extended replies

Extended replies were introduced in 118336ec64ee, which was already in
firmware version 1.0.33. This is also confirmed by CHANGELOG.md.

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit is a one-line documentation correction. It changes a note in the user/developer documentation to state that a feature called 'extended_replies' was introduced in firmware version 1.0.33, not 1.0.34. There is no code change, no security fix, and no behavior change in the software.

Lower-priorityjadepy: update jadepy version numberby Jon Griffiths · cc5582fe · Sep 23, 2025 · 2 filesMessage 45 · ThinInformational 15Details
Commit message · Jon Griffiths

jadepy: update jadepy version number

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit simply bumps the version number of a Python client library (jadepy/jade-client) used by the project from 1.0.35 to 1.0.37, along with its corresponding cryptographic hashes and PGP signature. There is no code change, no bug fix, and no security patch visible in this commit. It is a routine dependency metadata update.

Lower-priorityjadepy: update jadepy version numberby Jon Griffiths · 48785d1f · Sep 23, 2025 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Jon Griffiths

jadepy: update jadepy version number

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit simply bumps a version string in a Python package from 1.0.35 to 1.0.37. There are no code behavior changes, no bug fixes, and no security-related modifications visible in the diff.

AI review queuedbuild: initial re-work of the ci pipelineby Daniel Newton · 3025ce83 · Sep 23, 2025 · 39 filesMessage 100 · StrongInformational 15Details
Commit message · Daniel Newton

build: initial re-work of the ci pipeline

Split up and rename the various build stages to reflect what they do and
disambiguate e.g. building from flashing/testing. Use consistent naming
for jobs/config then leverage it to reduce boilerplate repetition.

Generate the CI build config from the developer build config, then remove
the developer build-only CI step.

Update the v2.0 developer build config to use JTAG so flashing between
it and CI builds doesn't require physically switching to JTAG mode.

Collate the build artifacts into a single download for release, pre-sign
the dev images for release automatically. Ensure sequential access to devices
using flock to prevent flaky failures.

Remove the CI use of ttgo as a substitute v2.0 device.

Co-authored-by: Jon Griffiths <jon_p_griffiths@yahoo.com>

100/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
Why it was queued
second-pass: unusually broad change
AI analysis · Informational 15/100

This commit is a housekeeping rework of the project's continuous-integration (CI) build and test pipeline. It renames build stages, splits the GitLab CI configuration into smaller files, generates CI test configurations from developer configs, removes a substitute test device, and adds a release-staging script. There is no change to the wallet firmware's security logic, cryptography, or user-facing behavior.

Lower-prioritymnemonic: avoid an unused variable warning for ci buildsby Jon Griffiths · 1c076250 · Sep 23, 2025 · 1 fileMessage 50 · ThinInformational 12Details
Commit message · Jon Griffiths

mnemonic: avoid an unused variable warning for ci builds

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 12/100

This commit is a minor code cleanup in a hardware wallet firmware project. It rearranges existing conditional code so that a compiler warning about an unused variable is avoided in automated CI builds. The actual behavior—using a hardcoded test recovery phrase only in special debug CI builds—was already present before this change. There is no new security-relevant behavior introduced.

Lower-prioritydocs: add v2 reproducible configby Jon Griffiths · 5422399d · Sep 22, 2025 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · Jon Griffiths

docs: add v2 reproducible config

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit is a simple documentation update. It adds two rows to a table in the REPRODUCIBLE.md file, listing the default configuration files for a new Jade 2.0 (Jade Plus) hardware variant. There is no code change and no security relevance.

Lower-prioritytools: remove dev_flash.shby Jon Griffiths · 73a77700 · Sep 18, 2025 · 1 fileMessage 58 · ThinInformational 15Details
Commit message · Jon Griffiths

tools: remove dev_flash.sh

Let's reduce the number of ways devices get flashed in the near future -
ideally down to one script (plus manually via idf.py if desired).

58/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit simply deletes a developer helper script used to flash firmware onto Blockstream Jade devices during development. There is no change to the actual device firmware, no bug fix, and no security-relevant behavior change. It is a routine cleanup to reduce the number of flashing scripts maintained by the project.

Lower-priorityconsistency: don't repeatedly re-set the activity when it doesn't changeby Jon Griffiths · be23f845 · Sep 16, 2025 · 1 fileMessage 50 · ThinInformational 12Details
Commit message · Jon Griffiths

consistency: don't repeatedly re-set the activity when it doesn't change

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 12/100

This is a tiny code cleanup change in a hardware wallet's screen-handling logic. It moves one function call outside a loop so the screen is set once rather than repeatedly. There is no indication this fixes a security bug or affects funds, keys, or user safety.

Security candidategui: share code to wait for buttons with ci auto-click (2)by Jon Griffiths · 05359dbf · Sep 16, 2025 · 14 filesMessage 65 · AdequateInformational 13Details
Commit message · Jon Griffiths

gui: share code to wait for buttons with ci auto-click (2)

Remove redundant checks for timeout. Note there are no functional
changes, just a fair amount of code churn.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
signing or wallet pathboot or update pathauthentication path
AI analysis · Informational 13/100

This commit is a code cleanup in the user-interface layer of the Blockstream Jade hardware wallet. It removes repeated 'if timeout' checks around button-waiting loops and lets the shared helper handle the timeout case instead. The commit message explicitly says there are no functional changes, and the diff shows only structural simplification—no security-sensitive logic was altered.

Security candidategui: share code to wait for buttons with ci auto-clickby Jon Griffiths · 2947dcaf · Sep 16, 2025 · 18 filesMessage 50 · ThinInformational 18Details
Commit message · Jon Griffiths

gui: share code to wait for buttons with ci auto-click

Minimal change for easier review.

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
signing or wallet pathboot or update pathauthentication path
AI analysis · Informational 18/100

This commit is a code cleanup: it pulls the logic for waiting on a button press into a single shared helper function so the same code isn't repeated in many places. The behavior is essentially unchanged. The only functional difference is that one screen (the mnemonic setup) now explicitly treats a timeout as an error in normal builds, whereas before it would have hit a generic assertion. This is a minor hardening improvement, not a security vulnerability.

Lower-prioritygui: render icons according to their icon typeby Jon Griffiths · 9859aea9 · Sep 15, 2025 · 1 fileMessage 45 · ThinInformational 13Details
Commit message · Jon Griffiths

gui: render icons according to their icon type

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 13/100

This commit changes how small on-screen icons are drawn on the Blockstream Jade hardware wallet. It adds a special case for QR-code-style icons so they use a dedicated QR background color instead of the icon's own background color. There is no indication this fixes a security bug; it appears to be a user-interface polish or correctness change.

Security candidategui: add fill type and parent params to fill nodesby Jon Griffiths · 0caa7cfe · Sep 15, 2025 · 10 filesMessage 50 · ThinInformational 15Details
Commit message · Jon Griffiths

gui: add fill type and parent params to fill nodes

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
authentication path
AI analysis · Informational 15/100

This commit is a straightforward internal cleanup of the user-interface drawing code for the Blockstream Jade hardware wallet. It changes how solid-color background boxes (called 'fill nodes') are created so callers can specify a fill style and parent container in one function call instead of two. There is no indication this fixes or introduces any security issue.

Lower-prioritygui: remove the now-unused old qr background colorsby Jon Griffiths · 3da845e6 · Sep 15, 2025 · 3 filesMessage 50 · ThinInformational 15Details
Commit message · Jon Griffiths

gui: remove the now-unused old qr background colors

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit removes unused color constants and switches QR code display to use standard black-and-white colors. It is a cleanup change with no security relevance.

Lower-prioritygui: add brightness controls to qrcode displaysby Jon Griffiths · 3b57691f · Sep 15, 2025 · 3 filesMessage 45 · ThinInformational 15Details
Commit message · Jon Griffiths

gui: add brightness controls to qrcode displays

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit adds a brightness button to QR-code screens on the Blockstream Jade hardware wallet. It is a user-interface convenience feature and does not change any security-sensitive logic, cryptography, or data handling.

Lower-prioritygui: add icon type to icon nodesby Jon Griffiths · 7b04631f · Sep 15, 2025 · 3 filesMessage 45 · ThinInformational 12Details
Commit message · Jon Griffiths

gui: add icon type to icon nodes

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 12/100

This commit is a small internal GUI change for the Blockstream Jade hardware wallet. It adds a new label ('icon type') to icon elements so the code can tell the difference between a regular icon and a QR-code icon. There is no indication in the commit that this fixes a security bug or changes user-visible behavior in a risky way.

Lower-prioritygui: render fills according to their fill typeby Jon Griffiths · 3d9d870b · Sep 15, 2025 · 1 fileMessage 45 · ThinInformational 18Details
Commit message · Jon Griffiths

gui: render fills according to their fill type

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 18/100

This commit fixes a small user-interface bug in the Blockstream Jade hardware wallet's screen drawing code. Previously, all on-screen filled areas were rendered using either a normal or 'selected' color, ignoring a newer property called 'fill_type' that can request a highlight color or QR-code color. The change makes the code look at the fill_type and pick the correct color. There is no direct evidence in the commit or supplied references that this is a security fix, and the effect appears to be visual only.

Lower-prioritygui: add support for qrcode brightness levelsby Jon Griffiths · b5668424 · Sep 15, 2025 · 2 filesMessage 45 · ThinInformational 15Details
Commit message · Jon Griffiths

gui: add support for qrcode brightness levels

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit adds a user-facing feature that lets the device cycle through different brightness/contrast colors when displaying QR codes, to make them easier to scan with different phones or lighting. There is no security-relevant change here.

Lower-prioritygui: share code to create qrcode nodesby Jon Griffiths · ceb7735c · Sep 15, 2025 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Jon Griffiths

gui: share code to create qrcode nodes

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a simple code cleanup in the user-interface code for Blockstream Jade, a hardware wallet. It extracts repeated code that builds QR-code display elements into a single shared helper function. There is no change to behavior, no bug fix, and no security relevance visible in the diff.

Lower-prioritysymbols: add a brightness symbolby Jon Griffiths · d82a8f50 · Sep 9, 2025 · 1 fileMessage 60 · AdequateInformational 15Details
Commit message · Jon Griffiths

symbols: add a brightness symbol

Note that numchars increases by 2 as it was not incremented previously
when it should have been.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit simply adds a new brightness icon to the on-device font file used by the Blockstream Jade hardware wallet. It also corrects a bookkeeping count (numchars) that tracks how many symbols are in the font. There is no security-relevant change here.

AI review queuedconsistency: correct comment typosby Jon Griffiths · b0fc7a4c · Sep 9, 2025 · 1 fileMessage 35 · OpaqueInformational 15Details
Commit message · Jon Griffiths

consistency: correct comment typos

35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This commit only fixes three spelling mistakes in code comments within a single source file. No program logic, variables, or security behavior was changed.

Lower-prioritygui: don't reuse the qrcode background color for unhighlighted buttonsby Jon Griffiths · 818dfdf5 · Sep 8, 2025 · 3 filesMessage 50 · ThinInformational 15Details
Commit message · Jon Griffiths

gui: don't reuse the qrcode background color for unhighlighted buttons

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit changes the background color used for inactive buttons on a hardware wallet's home screen. Previously, the code reused the same pale color that backs QR codes; now it uses a dedicated default color. There is no security issue visible in the diff—it is purely a user-interface cleanup.

Lower-prioritydisplay: share code to fetch the display bufferby Jon Griffiths · 829756be · Sep 8, 2025 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Jon Griffiths

display: share code to fetch the display buffer

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a simple internal code cleanup in the display driver. It extracts a small, repeated snippet of pointer arithmetic into a shared helper function called get_display_buffer_at(). There is no change in behavior, no fix for a bug, and no security relevance visible in the diff or commit message.

Lower-priorityqr: show qrcodes with more contrast on jade v2 devicesby Jon Griffiths · c9a7a545 · Sep 8, 2025 · 1 fileMessage 50 · ThinInformational 19Details
Commit message · Jon Griffiths

qr: show qrcodes with more contrast on jade v2 devices

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 19/100

This commit changes the background color used behind QR codes on newer Jade hardware (ESP32S3-based 'v2' devices) from a pale grey-green to pure white, because higher contrast makes the codes easier for phone cameras to scan. There is no security vulnerability here; it is a usability improvement for a specific device revision.