Issues

• Account for the local STM32 HASH test in the CI test inventory

  priority:mediumsource:work-todosurface:fvsurface:hardware
  EthereumPhone/PQ1#1024 · Filter by author Nicola-Ceornea opened on Oct 21, 2026

• Owner-triggered combined FV/runtime/provenance pass for STM32 HASH contract pilot

  priority:mediumsource:work-todosurface:fvsurface:runtime
  EthereumPhone/PQ1#1023 · Filter by author Nicola-Ceornea opened on Oct 21, 2026

• Resolve RM0456 HASH padding example DCAL literal versus STR field definition

  priority:mediumsource:work-todosurface:fvsurface:hardware
  EthereumPhone/PQ1#1022 · Filter by author Nicola-Ceornea opened on Oct 21, 2026
  1

• Reconcile STM32U585 revision-U identifier: ES0499 0x3007 versus TN1545/code 0x3003

  priority:highsource:work-todosurface:fvsurface:hardware
  EthereumPhone/PQ1#1021 · Filter by author Nicola-Ceornea opened on Oct 21, 2026

• FV: omit unused API token from probability cold aggregation

  priority:lowsource:work-todosurface:fv
  EthereumPhone/PQ1#1017 · Filter by author Nicola-Ceornea opened on Oct 20, 2026

• verify-three-claims cannot pass: pinned forge 1.2.3 lacks failed_corpus_replays; Foundry 1.8 aggregates invariants

  priority:lowsurface:fv
  EthereumPhone/PQ1#1016 · Filter by author markusbug opened on Oct 20, 2026

• docs/ui-screens/px and tests/ui_fixtures.json are stale against master

  documentationpriority:lowsurface:trusted-ui
  EthereumPhone/PQ1#1015 · Filter by author markusbug opened on Oct 20, 2026

• Deferred owner-triggered playbook lock-in: Trail of Bits audit freeze of contracts/smart-wallet

  priority:lowsource:work-todosurface:contractssurface:fv
  EthereumPhone/PQ1#1014 · Filter by author markusbug opened on Oct 20, 2026

• Clear-sign ERC-721 / ERC-1155 transfers out of the wallet (currently blind-signed)

  enhancementpriority:lowsurface:clear-signing
  EthereumPhone/PQ1#1013 · Filter by author markusbug opened on Oct 20, 2026

• Update the factory CREATE2 constant in AmbireExtension, pq1-sdk and pq1-companion to the audit-freeze set

  priority:highsurface:companionsurface:contracts
  EthereumPhone/PQ1#1012 · Filter by author markusbug opened on Oct 20, 2026

• After the audit: deploy the frozen contract set on Ethereum Mainnet and other target chains

  priority:mediumsurface:contractssurface:onchain
  EthereumPhone/PQ1#1011 · Filter by author markusbug opened on Oct 20, 2026
  1

• Deploy the audit-freeze contract set on Base (and Base Sepolia), verify sources and compare codehashes

  priority:highsurface:contractssurface:onchain
  EthereumPhone/PQ1#1010 · Filter by author markusbug opened on Oct 20, 2026

• FV hardware contracts: add conformance tests and bind assumptions to proof evidence

  enhancementpriority:mediumsource:work-todosurface:fvsurface:hardware
  EthereumPhone/PQ1#1007 · Filter by author Nicola-Ceornea opened on Oct 20, 2026
  2

• FV hardware contracts: derive STM32 and secure-element models from pinned vendor specifications

  enhancementpriority:mediumsource:work-todosurface:fvsurface:hardwaresurface:secure-element
  EthereumPhone/PQ1#1006 · Filter by author Nicola-Ceornea opened on Oct 20, 2026
  2

• FV expansion: extend production Rust proofs and compose approval-to-signing guarantees

  enhancementpriority:mediumsource:work-todosurface:fvsurface:runtime
  EthereumPhone/PQ1#1005 · Filter by author Nicola-Ceornea opened on Oct 20, 2026

• FV expansion: measure production-firmware proof coverage and plan broad Lean coverage

  enhancementpriority:mediumsource:work-todosurface:fv
  EthereumPhone/PQ1#1004 · Filter by author Nicola-Ceornea opened on Oct 20, 2026

• #991 follow-up: re-run OPTIGA provision/unlock/wipe e2e on silicon under the strict dispatcher

  surface:secure-element
  EthereumPhone/PQ1#993 · Filter by author markusbug opened on Oct 19, 2026
  1

• #989 follow-up: run the every-boot SE050 SCP_REQUIRED enforcement inside a real dual-SE boot

  surface:secure-element
  EthereumPhone/PQ1#992 · Filter by author markusbug opened on Oct 19, 2026

• FV: statement extractor crosses declaration boundaries for direct term proofs

  priority:lowsource:work-todosurface:fv
  EthereumPhone/PQ1#970 · Filter by author Nicola-Ceornea opened on Oct 17, 2026

• A stale duress mode can survive into a new setup and turn a DECOY choice into WIPE

  bugfindingpriority:lowsurface:lifecycle
  EthereumPhone/PQ1#953 · Filter by author Nicola-Ceornea opened on Oct 16, 2026
  1

• Page-124 attempt counter stays charged after a duress wipe from the boot or PendSV prompt

  bugfindingpriority:lowsurface:lifecycle
  EthereumPhone/PQ1#951 · Filter by author Nicola-Ceornea opened on Oct 16, 2026
  1

• OPTIGA wipe blanks the decoy OIDs best-effort: a failure is silent and never retried

  bugfindingpriority:lowsurface:secure-element
  EthereumPhone/PQ1#950 · Filter by author Nicola-Ceornea opened on Oct 16, 2026
  1

• Duress wipe leaves the SE050 decoy data objects on shipping-shaped builds and still reports success

  bugfindingpriority:mediumsurface:secure-element
  EthereumPhone/PQ1#948 · Filter by author Nicola-Ceornea opened on Oct 16, 2026
  1

• ui-px: partial (dirty-rect) presents for public content instead of full-panel frames

  enhancementpriority:lowsurface:trusted-ui
  EthereumPhone/PQ1#934 · Filter by author Nicola-Ceornea opened on Oct 15, 2026

• Seed-word page draws visibly across the screen: compute the constant-time letter selection once per page

  enhancementpriority:lowsurface:sca-fisurface:trusted-ui
  EthereumPhone/PQ1#932 · Filter by author Nicola-Ceornea opened on Oct 15, 2026