Labels

Something isn't working

Improvements or additions to documentation

This issue or pull request already exists

New feature or request

Adversarial-review finding; evidence in docs/security/adversarial-review/findings/

Good for newcomers

Extra attention is needed

This doesn't seem right

Blocks E2E or critical security

Security-critical

Nice to have / infrastructure

Defense-in-depth

Further information is requested

Must be resolved before any unit ships

From the external 4-round security research report, triaged 2026-07-31

Migrated from docs/production-todo.md

Migrated from docs/work-todo.md

Attack surface / subsystem: clear-signing

Attack surface / subsystem: companion

Attack surface / subsystem: contracts

Attack surface / subsystem: docs

Attack surface / subsystem: entropy

Attack surface / subsystem: fv

Attack surface / subsystem: fw-update

Attack surface / subsystem: hardware

Attack surface / subsystem: lifecycle

Attack surface / subsystem: lockdown

Attack surface / subsystem: offchain

Attack surface / subsystem: onchain

Attack surface / subsystem: prodtest