AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 18 Bitcoin

lightningd: instantiate watchman at startup

Public commit record

What the developer wrote

Authored by Sangbida Chaudhuri

68/100 · Adequate
lightningd: instantiate watchman at startup

Create watchman after setup_topology so it can queue bwatch RPC requests
and replay pending ops once the plugin is ready. No subsystems register
watches yet — that lands in the wallet migration PR.
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
The short version

What changed, and why it matters

This commit changes when Core Lightning starts its internal 'watchman' component, which tracks blockchain events. Previously the watchman was created later; now it is created earlier at startup so it can queue requests for the bwatch plugin and replay them once that plugin is ready. The commit also wraps database loading in a transaction and replaces a callback hook with an explicit notification function. No subsystems actually register watches yet, so this is preparatory infrastructure work rather than a live security fix.

Recommended action

No immediate security action required. Treat as normal infrastructure refactoring. Review the follow-up wallet migration PR that actually registers watches to assess whether queued operations are replayed safely and whether the transaction boundaries are correct under crash recovery.

Security signals we found

01

Startup ordering change for a security-relevant subsystem (blockchain watchman)

02

Database transaction wrapping added around pending-ops/tip loading

03

Callback indirection replaced with explicit notification function

04

No vulnerability description or CVE reference present in commit

Risk score

Why this scored 18/100

Our methodology →
Potential impact 2/30
Exploitability 1/25
Stealth signal 1/15
Affected reach 2/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.