Skip to content

docs(security): record the 7.15 hardening waves and release shape - #358

Closed
BitHighlander wants to merge 1 commit into
feature/715-16-bitcoin-only-variantfrom
feature/715-17-security-docs
Closed

docs(security): record the 7.15 hardening waves and release shape#358
BitHighlander wants to merge 1 commit into
feature/715-16-bitcoin-only-variantfrom
feature/715-17-security-docs

Conversation

@BitHighlander

Copy link
Copy Markdown
Owner

7.15 review stack position 17/17.

This PR is intentionally one coherent commit, based on feature/715-16-bitcoin-only-variant, for individual auditing.
The full stack is linear from the clean fork develop at 1af2ffe.

Review scope: docs(security): record the 7.15 hardening waves and release shape.

The preserved pre-restage candidate remains available at preserve/alpha-2026-08-05.

- 7.15.0-rc17-hardening.md: what the RC17 review found and how each finding was
  closed.
- 7.15.0-rc18-release-shape.md: why the release is two images (regular with
  Zcash, bitcoin-only) rather than three, and what that means for audit scope.
- next-wave-hardening.md: the hardening work deliberately NOT in 7.15, with the
  reasoning, so the next cycle starts from a written list instead of memory.

Documentation only.
@BitHighlander

Copy link
Copy Markdown
Owner Author

Superseded by the smaller audit-ready 7.15 stack: #359 release foundation, #360 authenticated clear-signing, #361 recovery and entropy, #362 Zcash Orchard, #363 chain integrations, and #364 Bitcoin/release security. All release changes remain preserved in the replacement branches and preservation tags. The replacement aggregate was tree-verified against the prior release and passed the local CI-equivalent container suite (405 firmware, 2 board, 18 crypto, and 7 Pallas constant-time tests). GitHub-hosted checks have been explicitly dispatched and are currently queued.

@BitHighlander
BitHighlander deleted the feature/715-17-security-docs branch August 9, 2026 04:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant