Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
511 commits
Select commit Hold shift + click to select a range
f4f7260
test(dylib): require SHA-bound emulator provenance
BitHighlander Aug 25, 2026
91a0334
fix(ci): require declared screenshots and Uniswap evidence
BitHighlander Aug 25, 2026
d404ea9
test(ci): align retired Binance and corrected EOS vectors
BitHighlander Aug 25, 2026
a388dde
test(ci): gate post-RC18 signing hardening accurately
BitHighlander Aug 25, 2026
d9ab7fd
remove(binance): delete the stale Binance Chain SignTx test, unblocki…
BitHighlander Aug 25, 2026
740a6c7
test(bitcoin): reject inflated multisig quorum in mixed inputs
BitHighlander Aug 25, 2026
9ac9c77
Revert "test(bitcoin): reject inflated multisig quorum in mixed inputs"
BitHighlander Aug 25, 2026
7d6c4d1
fix(eos): accept both pre- and post-fix hashes for test_updateauth SL…
BitHighlander Aug 25, 2026
6420001
Merge pull request #57 from BitHighlander/fix/round4-stale-integratio…
BitHighlander Aug 25, 2026
abd0973
test(solana): supply canonical account layouts for Stake instruction …
BitHighlander Aug 25, 2026
2bf8790
Merge pull request #58 from BitHighlander/fix/round5-stake-test-fixtures
BitHighlander Aug 25, 2026
006906f
test(binance): pin retired signing surface closed
BitHighlander Aug 26, 2026
e9731ef
Merge develop while preserving signing regressions
BitHighlander Aug 26, 2026
8e456e2
Merge pull request #56 from BitHighlander/fix/firmware-report-audit
BitHighlander Aug 26, 2026
546d5be
test(report): capture manual protocol confirmations
BitHighlander Aug 26, 2026
62f3f93
fix(tokens): fail closed on missing vetted source
BitHighlander Aug 26, 2026
d8f0698
test(ethereum): bind streamed tails to user evidence
BitHighlander Aug 26, 2026
1336e05
test(storage): model framed journal records
BitHighlander Aug 26, 2026
2e036be
test(report): capture all EIP-712 field screens
BitHighlander Aug 26, 2026
f19a5f6
ci: pin companion alpha remediation
BitHighlander Aug 26, 2026
d3660b1
ci: test fork branch against companion firmware
BitHighlander Aug 26, 2026
9aaaa84
test(reset): run dice and re-entry coverage from firmware 7.14.3
BitHighlander Aug 26, 2026
b9ab241
test(uniswap): restore mandatory liquidity evidence
BitHighlander Aug 26, 2026
4641244
test(uniswap): preserve RC18 compatibility boundary
BitHighlander Aug 26, 2026
8e59e4c
Merge pull request #59 from BitHighlander/fix/alpha-audit-followups
BitHighlander Aug 26, 2026
619e6d4
feat(solana): bind certified ClearSign envelopes
BitHighlander Aug 25, 2026
451c24d
test(solana): exercise certified Relay proof through FSM
BitHighlander Aug 25, 2026
81fb1c4
test(dylib): require SHA-bound emulator provenance
BitHighlander Aug 25, 2026
f9e2414
Merge pull request #60 from BitHighlander/feat/certified-solana-lut-a…
BitHighlander Aug 26, 2026
7535e3f
test(dylib): bind provenance to checked-out source
BitHighlander Aug 26, 2026
85c4d20
test(bitcoin-only): exercise the 7.14.3 product
BitHighlander Aug 26, 2026
e353ce5
test(bitcoin-only): skip Maya-only memo coverage
BitHighlander Aug 26, 2026
75028c4
Merge pull request #61 from BitHighlander/fix/dylib-source-revision
BitHighlander Aug 26, 2026
e678d8a
test: update presign authentication ordering
BitHighlander Aug 26, 2026
2d54f6d
test: gate authentication order by firmware version
BitHighlander Aug 26, 2026
4ab0d91
test: bind Solana signed bytes to OLED review
BitHighlander Aug 26, 2026
c7052d3
test(authenticator): use alpha-valid cancellation fixture
BitHighlander Aug 26, 2026
298e1d7
merge: catch alpha up to fork develop
BitHighlander Aug 26, 2026
cef0903
test: make authoritative transaction fixtures hermetic
BitHighlander Aug 26, 2026
fa02c6f
ci: permit only exact emulator containers
BitHighlander Aug 26, 2026
901a774
test(eip712): require structured signing without Advanced Mode
BitHighlander Aug 26, 2026
cef50e5
test: cover signing session security boundaries
BitHighlander Aug 26, 2026
f15e7d0
fix(eip712): bind canonical identifiers to review labels
BitHighlander Aug 26, 2026
ff34968
test(zcash): reconcile shielding coverage with final protocol
BitHighlander Aug 26, 2026
84d0213
test: cover authenticator authorization boundaries
BitHighlander Aug 26, 2026
7e39fd5
ci: checkout fork branches from current project
BitHighlander Aug 26, 2026
758f20c
ci: bind companion tests to firmware PR 604
BitHighlander Aug 26, 2026
0f02409
test(eip712): cover production Permit2 batch shape
BitHighlander Aug 26, 2026
e79c6b8
test(bitcoin-only): gate unsupported 7.15 handlers
BitHighlander Aug 26, 2026
c697a25
test(report): respect Bitcoin-only feature boundaries
BitHighlander Aug 26, 2026
b532d98
Merge pull request #220 from keepkey/fix/7.15-bitcoin-only-capability…
BitHighlander Aug 26, 2026
8c01a0f
fix(report): track renamed EIP-712 policy test
BitHighlander Aug 27, 2026
25e6c4c
test(bitcoin-only): gate Solana disclosure suite
BitHighlander Aug 27, 2026
168ec6b
merge: unify alpha presign and EIP-712 companion gates
BitHighlander Aug 27, 2026
ed09fe5
ci(alpha): bind companion gates to staged 7.16 candidate
BitHighlander Aug 27, 2026
fc3ec3f
ci(alpha): test the unified firmware roll-up
BitHighlander Aug 27, 2026
69549db
ci(alpha): follow the corrected roll-up gate
BitHighlander Aug 27, 2026
ee10d12
test(sign-message): match the supported review order
BitHighlander Aug 27, 2026
2ed8354
ci(circle): test the unified firmware roll-up
BitHighlander Aug 27, 2026
621c3dd
merge: carry 7.14.2 regressions into 7.14.3 companion
BitHighlander Aug 27, 2026
fc12c6d
test(fixtures): drop noncanonical unused taproot prevtx
BitHighlander Aug 27, 2026
ef41fc9
ci: install hermetic fixture network dependency
BitHighlander Aug 27, 2026
4e8f3b5
ci: exercise the 7.14.3 bitcoin-only product
BitHighlander Aug 27, 2026
9a4af72
ci: surface integration test hangs
BitHighlander Aug 27, 2026
5b03b26
merge: reconcile 7.15 tests after 7.14.3 gate
BitHighlander Aug 27, 2026
86831be
ci: permit emulator UDP through offline gate
BitHighlander Aug 27, 2026
29e47e9
Merge commit '86831be' into prepare/715-pyk-reconcile
BitHighlander Aug 27, 2026
7d32a39
ci: run reconciliation branches
BitHighlander Aug 27, 2026
2771e17
fix(report): restore exact screenshot selector CLI
BitHighlander Aug 27, 2026
c9cc7d3
merge: carry 7.14.3 report selector fix into 7.15
BitHighlander Aug 27, 2026
3ddc544
test(solana): build canonical stake authorize accounts
BitHighlander Aug 27, 2026
1067497
merge: carry canonical Solana stake authorize test into 7.15
BitHighlander Aug 27, 2026
0014cfb
test(report): align screenshot audit with fail-closed flows
BitHighlander Aug 27, 2026
32b7216
merge: carry screenshot audit fixes into 7.15
BitHighlander Aug 27, 2026
9d69038
fix(report): gate 7.15 storage tests by version
BitHighlander Aug 27, 2026
ba2f86f
merge: carry versioned report catalog into 7.15
BitHighlander Aug 27, 2026
34b45fa
feat(report): accept exact evidence provenance
BitHighlander Aug 27, 2026
eb26dcb
merge: carry report provenance inputs into 7.15
BitHighlander Aug 27, 2026
68173d8
fix(7.15): preserve session policy and valid auth fixtures
BitHighlander Aug 27, 2026
96c5805
test(7.15): align Solana wire case and OLED baselines
BitHighlander Aug 27, 2026
57642ad
ci(7.15): test against the matching firmware branch
BitHighlander Aug 27, 2026
c4fb8bf
test(7.15): assert fail-closed signing contracts
BitHighlander Aug 27, 2026
7598628
Merge audited release Python fixes into upstream sync
BitHighlander Aug 28, 2026
146f341
chore(deps): pin upstream device protocol release head
BitHighlander Aug 28, 2026
004e33a
test(7.14.3): preserve legacy Osmosis release control
BitHighlander Aug 28, 2026
9c39820
fix(report): require Solana LUT coverage from 7.16
BitHighlander Aug 28, 2026
d0b6669
test(hive): assert legacy STEEM wire symbols
BitHighlander Sep 8, 2026
eaae16d
merge: reconcile pinned security coverage into fork master
BitHighlander Sep 8, 2026
6f19e7a
build: align alpha protocol pin with fork master
BitHighlander Sep 8, 2026
c403e86
test: close reconciliation review gaps
BitHighlander Sep 8, 2026
2304a13
test: carry terminal decode rejection into release host suite
BitHighlander Sep 8, 2026
a49e704
test: lease exact UDP ports for owned storage emulators
BitHighlander Sep 8, 2026
60ce9f3
test: validate power-cycle storage stamps for both firmware products
BitHighlander Sep 8, 2026
7f46aa2
test: carry independently verified EOS authorization vector to releases
BitHighlander Sep 8, 2026
e08d607
test(zcash): exercise capabilities present in canonical 7.15
BitHighlander Sep 8, 2026
b625321
test(zcash): require viewing-key consent and reject account aliases
BitHighlander Sep 8, 2026
96a7572
test: enforce the canonical 7.15 capability matrix
BitHighlander Sep 8, 2026
08e491c
test(report): require canonical 7.15 LUT coverage in validator regres…
BitHighlander Sep 8, 2026
fb96883
test(ripple): exercise memo serialization on full 7.15
BitHighlander Sep 8, 2026
81b950d
test(ripple): assert displayed address survives debug capture
BitHighlander Sep 9, 2026
8e5eaaa
test(ripple): assert displayed address survives debug capture
BitHighlander Sep 9, 2026
0f4c839
test(ripple): require rejection of unsupported 7.14.3 memo
BitHighlander Sep 9, 2026
7646e85
test(ping): preserve message presence after a debug screen read
BitHighlander Sep 9, 2026
f4040d2
test(ping): preserve message presence after a debug screen read
BitHighlander Sep 9, 2026
ec828d4
test(reset): collect dice backup words once per logical group
BitHighlander Sep 9, 2026
081fad0
test(reset): collect dice backup words once per logical group
BitHighlander Sep 9, 2026
6268e38
test(storage): preserve CRC framing in migration fixtures
BitHighlander Sep 9, 2026
5dae186
test(storage): preserve CRC framing in migration fixtures
BitHighlander Sep 9, 2026
6e472fc
test: consolidate the 7.14.3 and 7.15 host suites onto one head
BitHighlander Sep 10, 2026
3a81a54
fix(tokens): fail closed when the vetted token source is missing
BitHighlander Sep 10, 2026
4a8c7a4
docs: record the python-keepkey consolidation receipt
BitHighlander Sep 10, 2026
45e19bc
test(reset): branch the entropy screen on actual policy, not a versio…
BitHighlander Sep 10, 2026
8649abe
fix(report): floor the taproot must-run at the release taproot ships in
BitHighlander Sep 10, 2026
7f538a9
test(reset): assert display_random is ignored on every product
BitHighlander Sep 10, 2026
28cfaf9
test(reset): drive the on-device dice mode selector and verify both m…
BitHighlander Sep 11, 2026
9ae46b8
chore(bindings): regenerate messages_solana_pb2 from the pinned devic…
BitHighlander Sep 11, 2026
c0e9bd8
test(reset): host selects the dice mode; verify MIXED, ONLY, bias and…
BitHighlander Sep 11, 2026
51d7cd1
test(reset): gate the dice tests on Features.supports_dice_modes; fix…
BitHighlander Sep 11, 2026
03c2fe1
test(report): catalogue the new native dice tests
BitHighlander Sep 11, 2026
0499084
test(hive): assert the wire asset symbol the chain uses, not the disp…
BitHighlander Sep 12, 2026
6a85668
test(eth): refresh the frame hash for the corrected 1-bit serialiser
BitHighlander Sep 12, 2026
7f8f609
test(reset): drive the on-device dice mode selector and verify both m…
BitHighlander Sep 11, 2026
34f3036
chore(bindings): regenerate messages_solana_pb2 from the pinned devic…
BitHighlander Sep 11, 2026
20cc097
test(reset): host selects the dice mode; verify MIXED, ONLY, bias and…
BitHighlander Sep 11, 2026
f8a171b
test(reset): gate the dice tests on Features.supports_dice_modes; fix…
BitHighlander Sep 11, 2026
f00e62f
test(report): catalogue the new native dice tests
BitHighlander Sep 11, 2026
06b6de2
ci: exercise Python harness against audited firmware candidates
BitHighlander Sep 14, 2026
11b9761
ci: run CircleCI against the same 7.15 audit head
BitHighlander Sep 14, 2026
3cc2be2
Merge pull request #224 from keepkey/fix/python-ci-candidate-refs
BitHighlander Sep 14, 2026
b2edbff
Merge pull request #223 from keepkey/fix/hive-wire-asset-symbols
BitHighlander Sep 14, 2026
b76ee61
fix(zcash): normalize streamed action indices
BitHighlander Sep 15, 2026
8d3f4cc
test: align Hive and Ripple security expectations
BitHighlander Sep 16, 2026
136aaec
test: update unknown-token review frames
BitHighlander Sep 16, 2026
87c2753
test: assert distinct unknown-token consent
BitHighlander Sep 16, 2026
31d8c27
feat(ethereum): add ERC-7730 definition bindings
BitHighlander Sep 17, 2026
7f6fd30
chore(protocol): pin reconciled fork master
BitHighlander Sep 17, 2026
50b18d1
Merge pull request #88 from BitHighlander/feat/erc7730-definition-str…
BitHighlander Sep 17, 2026
89e8b5b
chore(protocol): pin canonical ERC-7730 envelope
BitHighlander Sep 17, 2026
d8b54a3
Merge pull request #89 from BitHighlander/chore/pin-erc7730-envelope-…
BitHighlander Sep 17, 2026
7a34f0b
chore(protocol): pin ERC-7730 format-1 sections
BitHighlander Sep 17, 2026
bd4ffd9
Merge pull request #90 from BitHighlander/chore/pin-erc7730-format1
BitHighlander Sep 17, 2026
f8ebaca
chore(erc7730): pin canonical formatter roles
BitHighlander Sep 17, 2026
3dd67f2
Merge pull request #91 from BitHighlander/chore/pin-erc7730-format-co…
BitHighlander Sep 17, 2026
0e156fb
chore(erc7730): pin authenticated replay protocol
BitHighlander Sep 17, 2026
f5268a1
Merge pull request #92 from BitHighlander/chore/pin-erc7730-authentic…
BitHighlander Sep 17, 2026
6c1c86b
feat(erc7730): serve signed definition catalogs
BitHighlander Sep 17, 2026
54d4f6d
Merge pull request #93 from BitHighlander/feature/alpha-erc7730-python
BitHighlander Sep 17, 2026
b58e002
Merge pull request #94 from BitHighlander/master
BitHighlander Sep 17, 2026
a09a372
feat(erc7730): add canonical calldata compiler
BitHighlander Sep 18, 2026
a9db039
Merge pull request #95 from BitHighlander/feature/alpha-erc7730-report
BitHighlander Sep 18, 2026
1bd23a0
test(erc7730): add real swap fixtures
BitHighlander Sep 18, 2026
339aa50
Merge pull request #96 from BitHighlander/feature/alpha-erc7730-real-…
BitHighlander Sep 18, 2026
853291b
feat(erc7730): compile arrays and visibility rules
BitHighlander Sep 18, 2026
dee4b7a
Merge pull request #97 from BitHighlander/feature/alpha-erc7730-array…
BitHighlander Sep 18, 2026
d32f4e4
feat(erc7730): compile EIP-712 definitions
BitHighlander Sep 18, 2026
8c78c46
Merge pull request #98 from BitHighlander/feature/alpha-erc7730-eip712
BitHighlander Sep 18, 2026
89b119e
feat(erc7730): sign certified catalog envelopes
BitHighlander Sep 18, 2026
8eea443
Merge pull request #99 from keepkey/feature/alpha-erc7730-envelope-si…
BitHighlander Sep 18, 2026
e92fe25
feat(erc7730): compile roots constants enums and intents
BitHighlander Sep 18, 2026
09d9ff1
Merge pull request #100 from keepkey/feature/alpha-erc7730-full-schema
BitHighlander Sep 18, 2026
da05997
feat(erc7730): compile grouped displays and alias references
BitHighlander Sep 18, 2026
9dfb82c
Merge pull request #101 from keepkey/feature/alpha-erc7730-groups
BitHighlander Sep 18, 2026
786fe39
feat(erc7730): compile nested arrays and NFT collections
BitHighlander Sep 18, 2026
61d3cce
Merge pull request #102 from keepkey/feature/alpha-erc7730-nested-arrays
BitHighlander Sep 18, 2026
2dd2bdd
feat(erc7730): compile unknown token fallbacks
BitHighlander Sep 18, 2026
8657278
Merge pull request #103 from keepkey/feature/alpha-erc7730-formatter-…
BitHighlander Sep 18, 2026
1e7c378
feat(erc7730): prove official registry conformance
BitHighlander Sep 18, 2026
c682060
Merge pull request #104 from keepkey/feature/alpha-erc7730-conformanc…
BitHighlander Sep 18, 2026
73ba298
docs(erc7730): add SDK and swap integration evidence
BitHighlander Sep 18, 2026
4cc005c
Merge pull request #105 from BitHighlander/feature/alpha-erc7730-sdk-…
BitHighlander Sep 18, 2026
2b654a9
docs(erc7730): publish complete protocol support proof
BitHighlander Sep 18, 2026
cb8b66e
Merge pull request #107 from BitHighlander/docs/erc7730-complete-prot…
BitHighlander Sep 18, 2026
95dc4b2
fix(protocol): regenerate bindings with the canonical protoc
BitHighlander Sep 18, 2026
3043cdd
fix(report): restore exact screenshot selector CLI
BitHighlander Aug 27, 2026
ad158f5
test(conftest): allow the harness's configured emulator endpoints
BitHighlander Sep 18, 2026
0b25bce
test: honor the screenshot selector list; skip Zcash on bitcoin-only
BitHighlander Sep 18, 2026
6c09ccb
test(reset): drive the dice reset through the consented MIXED flow
BitHighlander Sep 18, 2026
1f096a1
test(eth): unlimited ERC-20 approvals are refused, not signed
BitHighlander Sep 19, 2026
9222126
test(protection): PIN precedes the sign-message confirm on 7.14.2+
BitHighlander Sep 19, 2026
bd69520
test(solana): plain-text SignMessage signs without AdvancedMode
BitHighlander Sep 18, 2026
6ae6b01
Merge pull request #108 from BitHighlander/fix/regenerate-bindings-ca…
BitHighlander Sep 19, 2026
52aed5d
Merge pull request #106 from BitHighlander/fix/solana-text-message-no…
BitHighlander Sep 19, 2026
e5c5d47
Merge upstream reconcile/upstream-sync into alpha
BitHighlander Sep 19, 2026
4af087e
Merge upstream feat/dice-modes-rebased into alpha
BitHighlander Sep 19, 2026
0eba6e5
Merge upstream feat/certified-solana-lut-alpha into alpha
BitHighlander Sep 19, 2026
309f3c8
Merge upstream/fix/bip39-word-gate-matches-docstring into alpha
BitHighlander Sep 19, 2026
91e6140
Merge upstream ci/github-actions-emulator into alpha
BitHighlander Sep 19, 2026
2497d5c
Record upstream branches whose content alpha already carries
BitHighlander Sep 19, 2026
801efe1
test(report): catalog E17/I4/I6 for the merged harness
BitHighlander Sep 19, 2026
2ea2ce3
test(recovery): de-duplicate subpage reads in test_reset_and_recover
BitHighlander Sep 19, 2026
8a210a3
test: restore wire-correct Hive account_update2 and XRP MemoData expe…
BitHighlander Sep 19, 2026
6d61348
Merge pull request #109 from BitHighlander/merge/upstream-into-alpha
BitHighlander Sep 19, 2026
b0e3b3c
test(solana): KKSOLSC1 v2 schema reviews asserted by screen text
BitHighlander Sep 19, 2026
1c5e544
Merge pull request #110 from BitHighlander/test/solana-schema-v2-emu
BitHighlander Sep 19, 2026
907f346
ci: finish the rc18 -> 7143 rename in the 7.14.3 job
BitHighlander Sep 19, 2026
bd0a951
ci: pin the 7.16 jobs to firmware alpha b452f011c
BitHighlander Sep 19, 2026
f5fa2fa
test(solana): certified SoltoshiDICE join asserted screen by screen
BitHighlander Sep 19, 2026
f852099
test(zcash): gate transparent shielding on 7.15.0 and ZcashSignPCZT
BitHighlander Sep 19, 2026
da90cd9
test(eos): require the fixed SLIP-48 updateauth digest from 7.14.3
BitHighlander Sep 19, 2026
adfa293
test(solana): a 7.16+ build that refuses the ClearSign root fails, no…
BitHighlander Sep 19, 2026
61cb412
test(solana): certified schema proofs the delegate did not sign are r…
BitHighlander Sep 19, 2026
dc6abb4
test(solana): refuse a scope-1 certificate and a 63-byte schema signa…
BitHighlander Sep 19, 2026
16a88ef
Merge pull request #112 from BitHighlander/test/solana-schema-v2-cert…
BitHighlander Sep 19, 2026
aced59d
ci: pin the 7.16 jobs to firmware alpha 651f2a462
BitHighlander Sep 19, 2026
ede466a
test(7.15): opt signing fixtures into AdvancedMode
BitHighlander Sep 20, 2026
3c91ee3
merge: carry 7.15 AdvancedMode fixtures into canonical tests
BitHighlander Sep 20, 2026
f104918
feat(clearsign): LoadClearsignSigner trust path + release-protocol pr…
BitHighlander Jul 2, 2026
fc4ae03
test(7.15): enable policy after loading test wallets
BitHighlander Sep 20, 2026
59a1fa8
merge: carry complete 7.15 policy fixtures into canonical tests
BitHighlander Sep 20, 2026
889cbd7
fix(bindings): keep unrelated protocol modules pinned
BitHighlander Sep 20, 2026
a1ad2ab
merge: carry scoped 7.15 runtime bindings into canonical tests
BitHighlander Sep 20, 2026
ed04369
test(7.15): preserve negative policy fixtures
BitHighlander Sep 20, 2026
74efbb4
Merge commit 'ed04369' into reconcile/upstream-sync-followup
BitHighlander Sep 20, 2026
2c5af34
test(7.15): isolate disabled-policy Solana cases
BitHighlander Sep 20, 2026
c53f910
Merge commit '2c5af34' into reconcile/upstream-sync-isolation
BitHighlander Sep 20, 2026
262c6b5
test(solana): exercise the opaque v0 lookup path
BitHighlander Sep 20, 2026
bdd7d3e
Merge commit '262c6b5' into reconcile/upstream-sync-alt
BitHighlander Sep 20, 2026
5ffe64b
test(evm): require chain_id, and stop asserting pre-EIP-155 signatures
BitHighlander Aug 17, 2026
224e660
test(7.15): align legacy EVM fixtures with release policy
BitHighlander Sep 20, 2026
3c627b7
Merge 7.15 release security fixtures into canonical ancestry
BitHighlander Sep 20, 2026
d1ce1fd
test(7.15): assert canonical blind-sign refusal
BitHighlander Sep 20, 2026
a9af996
Merge canonical blind-sign refusal fixture into upstream sync
BitHighlander Sep 20, 2026
1346b6c
test(solana): gate plain text at its 7.15 capability
BitHighlander Sep 20, 2026
ede7ecb
ci: restore canonical CircleCI smoke gate
BitHighlander Sep 20, 2026
b80e128
ci: clone canonical branch over HTTPS
BitHighlander Sep 20, 2026
b3836f9
ci: install canonical smoke dependencies
BitHighlander Sep 20, 2026
7d03f24
Merge canonical multi-release EOS and Solana gates (#226)
BitHighlander Sep 20, 2026
db11405
test(solana): gate LUT attestations by device capability
BitHighlander Sep 21, 2026
f44b566
test(ethereum): require safe Uniswap removal recipient
BitHighlander Sep 21, 2026
ffc085b
test(solana): isolate AdvancedMode policy cases
BitHighlander Sep 21, 2026
14c9fa5
test(report): document unsafe Uniswap removal refusal
BitHighlander Sep 21, 2026
cc32de9
test(release): align canonical wire and OLED evidence
BitHighlander Sep 21, 2026
7989ff7
test(ethereum): terminate maximum-amount reviews cleanly
BitHighlander Sep 21, 2026
1bd628b
test(ci): gate incomplete stacked release capabilities
BitHighlander Sep 21, 2026
8beae3a
test: gate capabilities absent from foundation slice
BitHighlander Sep 21, 2026
3c15344
test: gate later Hive and session convergence
BitHighlander Sep 21, 2026
caf13c0
test: gate remaining staged release capabilities
BitHighlander Sep 21, 2026
7418c30
test: gate protected prompt workflow unwind
BitHighlander Sep 21, 2026
e277ad6
test: gate staged ERC-7730 review assertions
BitHighlander Sep 21, 2026
0da42e8
report: activate seed hardening at 7.15
BitHighlander Sep 21, 2026
2f7f5a1
test(release): exercise 7.15 security and runtime gates
BitHighlander Sep 21, 2026
2ba86c1
test(release): enforce 7.15 persistence and recovery gates
BitHighlander Sep 21, 2026
3358cbc
ci: pin canonical release compatibility targets
BitHighlander Sep 22, 2026
f1a2c1c
test(release): gate later staged EVM review vectors
BitHighlander Sep 22, 2026
d19c2da
test: bind staged reports to explicit capabilities
BitHighlander Sep 22, 2026
49d537c
test(storage): validate declared downgrade policy
BitHighlander Sep 22, 2026
3e1689d
ci: pin 7.15 jobs to Docker-audited firmware
BitHighlander Sep 22, 2026
c1b136a
test(osmosis): exercise backported 7.14 signing controls
BitHighlander Sep 22, 2026
11ea9f4
test(recovery): assert wipe handshake before next ceremony
BitHighlander Sep 22, 2026
98c717f
test(recovery): require each backup subpage ButtonAck
BitHighlander Sep 22, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
83 changes: 15 additions & 68 deletions .circleci/config.yml
Original file line number Diff line number Diff line change
@@ -1,80 +1,27 @@
version: 2 # keep 2.0 syntax; CircleCI 2.1 also works
version: 2.1

# The authoritative multi-release emulator matrix lives in GitHub Actions.
# Keep this smoke job while the legacy CircleCI project remains connected so
# its required status verifies the checkout instead of failing at config load.
jobs:
emulator-build-test:
canonical-smoke:
docker:
- image: circleci/python:3.7 # upgrade to cimg/python:3.12 if you like
- image: cimg/python:3.11
steps:
# ────────────────────────────────────────────────────────────────
# 1) Clone the current branch of python-keepkey via HTTPS
# ────────────────────────────────────────────────────────────────
- run:
name: Clone python-keepkey (current branch)
name: Checkout current branch over HTTPS
command: |
git clone --depth 1 -b "$CIRCLE_BRANCH" https://github.com/keepkey/python-keepkey.git .pykk
cd .pykk && git submodule update --init --recursive

# ────────────────────────────────────────────────────────────────
# 2) Grab firmware repo and inject our fresh python-keepkey copy
# ────────────────────────────────────────────────────────────────
- run:
name: Checkout firmware & inject python-keepkey
command: |
# Ensure all submodule URLs fall back to HTTPS
git config --global url."https://github.com/".insteadOf git@github.com:
git config --global url."https://".insteadOf git://

# Move python-keepkey out of the way
mv .pykk ../

# Clone firmware repository (expects $FIRMWARE_REPO env var)
git clone --depth 1 -b master "$FIRMWARE_REPO" .

# Initialise firmware submodules
git clone --depth 1 -b "$CIRCLE_BRANCH" \
https://github.com/keepkey/python-keepkey.git .
git submodule update --init --recursive

# Replace the vendor copy with our PR branch python-keepkey
rm -rf deps/python-keepkey
mv ../.pykk deps/python-keepkey

# This is python-keepkey's standalone compatibility lane. Release
# OLED/PDF evidence is generated only by the exact-head firmware
# workflow, where the firmware and Python SHAs are pinned together.
# Do not inherit the firmware checkout's report/screenshot phase:
# it can describe a different (published/master) emulator and is
# therefore not release evidence for this Python PR.
cp deps/python-keepkey/.circleci/standalone-emulator-tests.sh \
scripts/emulator/python-keepkey-tests.sh

# ────────────────────────────────────────────────────────────────
# 3) Build the Docker-based emulator tests
# ────────────────────────────────────────────────────────────────
- setup_remote_docker

- run:
name: Emulator tests
name: Validate canonical Python and EOS vector contracts
command: |
pushd ./scripts/emulator
set +e # don’t exit on first failure
docker-compose up --build firmware-unit
docker-compose up --build python-keepkey
set -e

# Collect JUnit / pytest XML results
mkdir -p ../../test-reports
docker cp "$(docker-compose ps -q firmware-unit)":/kkemu/test-reports/. ../../test-reports/
docker cp "$(docker-compose ps -q python-keepkey)":/kkemu/test-reports/. ../../test-reports/
popd

# Fail job if either container reported non-zero status
[ "$(cat test-reports/python-keepkey/status)$(cat test-reports/firmware-unit/status)" = "00" ] || exit 1

- store_test_results:
path: test-reports
python -m py_compile keepkeylib/*.py tests/test_msg_solana_signtx.py
python -m pip install --quiet pytest requests
python -m pytest -q tests/unit/test_eos_updateauth_vector.py

# ──────────────────────────────────────────────────────────────────────
workflows:
version: 2
emulator:
canonical:
jobs:
- emulator-build-test
- canonical-smoke
Loading
Loading