Feature: Add SLIP-19 support for safe remote-signing of WabiSabi coinjoins - #685

Open

kravens wants to merge 17 commits into

Coldcard:masterfrom

kravens:feature/slip19-coinjoin

Commits on Aug 2, 2026

Add SLIP-19 ownership proofs (slp9 USB cmd) + HSM slip19_paths gate for coinjoin remote signing
kravens
committed
37c2217
Implement P2TR/BIP-86 taproot ownership proofs in slp9
kravens
committed
2dfea68
Freeze slip19.py into firmware builds
kravens
committed
70eac31
Fix slp9 under HSM mode: whitelist the command and canonicalize the subpath
kravens
committed
5f4e67f
Harden slp9: explicit address format, honest confirmation flag, tests
kravens
committed
cff6c45
Teach the test harness about the slip19_paths policy field
kravens
committed
b41db6e
Make the slip19 tests self-contained about hsmcmd
kravens
committed
d86924a
Derive the real SLIP-19 ownership identifier
kravens
committed
6eb8c6f
Pin the SLIP-19 ownership identifier against the official vectors
kravens
committed
ff467c3
Stop devmode test commands from bypassing HSM mode
kravens
committed
a12476c
Blank our copy of the master seed after deriving the SLIP-21 key
kravens
committed
4ac768a
Add a max_txn rule: bound how many transactions one policy may sign
kravens
committed
fda39de
Bound coinjoin value loss by amount and by rate, not only by ratio
kravens
committed
b864ad3
Say on screen when an ownership proof is being signed
kravens
committed
2f4bfe3
Add a min_inputs rule: refuse rounds with too few participants
kravens
committed
915cc56
Stop the HSM screen claiming to be busy after the host goes quiet
kravens
committed
46156c1
Add a max_fee_per_kvbyte rule: bound what we pay per byte we contribute
kravens
committed
5d0dd98