Skip to content

Document firmware limits and align protocol lockfile identity - #56

Draft
BitHighlander wants to merge 1 commit into
audit/715-protocol-basefrom
audit/715-protocol-docs
Draft

BitHighlander wants to merge 1 commit into
audit/715-protocol-basefrom
audit/715-protocol-docs

Conversation

@BitHighlander

@BitHighlander BitHighlander commented Oct 13, 2026 •

Copy link
Copy Markdown
Owner

The EIP-712 comments promise universal document support and a single request per member path, while firmware 7.15 enforces bounded shapes and repeats paths for chunks and verified review passes. Document those limits, correct the Hive role typo, and align the four lockfile root identity fields with package.json (@keepkey/device-protocol 7.14.1).

Validation against 998c445f587da76fd70b552bc72bf6aa52a6a582:

  • Protoc 3.5.1 descriptors before/after are byte-identical: SHA-256 ae6a4570c434dc9a2103e5dab0d4b6c73ed0edc11b363a1b4655eebd8785b30c.
  • Parsed dependency versions, resolutions and integrity fields are identical after excluding the four root name/version fields.
  • The exact three-file diff passes strict whitespace checks. Firmware limits and repeated-path behavior were checked against canonical b2 source.

This fork draft is supplemental patch preparation. Firmware staging must continue to pin the exact canonical upstream keepkey/device-protocol #112 head. Before release adoption, these changes must be reconciled into that canonical PR branch and validated there. Fetchability of a fork commit through an upstream GitHub origin is insufficient. Human upstream review and upstream dependency master merges precede firmware develop merges; firmware upstreaming comes last.

Local package checks also passed under Node20.19.5: npm ci, package build/tests, generated JavaScript/TypeScript bindings, all18 protocol descriptors and the Zcash contract check. Full descriptor bytes remain identical (SHA256 62ce620275782c3c4ae0c51e61a2dccaf571fa3f64ce59d1038c63d07e518149). This fork snapshot base is excluded by the existing Protocol CI target filters; local macOS validation is supplemental. The prior fork-pin aggregate run is superseded for release staging; corrected firmware #982 restores upstream keepkey#112’s exact head.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant