v0.3.0-testnet4: Pure Rust Sovereign Cold-Storage Appliance (Testnet4)

SubZero-rs v0.3.0-testnet4 — Pure Rust Sovereign Cold-Storage Appliance (Testnet4 Edition)

Warning

TESTNET4 ONLY: This appliance is strictly locked to Bitcoin Testnet4 (tb1q... Native SegWit, coin type m/84'/1'/0'). Zero financial risk rehearsal edition. NEVER SEND REAL MAINNET BITCOIN TO THESE ADDRESSES.

SubZero-rs is a pure Rust, machine-first, amnesic Bitcoin cold-storage and estate-planning appliance engineered for airgapped COTS hardware (legacy laptops, USB drives, and amnesic live environments).

Key Features & Invariants

• Testnet4 Lock & Zero-Risk Rehearsal: Hardcoded to Bitcoin Testnet4 (Network::Testnet4 / BIP-94) across all derived addresses (tb1q...), extended keys (tpub.../vpub...), and BIP-380 output descriptors to allow risk-free end-to-end inheritance and coordinator drills.
• 100% Pure Rust Architecture: Eliminates runtime engine dependencies; compiles to a single static musl ELF binary with zero dynamic library linkages.
• Strict Physical Entropy Engine: Physical coin (128+ flips) and dice (50+ rolls) entropy validation with real-time Pearson's $\chi^2$ goodness-of-fit ($df=1, 5$) and Markov conditional transition audit bounds.
• Cross-Utility Compatibility: Pure dice/coin inputs generate identical BIP-39 mnemonic phrases byte-for-byte compatible with Coldcard, BitBox02, and standard reference tooling.
• Amnesic Memory Hygiene: Zeroization via Zeroize and ZeroizeOnDrop across all intermediate master keys, seeds, passphrases, and decrypted buffers.
• Optical Airgap Exports: Tab 4 & 5 support BBQR animated optical streams, BIP-380 output script descriptors, and standard watch-only xpub/vpub displays with zero line clipping on legacy 80x25 consoles.
• Partition 2 Dual-Estate Vault: Deterministic PBKDF2/AES-GCM encrypted backup vault generator and offline HTML decryptor (decrypt.html).

Binary Verification

• Architecture: x86_64-unknown-linux-musl (Static binary)
• Binary Size: 4.2 MB
• SHA-256: 01b45846718de43b7bb9ef8898be6d725bf5609790bb9dcfb729f28ccfebed9c