S8 — Wire cash‑in path (LNURL‑withdraw outbound) into settlements
S8 — Wire cash-in path (LNURL-withdraw outbound + naming hygiene)
Future: ATM ↔ operator pairing via seed-URL + WalletSharePermission (+ NIP-46 bunker deep-dive)
Superseded in part by the new security pathway epic at #13. The seed-URL pairing + WalletSharePermission idea folds into S0 (pairing) + S2 (NIP-26 delegation enforcement); the NIP-46 bunker…
S7 — NIP-46 bunker option (operator nsec off LNbits' DB)
S6 — Roster-gated auto-account-from-npub + rate limit (LNbits-side)
S5 — sender_pubkey persistence + HMAC over Payment.extra key fields (LNbits-side)
S4 — NIP-78 per-machine config + fleet roster cross-check
S3 — NIP-57-style signed settlement receipts (preimage attestation)
S2 — NIP-26 delegation enforcement in nostr-transport handler
S1 — NIP-40 expiration on kind-21000 RPC events
S0 — Seed-URL pairing + ATM keypair separation (NIP-26 delegation)
Epic: Security pathway hardening (S0–S7)
Future: ATM ↔ operator pairing via seed-URL + WalletSharePermission (+ NIP-46 bunker deep-dive)
Update: LNbits already stores the operator's nostr
Update: LNbits already stores the operator's nostr prvkey
Future: ATM ↔ operator pairing via seed-URL + WalletSharePermission (+ NIP-46 bunker deep-dive)