COLDCARD firmware

This commit fixes a Python indentation bug in the COLDCARD firmware's export function. The exception handlers for missing microSD card and write failures were placed outside the code block that actually tries to write, meaning they would never catch those errors. The fix simply indents them so they sit inside the try block. Without the fix, if a write fails, the user may see an unhandled error instead of a friendly message, and the normal cleanup/return path after a write may not run as intended.

This commit adds a new feature to Coldcard hardware wallets: when verifying ownership of a Bitcoin address, users can now include a wallet name in the BIP-21 URL (for example, bitcoin:address?wallet=my_wallet). This tells the Coldcard to search only that specific multisig wallet, rather than checking all wallets. It is a user-facing convenience feature, not a security fix, and does not appear to introduce any obvious vulnerability.

This commit is a minor cleanup and documentation update for the COLDCARD firmware. It adds a short document explaining a BIP-21 wallet parameter, replaces a hardcoded number with a named constant, tweaks on-screen text to fit smaller screens, and updates tests to match the new display strings. There is no security fix or vulnerability here.

This commit is a trivial one-word edit to a changelog file. It changes a parenthetical note about a feature requiring an updated companion tool. There is no code change and no security relevance.

This commit is just a documentation polish and a build timestamp update. It rewords the upcoming release changelog and bumps an auto-generated date/version marker in a source file. There are no code behavior changes and no security fixes or new features implemented here.

This commit fixes a small parsing bug in how COLDCARD handles BIP-21 payment URLs (the 'bitcoin:...' links used to request payments). Previously, the code looked for a colon anywhere in the entire string to decide whether a URL protocol like 'bitcoin:' was present. Now it only checks the first 16 characters. The change also updates tests so they exercise both URLs with and without the 'bitcoin:' prefix, including one with a colon inside the label text. The bug could have caused a BIP-21 URL containing a colon later in the string—such as in a label like 'total due: 500'—to be split incorrectly, potentially misinterpreting the address or parameters.

This commit is a routine version bump and changelog tidy-up for the COLDCARD firmware. It changes two Makefile version numbers (5.4.3 → 5.4.4 for Mk4, 1.3.3Q → 1.3.4Q for Q1) and rewrites the draft release notes. No code, cryptographic, or security logic is modified.

This commit only changes documentation files. It adds a menu item to a text file, creates a new help document about spending policies, and makes a minor wording tweak to a web 2FA description. There are no code changes, no bug fixes, and no security-relevant modifications to the firmware itself.

This commit only adds new test-plan comments to a test file. It does not change any firmware code, fix any bug, or alter behavior. It is a documentation/planning update for future tests of the 'hobbled mode' feature.

This commit only adds documentation notes to a markdown file describing how trick PINs and spending policies interact. There are no code changes, no bug fixes, and no security patches. It is purely informational guidance for users about existing product behavior.

This commit only changes a test file (testing/test_ccc.py). It moves a helper function inside another function and updates test assertions to handle two different warning scenarios. There is no change to the actual COLDCARD firmware or any user-facing security behavior.

This commit changes only a single word in a test file comment, capitalizing 'psbt' to 'PSBT'. It is a trivial documentation-style edit with no functional code changes and no apparent security relevance.

This commit changes a developer-only simulator script so that when the '--eff' flag is used, settings are kept in memory during a single run instead of being completely disabled. Previously the flag made all settings loading and saving do nothing, which meant pre-login values were lost while the simulator was running. The change makes the simulator behave more realistically for testing. It does not affect real COLDCARD hardware or production firmware.

This commit adds a short 0.2-second delay inside a test file for the COLDCARD firmware. It is a test-only timing tweak and does not change any production firmware code, wallet behavior, or security logic.

This is a minor cleanup commit ('nits'). It removes one outdated test assertion, adds some blank lines in test code, and simplifies a simulator-only default-setting line. There is no indication of any security fix or vulnerability being addressed.

This commit adds a new test file with only comments and TODO items. It contains no actual code changes, no bug fixes, and no security patches. It is purely a placeholder for future tests of a 'hobble' restricted-access mode.

This commit is a test-suite maintenance change for the COLDCARD firmware. It updates a test file to match new menu labels and adds a small helper fixture, while also adding a comment in the non-volatile storage code describing a new setting key ('lfr') that records why a spending policy blocked the last transaction. There is no code change that alters security behavior, fixes a vulnerability, or introduces an obvious bug.

This commit is a collection of tiny cleanups ('nits'): documentation wording and punctuation fixes, a comment tweak, a grammar fix, and adding one setting key ('lfr') to the list of values excluded from backups because it is a temporary error message. None of these changes affect security-relevant code behavior.

This commit mainly adds automated tests for a COLDCARD feature called Single-Signer Spending Policy (SSSP). It also makes a small code change in the login flow: when unlocking a spending policy, the device no longer loops asking for the main PIN over and over until secrets are loaded. Instead it asks once and proceeds. The change is framed as cleanup and test support; there is no clear security bug being fixed, but removing a retry loop could matter if the loop was hiding a logic issue.

This commit only adds and reorganizes automated test code in a single test file (testing/test_hobble.py). It does not change any firmware, application logic, or security-sensitive behavior. The changes implement previously planned tests for an existing 'hobble mode' spending-policy feature, ensuring QR scanning restrictions work as intended. There is no indication of a security vulnerability being fixed or introduced.

This commit is a small follow-up patch that fixes automated test scripts and a simulator boot helper after a previous code change. It does not change the actual COLDCARD firmware that runs on the device. The edits adjust test expectations, add a missing cleanup step in a multisig test, add short delays in a QR-code test, and ensure the Unix simulator falls back to default settings when no saved settings exist. There is no direct security fix visible in the diff, and no security relevance is claimed by the vendor.

This commit only adds a new automated test file for an existing COLDCARD firmware feature called 'hobble mode.' It checks that the Seed Vault menu remains accessible and read-only when the device is in a restricted (hobbled) state. There is no change to actual firmware code, no security fix, and no vulnerability introduced.

This commit only changes a test file. It reorders some assertions, adds blank lines for readability, and updates a comment from 'skip words' to 'skip quiz'. There is no change to the actual COLDCARD firmware code that users run, and nothing that affects security.

This commit only cleans up automated test code. It turns a shared test helper into a fixture that automatically resets test state after each test, removing duplicated cleanup lines from several tests. There is no change to the actual COLDCARD firmware or any user-facing behavior.

This commit only adds and updates automated test code for the COLDCARD firmware's 'hobble' restricted-access mode and related features (secure notes, NFC, key teleport). It does not change any firmware source code that runs on the device, so it cannot by itself introduce a security vulnerability or fix one in shipped code.