The Bitcoin agent key can now live in a Coldcard Mk4/Mk5 in HSM mode. Even if the host machine running your agent is fully compromised, the signing key stays isolated in hardware. The attacker gets nothing useful. Bitcoin agents with bounded authority. Now with HSM-grade key security. View quoted note →