feat(core): enable `ward` with `miniscript`
What the developer wrote
Authored by Jakub Janků
feat(core): enable `ward` with `miniscript`
[no changelog]
What changed, and why it matters
This commit changes one line in a build configuration file for the Trezor hardware wallet firmware. It adds the 'ward' feature to the existing 'miniscript' feature set. There is no direct evidence in the commit that this is a security fix; it appears to be a routine feature-enablement change. Without additional context, the security relevance is unclear and likely low.
No immediate security action required. Treat as a normal build configuration change. If 'ward' relates to security-critical miniscript validation, review the 'ward' crate/feature implementation separately to confirm it does not introduce new attack surface or weaken existing policy checks.
Security signals we found
Single-line Cargo.toml feature flag change
No code logic modification
No changelog or security note in commit message
No referenced CVE, advisory, or security disclosure
Evidence from the diff
The patch modifies core/embed/projects/firmware/Cargo.toml to include ‘ward’ in the ‘miniscript’ Cargo feature. This means when the firmware is built with the ‘miniscript’ feature enabled, the ‘ward’ feature is also activated. ‘ward’ is presumably a Rust dependency or internal feature related to miniscript wallet policy enforcement. The change is minimal (+1/-1 line) and does not alter code logic, fix a vulnerability, or address a known exploit. No changelog entry is provided.
Changed components
core/embed/projects/firmware/Cargo.tomlminiscript feature configurationInspect captured patch +1 / −1
### core/embed/projects/firmware/Cargo.toml
@@ -40,7 +40,7 @@ frozen = ["upymod/frozen"]
log_stack_usage = ["upymod/log_stack_usage"]
memperf = ["upymod/memperf"]
micropy_enable_source_lines = ["upymod/enable_source_lines"]
-miniscript = ["trezor_lib/miniscript", "upymod/miniscript"]
+miniscript = ["trezor_lib/miniscript", "upymod/miniscript", "ward"]
n1w1 = ["upymod/n1w1"]
optiga_testing = ["sec/optiga_testing"]
production = ["io/production"]Why this scored 11/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.