2026-07-11 - 2026-10-11
Overview
33 pull requests merged by 1 user
Merged
#124 feat(machine): apply the settle_transaction operator op (ADR-005 §6)
Merged
#123 ADR-005 rollout step 1: value-confirmed dispense, fault screens, cash-out latch, dispense-report outbox
Merged
#120 feat(deploy): run the tejo from USB (disk-image-tejo-usb)
Merged
#119 fix(hal): await the serial close, and stop reporting a cassette layout the dispenser refused
Merged
#115 fix(nfc): make the Bolt Card reader an opt-in machine capability
Merged
#114 feat(deploy): USB-bootable douro image (disk-image-douro-usb)
Merged
#112 perf: cut the image 38% and turn GPU acceleration back on
Merged
#111 Give the upgrade window its own timezone, not the system
Merged
#108 Finish the console object-argument sweep
Merged
#107 Interpolate log fields instead of passing an object
Merged
#106 Consume operator cassette operations instead of counts
Merged
#105 docs(adr): record the cassette-state synchronization model
Merged
#104 fix(cassettes): close the machine-side divergence paths
Merged
#103 fix(deploy): guard the WireGuard peer units too, not just the interface
Merged
#101 fix(deploy): nightly auto-upgrade failed on both ATMs, for different reasons
Merged
#100 fix(access): instrument Complete, and say when a card can't sell
Merged
#99 fix(cash-out): settlement watch missed one-tap payments
Merged
#97 fix(access): session Complete failed on IPC clone; keep rate lookup off the unlock path
Merged
#96 fix(machine): keep the mouse pointer visible on the web demo
Merged
#95 fix(idle): drop the redundant "Available: N sats" line
Merged
#93 feat(access): verified Bolt Card session at entry + hidden-by-default balance
Merged
#92 fix(access): single-shot loaded card + ADR-003 amendment
Merged
#86 feat(access): Bolt Card tap-to-enter access gate (ADR-003)
Merged
#89 chore: scrub "Lamassu" from shipped labels
Merged
#88 feat: support a public browser demo of the kiosk
Merged
#85 fix(nfc): auto-recover a wedged CCID reader via USB power-cycle
Merged
#84 feat(machine): Bolt Card (NFC) tap-to-receive on cash-in
Merged
#83 feat(machine): Bolt Card (NFC) tap-to-pay on cash-out
Merged
#82 feat(machine): connectivity auto-recovery + on-screen Retry
Merged
#81 fix(lightning): cash-in commission charged twice (send gross principal, not net)
Merged
#80 fix(batm3): eGalax touchscreen (kernel 6.6) + USB-bootable image
Merged
#79 fix(batm3): get cash-in working — EBDS escrow latch + correct serial device paths
Merged
#77 fix(machine): credit bills on stacked-confirmation, not stack command (#58)
2 pull requests proposed by 1 user
Proposed
#87 feat: Raspberry Pi 5 (aarch64) target + Pyramid Apex RS-232 bill validator
Proposed
#110 feat: Raspberry Pi 4 (aarch64) target
4 issues closed from 1 user
Closed
#118 Cassette hot-reload always fails on douro (serial close race), and the app reports success anyway
Closed
#76 bug(machine): manual_dispense never decrements DB cassette counts — inventory overstates after operator remediation
Closed
#94 cassette layout changes after first boot never reach spirekeeper (one-shot hello gate)
Closed
#98 nightly nixos-upgrade fails on batm3 (no known_hosts) and sintra (switch step)
13 issues created by 1 user
Opened
#78 bug(cash-out): unwatched-payment windows — no invoice expiry, silent watchInvoice setup failure
Opened
#90 access: persist the access audit to state.db
Opened
#91 access: open enrollment lets any /scan/ NDEF tag through the gate
Opened
#94 cassette layout changes after first boot never reach spirekeeper (one-shot hello gate)
Opened
#98 nightly nixos-upgrade fails on batm3 (no known_hosts) and sintra (switch step)
Opened
#102 ATMs should fetch with per-machine read-only deploy keys, not an operator account key
Opened
#113 IdleView offers Sell Bitcoin on machines with no dispenser
Opened
#116 batm3 nightly auto-upgrade has failed since Sep 24 — mesa builds locally and hits the 60s timeout
Opened
#117 Hardware device paths have two sources of truth — the NixOS module's defaults are wrong for every model, and warn misleadingly at boot
Opened
#118 Cassette hot-reload always fails on douro (serial close race), and the app reports success anyway
Opened
#121 A relay outage at boot is misread as a revoked pairing, and latches the machine on the pairing wizard for good
Opened
#122 bug(cash-out): a jammed dispense takes the customer's sats, tells the server nothing, over-counts the cassette, and leaves the machine advertising itself as available
Opened
#125 test(machine): settlement-watch.test.ts — 5 of 7 fail on a clean dev checkout
11 unresolved conversations
Open
#27
Smart cassette fallback on dispenser pickup errors
Open
#40
Rename fee_percent to fee_rate for clarity
Open
#21
Test HAL drivers on physical Sintra hardware
Open
#46
audit id003 _send 100ms setTimeout — possible escrow→stack race on Sintras
Open
#2
Feature: Remote Initiation, Local Redemption
Open
#1
Feature: Public Cash Availability Display
Open
#4
Feature: Optional npub identification for cash-in via NIP-17
Open
#3
Feature: Hold Invoices for Safe Dispensing
Open
#56
ATM-side consumer: operator-driven cassette inventory config
Open
#55
Trim ATM closure to recover eMMC headroom
Open
#58
bug(cash-in): bill in escrow can be abandoned when user presses "done" before stack confirms