10/12 ② A clean run on bdk_wallet @ HEAD. Its seed path bounds the RNG as "impl CryptoRng + RngCore", rejected at compile time if it isn't cryptographic. The exact guard Coldcard lacked.
③ A clea...
11/12 Findings ≥ medium in live software are never dumped raw. They publish as "withheld-pending-disclosure": attestation public immediately, finding body a body_sha256 commitment until a fix ships. Provable priority, zero leak.
1