release candidate: stage upstream 7.15 onto fork develop - #620

Merged

BitHighlander merged 31 commits into

developfrom

rehearsal/7.15-to-develop-20260826

Aug 27, 2026

Commits on Aug 23, 2026

feat(core): taproot, transport and board work for 7.14.2 through 7.15
BitHighlander
committed
47c4781
feat(chains): EVM disclosure, hive, TRON/TON messages, Tendermint policy
BitHighlander
committed
e2ffeca
feat(zcash): Orchard shielded signing, with the RNG gate it needs
BitHighlander
committed
7c22083
feat(clearsign): describe what the device can verify, and attest schemas
BitHighlander
committed
0715928
feat(rng): auditable entropy source, on-device dice, seed-time gate
BitHighlander
committed
d106436
feat(storage): the version gate, the bitcoin-only band, and KDF hardening
BitHighlander
committed
910e383
build: bitcoin-only variant, release infrastructure and CI gates
BitHighlander
committed
a4e9d60
docs: release documentation for 7.14.2, 7.14.3 and 7.15
BitHighlander
committed
6f3becc
build(deps): pin device-protocol and python-keepkey
BitHighlander
committed
2593d25
docs(release): trim to what's current for the 7.15 merge
BitHighlander
committed
b005778
Merge pull request #463 from BitHighlander/docs/trim-release-7.15
BitHighlander
authored
3f74217
docs(release): drop remaining process/handoff docs
BitHighlander
committed
3c0a907
fix(zcash): derive the RedPallas nonce per the RedDSA spec
BitHighlander
committed
0588c8d
fix(security): remediate the 7.15 audit findings
BitHighlander
committed
e23bcbd
fix(signing): bound multisig signatures and stop writing past the field
BitHighlander
committed
8661918
fix(signing): close audited disclosure and ZIP-229 gaps
BitHighlander
committed
a3da828
fix(security): seed-backup clipping, session teardown, storage lock, RNG latch
BitHighlander
committed
9e4054d
revert(layout): do not page constant-power screens; keep the measurement
BitHighlander
committed
effdcd9

Commits on Aug 26, 2026

rehearsal: stage upstream 7.15 onto fork develop
BitHighlander
committed
b7bada9
fix(release): close RNG and Bitcoin signing blockers
BitHighlander
committed
41ec6ee
Merge remote-tracking branch 'origin/develop' into rehearsal/7.15-to-develop-20260826
BitHighlander
committed
400ef2c
fix: close PR 604 security audit findings
BitHighlander
committed
021a53b
fix(authenticator): preserve cleanup on validated inputs
BitHighlander
committed
3ee3535
ci: preserve variant gates after 7.15 restack
BitHighlander
committed
c1b42f2
fix(authenticator): use 7.15 cancellation result
BitHighlander
committed
23c10d5
fix(recovery): complete 7.15 security state port
BitHighlander
committed
b484078
test(rng): restore emulator fault-injection seam
BitHighlander
committed
4c7f7d6
test(rng): isolate boot-lifetime latch cases
BitHighlander
committed
bf88b95
fix(build): keep RNG test seam emulator-only
BitHighlander
committed
1ace61e
test(bitcoin-only): gate full-feature companion cases
BitHighlander
committed
b5b3c9c
test(report): validate the selected product variant
BitHighlander
committed
c054665

Navigation Menu

release candidate: stage upstream 7.15 onto fork develop - #620

release candidate: stage upstream 7.15 onto fork develop#620
BitHighlander merged 31 commits into
developfrom
rehearsal/7.15-to-develop-20260826

Commits on Aug 23, 2026

feat(core): taproot, transport and board work for 7.14.2 through 7.15

feat(chains): EVM disclosure, hive, TRON/TON messages, Tendermint policy

feat(zcash): Orchard shielded signing, with the RNG gate it needs

feat(clearsign): describe what the device can verify, and attest schemas

feat(rng): auditable entropy source, on-device dice, seed-time gate

feat(storage): the version gate, the bitcoin-only band, and KDF hardening

build: bitcoin-only variant, release infrastructure and CI gates

docs: release documentation for 7.14.2, 7.14.3 and 7.15

build(deps): pin device-protocol and python-keepkey

docs(release): trim to what's current for the 7.15 merge

Merge pull request #463 from BitHighlander/docs/trim-release-7.15

docs(release): drop remaining process/handoff docs

fix(zcash): derive the RedPallas nonce per the RedDSA spec

fix(security): remediate the 7.15 audit findings

fix(signing): bound multisig signatures and stop writing past the field

fix(signing): close audited disclosure and ZIP-229 gaps

fix(security): seed-backup clipping, session teardown, storage lock, RNG latch

revert(layout): do not page constant-power screens; keep the measurement

Commits on Aug 26, 2026

rehearsal: stage upstream 7.15 onto fork develop

fix(release): close RNG and Bitcoin signing blockers

Merge remote-tracking branch 'origin/develop' into rehearsal/7.15-to-develop-20260826

fix: close PR 604 security audit findings

fix(authenticator): preserve cleanup on validated inputs

ci: preserve variant gates after 7.15 restack

fix(authenticator): use 7.15 cancellation result

fix(recovery): complete 7.15 security state port

test(rng): restore emulator fault-injection seam

test(rng): isolate boot-lifetime latch cases

fix(build): keep RNG test seam emulator-only

test(bitcoin-only): gate full-feature companion cases

test(report): validate the selected product variant