Firmware v9.27.1 verification (yaziza)
What the developer wrote
Authored by Yasser Aziza
Firmware v9.27.1 verification (yaziza)
Signed-off-by: Yasser Aziza <yasser@posteo.net>
What changed, and why it matters
This commit adds two digital signature files for BitBox02 firmware version 9.27.1. These signatures are a third-party reproducible-build verification (called an 'assertion') created by an independent contributor named yaziza. The commit does not change any firmware code, configuration, or executable behavior. It is purely a release-artifact addition.
No action required. Treat as routine release verification metadata. If desired, verify the signatures against the signer's published public key and the corresponding firmware hashes.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit adds two detached signature files under releases/firmware-v9.27.1/: assertion-bitbox02-btconly-yaziza.sig and assertion-bitbox02-multi-yaziza.sig. They are binary GPG/PGP signatures attesting that the reproducible build of the v9.27.1 firmware images (Bitcoin-only and multi-edition) produced by the signer matches the official release. No source code, build scripts, or device logic were modified.
Changed components
releases/firmware-v9.27.1/assertion-bitbox02-btconly-yaziza.sigreleases/firmware-v9.27.1/assertion-bitbox02-multi-yaziza.sigInspect captured patch +0 / −0
### releases/firmware-v9.27.1/assertion-bitbox02-btconly-yaziza.sig
[binary or diff unavailable]
### releases/firmware-v9.27.1/assertion-bitbox02-multi-yaziza.sig
[binary or diff unavailable]Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.