[tamnys]

The reference wallet's previous consensus libraries cannot validate current public Testnet after NU7 activation. This pins the six matching wallet prereleases and their locked transitive graph, records the operator-approved seven-day-hold exception for the exact 21 young package/version/checksum entries, and adapts the reader to the maintained system RNG API.

The registry preflight still checks the live sparse index, checksum, and yank status for every locked package. Its exception is accepted only for the reviewed manifest digest and Cargo.lock SHA-256; an unrelated new young version or lock change fails closed. The separate payment-helper graph retains its ordinary hold. This PR does not approve a privacy release or deploy a CVM.

Managed-container validation: cargo check --locked -p zrpc-wallet-reference, cargo test --locked -p zrpc-wallet-reference (12 tests), cargo test --locked -p zrpc-wallet-sdk -p zrpc-wallet-read -p zrpc-client, cargo test --locked -p zrpc-server -p zrpc-transport, cargo fmt --all -- --check, and the registry-gate unit tests (8 tests) passed. The exact-head GCP lifecycle CI passed. The native x86_64 networkless double-build and receipt packaging passed in https://github.com/tamnys/ZECret-service/actions/runs/37382985470; its artifact ZIP SHA-256 is 1ac84c4fbd2e9d54afbaf12376b473afb735954429bb6c7dfdd45c2579d95c9b for source commit 32efae57ed50dfb574544bb1457a2c7529fa7079.

The companion Zebra 7 Phala base-image checkpoint is merged in PR #380 and published. A separate ticketed overlay build and real TDX test remain before wallet-read acceptance.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​zcash_client_backend@​0.24.0 ⏵ 0.25.0-pre.0
	cargo/​rand@​0.9.5
	cargo/​rand_core@​0.9.5
	cargo/​rand_core@​0.10.0
	cargo/​sha2@​0.11.0-pre.4 ⏵ 0.11.0
	cargo/​zcash_address@​0.13.0 ⏵ 0.14.0-pre.0
	cargo/​zcash_client_sqlite@​0.22.0 ⏵ 0.23.0-pre.0
	cargo/​zcash_keys@​0.16.1 ⏵ 0.17.0-pre.0
	cargo/​zcash_primitives@​0.30.1 ⏵ 0.31.0-pre.0
	cargo/​zcash_protocol@​0.10.5 ⏵ 0.11.0-pre.0

View full report