❄️ SUBZERO-RS v0.4.0-TESTNET4 OFFICIAL RELEASE Stateless Amnesic Two-Way Optical Airgap Bitcoin Vault Appliance in Pure Rust 🛡️ ARCHITECTURAL PHILOSOPHY: COTS OVER HONEYPOTS • Eliminates supply-chain risks, physical tamper detection, and customer database leaks of specialized hardware wallets. • Runs bare-metal on ubiquitous commodity x86_64 laptops (used ThinkPads, Dell, surplus machines) booted into volatile RAM (toram). • Zero persistent disk writes, zero storage retained post-session. ⚡ CORE UPGRADES & INVARIANTS IN v0.4.0: • 100% Pure Rust & Static Musl ELF: Standalone static binary (4.4 MB). Zero JavaScript, zero Node.js, zero browser dependencies. • Two-Way Optical Airgap Signer (Tab 14): Ingests unsigned PSBTs via laptop webcam (zbarcam), performs independent 5-section transaction audits, and exports signed transactions via animated reverse-video BBQr. • Substrate Hardening: 100% of networking and bluetooth kernel modules physically purged from appliance rootfs (kernel/net, drivers/net, drivers/bluetooth deleted). • DMA Isolation: Hardcoded GRUB kernel parameters (intel_iommu=on amd_iommu=on iommu=force efi=disable_early_pci_dma). • Anti-DRAM Remanence: Exit sequence executes kexec into Memtest86+ v8.10, systematically zeroizing physical RAM banks before power cut. • High-Density Typography: Integrated Terminus 12px console font (ter-v12n), expanding 768p panels to 45-50 text rows to fit full static descriptor QR codes without clipping. • Universal Ingestion Suite (Tab 1): Ingests 12 BIP-39 words, 4-letter metal punch codes, CompactSeedQR (48 digits), 50+ dice rolls with Chi-squared and Markov audits, 128 coin flips, or watch-only BIP-380 descriptors. • Strictly Zero Custom Cryptography: All EC operations delegate to Bitcoin Core libsecp256k1 via rust-secp256k1; deterministic RFC 6979 nonces strictly enforced. • Testnet4 Sovereign Sandbox: Hard-locked to Bitcoin Testnet4 (Network::Testnet4, BIP-94 genesis, tb1q..., path m/84'/1'/0'). Zero financial risk during operator drills. 📺 VISUAL DEMO WALKTHROUGH: 📦 RELEASE ARTIFACTS & VERIFICATION: • Target: x86_64-unknown-linux-musl • Binary Size: 4.4 MB • SHA-256: 7000d6eac0bb6943b966002c2efdf9fb8fc6a08574d933268ce16338b0ceda52 • GPG Release Fingerprint: F18173E554644BB59018AE50F6E96FADCA2E8E0F • BIP-340 Schnorr Nostr Signature: docs/RELEASE_NOTES_v0.4.0.md.nostrsig • pipe-k1 Detached Signature: docs/RELEASE_NOTES_v0.4.0.md.pk1 🤖 NEURALESE & MONOLITHIC MACHINE CONTEXT FOR AI AUDITORS: https://raw.githubusercontent.com/bootlace-dev/subzero-keyosk/main/llms-full.txt https://raw.githubusercontent.com/bootlace-dev/subzero-keyosk/main/llms.txt 🔗 OFFICIAL REPOSITORY & RELEASE DOSSIER:

GitHub

GitHub - bootlace-dev/subzero-keyosk: A tiny, auditable live USB/SD image turning any PC or Raspberry Pi into an amnesic, airgapped Bitcoin seed and key generator from physical coin flips & dice.

A tiny, auditable live USB/SD image turning any PC or Raspberry Pi into an amnesic, airgapped Bitcoin seed and key generator from physical coin fli...

GitHub

Release v0.4.0-testnet4: Stateless Amnesic Two-Way Optical Airgap Bitcoin Vault Appliance · bootlace-dev/subzero-keyosk

SubZero-rs v0.4.0 Release Notes Stateless Amnesic Two-Way Optical Airgap Bitcoin Vault Appliance Release Tag: v0.4.0-testnet4 Git Commit: d4fd7a9 I...

⚡ REPLACE PGP WITH BITCOIN & NOSTR: INTRODUCING PIPEK1 Drop-in GPG replacement using Bitcoin BIP-85 keys for authenticated stream encryption, BIP-340 Schnorr release signing, and Git commit verification. 🚨 THE PROBLEM: The recent 4,000 BTC Liquid Network coordination incident exposed the fatal operational friction of mixing Bitcoin cold custody with legacy PGP keyserver baggage. Meanwhile, as cryptographer Constant noted regarding raw Nostr master keys: "If you leak the root key, all you can do is cry." 🛠️ WHAT PIPEK1 DOES: • 🗝️ BIP-85 Subroot Isolation: Derive daily operational signing and encryption keys directly from your Bitcoin cold storage (App 128002'). If your laptop key is compromised, your cold master seed is never touched. • ✍️ Git Commit Verification: Sign Git commits and release archives directly with your Bitcoin/Nostr keys (pipek1-git-shim). Zero GPG daemons, zero smartcard driver friction. • 📦 Streaming Encryption: Authenticated multi-gigabyte ISO and file encryption that breaks through Nostr NIP-44's 64 KiB ceiling. • 🛡️ Zero Daemons & Zero Keyrings: Pure Unix command-line filter (cat data | pipek1 ... > out). Zero background sockets, zero daemon memory state. • 🔒 Zero Release of Unverified Plaintext (RUP): Spool-and-verify cryptographic boundary. Corrupted or tampered data is wiped instantly before downstream pipes can read it. • 🧠 Bounded Memory Invariant: Strictly <= 16 MiB RAM bound across arbitrary multi-gigabyte payloads via encrypted ChaCha20-Poly1305 disk spooling. • 🎲 Hybrid Physical Entropy Hedging: Mix physical coin flips or dice rolls into ephemeral stream keys (--entropy-fd) to neutralize backdoored CPU TRNGs and VM snapshot collisions. • ⚖️ 100% Permissive MIT Open Source: Zero proprietary dependencies, fully auditable, and unencumbered for the sovereign developer community. 📜 VERIFIED CRYPTOGRAPHIC DELEGATION: Mutual cross-attestation between Master Root Identity npub1e94hqt3fuu7rvy9rpl85h3339vtn8psgewq4u05r7q4nup2kwp4q0flgay and Operational Child Key 0 npub1mvlht4wj3lvfmw96qxakaln862r27nn7z84ak089zjuvavkppeeq79a4j7 is verified and committed to the tree. 📦 INITIAL PROTOTYPE RELEASE (v0.0.1-rc0): Static Release Binary SHA-256: 7a92cebc4f91fcc103f00731292a95f9f55a706ec9a1d170754a24a79522dd5d Detached Release Signature (BIP-340 Base64): UEtTRwFqoH7f2z911dKP2J24ugG7bv5n0oavTn4R69s85RS4zrLBDnLM3gl9zBnRVbrwDlnKwIkYjDNCCoFtidZ7Xv8mddZ2GYZu494xmdqlFc/DQY5cUzEUWG38zZ+iw0McPJmmPWhy 🤖 AUTONOMOUS AGENT IMPLEMENTATION: Architected under human direction; autonomously coded, audited, and verified via Google Gemini agentic workflows. 🔗 REPOSITORY, SPECIFICATION, & CODE:

GitHub

GitHub - bootlace-dev/pipe-k1: Replace PGP with Bitcoin BIP-85 secp256k1 encryption, BIP-340 signing, and Git commit verification

Replace PGP with Bitcoin BIP-85 secp256k1 encryption, BIP-340 signing, and Git commit verification - bootlace-dev/pipe-k1

👥 MENTIONS: @Adam Back @calle @Constant @Blockstream Please review, audit, and comment.

🧊 𝗦𝗨𝗕𝗭𝗘𝗥𝗢-𝗥𝗦 𝘃𝟬.𝟯.𝟬-𝘁𝗲𝘀𝘁𝗻𝗲𝘁𝟰 Complete rewrite of the SubZero sovereign airgapped Bitcoin cold storage appliance into 100% pure Rust. Boots directly to a raw Linux text console (tty1) with zero Node.js or JavaScript runtime dependencies. ⚠️ 𝗧𝗘𝗦𝗧𝗡𝗘𝗧𝟰 𝗢𝗡𝗟𝗬 (𝗭𝗘𝗥𝗢 𝗙𝗜𝗡𝗔𝗡𝗖𝗜𝗔𝗟 𝗥𝗜𝗦𝗞 𝗥𝗘𝗛𝗘𝗔𝗥𝗦𝗔𝗟): • Strictly locked to Bitcoin Testnet4 (BIP-94 genesis) across all 14 tabs • All addresses derive exclusively as tb1q… Native SegWit (m/84’/1’/0’) • Output descriptors and QR exports strictly generate Testnet4 coordinator formats (vpub/tpub) • NEVER send real mainnet Bitcoin to these addresses; designed for risk-free family inheritance drills 🆕 𝗡𝗘𝗪 𝗜𝗡 𝘃𝟬.𝟯.𝟬 (𝗣𝗨𝗥𝗘 𝗥𝗨𝗦𝗧 𝗔𝗣𝗣𝗟𝗜𝗔𝗡𝗖𝗘): • 100% Pure Rust Architecture: Single static x86_64 musl binary; zero dynamic glibc or runtime dependencies • Raw TTY1 Console Engine: Ratatui-powered 14-tab text interface engineered for legacy BIOS/UEFI COTS laptops • Real-Time Statistical Audit: Integrated Pearson’s Chi-squared uniformity and Markov conditional transition filters • Cross-Utility Determinism: Exact byte-for-byte BIP-39 mnemonic equivalence across Coldcard, BitBox02, and reference tooling • Tab 4 Optical Multi-Mode: BBQR animated frames, BIP-380 output descriptors, and standard watch-only xpub/vpub displays • Visual Integrity Badges: Real-time 8-char SHA-256 visual checksums on all exported addresses and descriptors • Ephemeral Vault Auto-Lock: 30-minute amnesic inactivity timeout protecting decrypted estate memory 🎲 𝗣𝗛𝗬𝗦𝗜𝗖𝗔𝗟 𝗘𝗡𝗧𝗥𝗢𝗣𝗬 & 𝗔𝗨𝗗𝗜𝗧 𝗜𝗡𝗩𝗔𝗥𝗜𝗔𝗡𝗧𝗦: • Pure Physical Entropy: 128 coin flips (4-char chunking) or 50+ dice rolls (5-char chunking) • Pearson’s Chi-squared Goodness-of-Fit: Statistical hard-block on biased coin (df=1) or loaded dice (df=5) inputs at alpha=0.001 • Markov Filter: Automatic rejection of repetitive sequences, low-entropy oscillations, and pathological patterns • Practical Multi-Die Guidance: Recommends rolling 2 to 5 dice simultaneously to naturally blend individual die defects while honoring the 50-roll floor • Zero Dynamic RNG Reliance: Pure physical entropy is never diluted with hardware silicon RNG 🛡️ 𝗠𝗘𝗠𝗢𝗥𝗬 𝗛𝗬𝗚𝗜𝗘𝗡𝗘 & 𝗭𝗘𝗥𝗢-𝗧𝗥𝗨𝗦𝗧 𝗦𝗘𝗖𝗨𝗥𝗜𝗧𝗬: • Strict Zeroize & ZeroizeOnDrop enforcement across all intermediate seeds, master keys, passphrases, and decrypted buffers • Amnesic [W] Panic Wipe: Immediate volatile memory zeroization and UI reset on single keystroke • Two-Stroke Emergency Exit: [Q] requires two-stroke confirmation within 3 seconds to prevent accidental exit • Isolated Estate Storage: MountGuard RAII unmounting with strict partition label verification (SUBZERO_EST) 🧪 𝗠𝗔𝗦𝗦𝗜𝗩𝗘 𝗧𝗘𝗦𝗧 & 𝗖𝗛𝗔𝗢𝗦 𝗙𝗨𝗭𝗭 𝗠𝗔𝗧𝗥𝗜𝗫: • 74 of 74 automated tests passing (100% PASS) across 7 specialized suites • Keystroke Chaos Fuzzing: 100,000 continuous pseudo-random keystroke sequences fuzzed across all 14 tabs with 0 crashes • Legacy COTS Simulation: Verified in throttled Docker cgroup (1 CPU, 1024MB RAM, slow I/O) with 0.28MB peak heap footprint • Responsive Geometry: Zero line clipping across legacy 80x24, 80x25, 100x30, and 128x48 screen dimensions 📦 𝗥𝗘𝗟𝗘𝗔𝗦𝗘 & 𝗦𝗧𝗔𝗧𝗜𝗖 𝗕𝗜𝗡𝗔𝗥𝗬:

GitHub

Release v0.3.0-testnet4: Pure Rust Sovereign Cold-Storage Appliance (Testnet4) · bootlace-dev/subzero-keyosk

SubZero-rs v0.3.0-testnet4 — Pure Rust Sovereign Cold-Storage Appliance (Testnet4 Edition) WarningTESTNET4 ONLY: This appliance is strictly locke...

SHA-256 Checksum: 01b45846718de43b7bb9ef8898be6d725bf5609790bb9dcfb729f28ccfebed9c subzero-x86_64-musl 🔗 𝗦𝗢𝗨𝗥𝗖𝗘 & 𝗔𝗨𝗗𝗜𝗧 𝗦𝗣𝗘𝗖:

GitHub

GitHub - bootlace-dev/subzero-keyosk at feat/rust-port

A tiny, auditable live USB/SD image turning any PC or Raspberry Pi into an amnesic, airgapped Bitcoin seed and key generator from physical coin fli...

Please audit, test on physical hardware with Testnet4 coins, and break things.

🧊 𝗦𝗨𝗕𝗭𝗘𝗥𝗢 𝗞𝗘𝗬𝗢𝗦𝗞 𝘃𝟬.𝟮.𝟬-𝘁𝗲𝘀𝘁𝗻𝗲𝘁𝟰 Turn any old PC laptop (x86_64) or Raspberry Pi into a single-purpose, airgapped Bitcoin cold storage appliance booting directly to the Linux framebuffer (/dev/fb0). 🆕 𝗡𝗘𝗪 𝗜𝗡 𝘃𝟬.𝟮.𝟬: • BIP-85 Multi-Protocol Key Factory (Child Seeds, Nostr nsec/npub, WIFs, Passphrases) • SeedFix Diagnostic Solver (Offline BIP-39 Checksum Word & Typo Recovery) • Dual-Partition Storage (ESP Bootloader + Partition 2 Data Store) • Offline HTML WebCrypto Heir Vault (AES-256-GCM decrypt.html In-Browser Decryption) • Storage Device NAND Flash Integrity Hasher & Latency Profiler • Interactive 5-Mode Kiosk Menu 🎲 𝗣𝗛𝗬𝗦𝗜𝗖𝗔𝗟 𝗘𝗡𝗧𝗥𝗢𝗣𝗬 & 𝗔𝗡𝗧𝗜-𝗕𝗜𝗔𝗦: • Pure Physical Input: 128 coin flips (4-4-3) or 50 dice rolls (5-5 chunking) • Clean SHA-256 Hashing: Direct hashing over 0/1 and 1-6 strings (zero base-conversion bugs) • Physical Bias Defense: Input surplus flips/rolls to mathematically wash out coin/die weight defects • Zero Silicon RNG Reliance: Complete physical independence from hardware microcontrollers 🧪 𝗭𝗘𝗥𝗢-𝗥𝗜𝗦𝗞 𝗥𝗘𝗛𝗘𝗔𝗥𝗦𝗔𝗟 & 𝗣𝗥𝗘𝗦𝗘𝗧𝗦: • Testnet4-Only Lockdown (Zero Financial Risk Rehearsal) • 10 Instant Entropy Test Vectors (Pre-Funded with Test Sats) • Paired BIP-85 Passphrase Presets for Multi-Wallet Recovery Drills • Full BIP-380 Output Descriptors & QR Exports 🚫 𝗜𝗡𝗧𝗘𝗡𝗧𝗜𝗢𝗡𝗔𝗟 𝗗𝗘𝗙𝗘𝗡𝗦𝗜𝗩𝗘 𝗢𝗠𝗜𝗦𝗦𝗜𝗢𝗡𝗦: • Bitcoin Only (Zero Altcoins / Zero Token Firmware Bloat) • Native SegWit Only (tb1q / bc1q P2WPKH Exclusivity) • Account 0 Only (m/84'/1'/0' Testnet4 & m/84'/0'/0' Mainnet Invariance) • English BIP-39 Wordlist Only (Zero Homoglyph Mismatches) • No On-Device Signing (Airgapped Vault Export Only; Eliminates Blind-Signing) • Zero Network Stack (Kernel Wi-Fi, Bluetooth, & Ethernet Drivers Purged) 🔒 𝗠𝗘𝗠𝗢𝗥𝗬 𝗛𝗬𝗚𝗜𝗘𝗡𝗘 & 𝗖𝗥𝗬𝗣𝗧𝗢 𝗙𝗢𝗨𝗡𝗗𝗔𝗧𝗜𝗢𝗡𝗦: • 3x Multi-Pass Memory Scrub: All heap strings, mnemonics, and framebuffer wiped (0x00 -> 0xFF -> 0x00) on ESC/Backspace panic or clean exit • Volatile RAM Execution (toram tmpfs) • Standard Paul Miller Noble Suite (@noble/curves, @noble/hashes, @scure/bip39) • Cure53-Audited secp256k1, SHA-256, HMAC-SHA512, PBKDF2 • Standard W3C WebCrypto Engine (Zero Custom Crypto) ⚖️ 𝗩𝗦 𝗧𝗛𝗘 𝗔𝗟𝗧𝗘𝗥𝗡𝗔𝗧𝗜𝗩𝗘𝗦: • Vs Hardware Wallets: Zero shipping/supply-chain tracking; pure coin entropy ($0 on old PC vs $200+). • Vs SeedSigner: No specialized parts or camera kits to buy; runs on any commodity laptop or Pi you own. • Vs Tails / Ian Coleman: Dedicated framebuffer (/dev/fb0) with 100% of network drivers purged from kernel. 📦 𝗥𝗘𝗟𝗘𝗔𝗦𝗘 & 𝗗𝗘𝗧𝗘𝗥𝗠𝗜𝗡𝗜𝗦𝗧𝗜𝗖 𝗜𝗠𝗔𝗚𝗘𝗦:

GitHub

Release v0.2.0-testnet4 · bootlace-dev/subzero-keyosk

Full Changelog: v0.1.0-testnet4...v0.2.0-testnet4 Full Changelog: v0.1.0-testnet4...v0.2.0-testnet4 Full Changelog: v0.1.0-testnet4...v0.2.0-testnet4

🔗 𝗦𝗢𝗨𝗥𝗖𝗘 & 𝗔𝗨𝗗𝗜𝗧 𝗦𝗣𝗘𝗖:

GitHub

GitHub - bootlace-dev/subzero-keyosk: A tiny, auditable live USB/SD image turning any PC or Raspberry Pi into an amnesic, airgapped Bitcoin seed and key generator from physical coin flips & dice.

A tiny, auditable live USB/SD image turning any PC or Raspberry Pi into an amnesic, airgapped Bitcoin seed and key generator from physical coin fli...

Please audit, test on Testnet4, and break things.

Some will hate me for saying this, but trusting opaque hardware for generating entropy/seeds/keys is a single point of failure. I used AI to architect a zero-trust alternative. It bypasses silicon entirely by forcing 128 physical coin flips to generate the master seed. - Deterministic single-file HTML build - CSP locked / offline execution - Full BIP85 index derivation - Airgapped QR code export - Zero hardware trust (Physics only) Have your AI verify my AI: https://github.com/ghscuuo/airgap-coinflip