Weekly Check-in: Week of 2026-07-06

[payjoin-bot]

Weekly standup — each contributor has a thread below with auto-gathered activity.

Reply to your thread by end-of-day Monday (your timezone). Copy the template below and fill it in:

### Shipped
<!-- Add anything the bot missed: design work, specs, conversations, off-GitHub contributions. Correct any mistakes. Skip if the bot covered everything. -->

### Focus
What are you working on this week?

### Bottleneck
What is the single biggest bottleneck in progress toward your greater goal?
Name your goal. Name the constraint. Name who or what can unblock it.

Participated: @DanGould, @benalleng, @chavic, @Mshehu5

[payjoin-bot]

DanGould

@DanGould

Shipped

PRs merged:

• Fix output substitution change misdirect

PRs reviewed:

• Look up RK instead of looping
• Add directory fallback behavior
• Use time-based uuid instead of raw increment for session ids
• Enforce response body size limits in payjoin-cli
• Add Spec related consts for better readability in tests
• Expose InputPair outpoint over FFI
• Add tests to catch mutants

Last Week

Review your previous thread: Last week's thread

[DanGould]

Shipped

Last week was all about payjoin-1.0-rc.4 and getting payjoin-cli-rc.0 out

Focus

we MUST ship releases this week and then I must focus on operational duties.

Bottleneck

I think it's precisely #1007, #1702, #1703 unless we're missing anything from the milestones. This + rolling out the release is it.

[payjoin-bot]

spacebear21

@spacebear21

Shipped

PRs merged:

• cli: Update history column width to fit UUID

PRs reviewed:

• Add --session-id to resume command to allow resuming single sessions
• Fix output substitution change misdirect
• Use time-based uuid instead of raw increment for session ids
• Remove Completed at history column

Last Week

Review your previous thread: Last week's thread

Auto-detected signals:

• PR awaiting review: chore: update cargo.lock
• PR awaiting review: Prevent receiver panic paths
• PR awaiting review: Apply 1.0 freeze-required API fixes (non_exhaustive, ShortIdError, OutputSubstitution, must_use)
• PR awaiting review: Insulate bitcoin-ohttp and bitcoin-hpke from the public API
• PR awaiting review: Update opentelemetry to 0.32

[payjoin-bot]

benalleng

@benalleng

Shipped

PRs merged:

• Add --session-id to resume command to allow resuming single sessions
• Add Spec related consts for better readability in tests
• Add directory fallback behavior
• Remove Completed at history column
• Use time-based uuid instead of raw increment for session ids
• Add tests to catch mutants

PRs reviewed:

• Fix output substitution change misdirect
• cli: Update history column width to fit UUID

Last Week

Review your previous thread: Last week's thread

Auto-detected signals:

• PR awaiting review: Cli cancel UX

[benalleng]

Shipped

• successful demonstrated a successful payjoin using our published 0.1.1 dart ffi bindings in cake wallet https://mempool.space/tx/931d6627f7b63491cbc2e6d860dc630537385fd9ee3171f2013b64e6a143a4e4

Focus

• review and helping move the payjoin crate PRs along

Bottleneck

• just hoping to keep the three primary payjoin crate PRs moving

[benalleng]

https://github.com/cake-tech/cake_wallet/pull/3363/commits

[payjoin-bot]

chavic

@chavic

Shipped

PRs merged:

• Expose InputPair outpoint over FFI

Last Week

Review your previous thread: Last week's thread

Auto-detected signals:

• PR awaiting review: Prepare release-ready C# NuGet package workflow

[chavic]

Shipped

Merged BTCPay Payjoin plugin:

• Check input/output ownership against the whole wallet and persist seen inputs. Restores the two disabled receiver guards. Check input/output ownership against the wallet and persist seen inputs ValeraFinebits/btcpayserver-payjoin-plugin#58
• Use rust-payjoin privacy-preserving receiver input selection and collapse signature stripping to one place. Use rust-payjoin privacy-preserving receiver input selection ValeraFinebits/btcpayserver-payjoin-plugin#59

Open PRs (BTCPay Payjoin plugin, settlement/accounting cluster):

• Record the expected final transaction during proposal replay, self-healing the crash seam. Record the expected final transaction during proposal replay ValeraFinebits/btcpayserver-payjoin-plugin#71
• Reconcile the final transaction onto its own payment record, no double-credit or fallback conflict. Reconcile the final transaction onto its own payment record ValeraFinebits/btcpayserver-payjoin-plugin#72
• Pin settlement expectations atomically and verify them before crediting. planned to merger after 71/72 Pin settlement expectations atomically and verify them before crediting ValeraFinebits/btcpayserver-payjoin-plugin#75
• Reset the accounting record when a receiver session is recreated. Reset the accounting record when a receiver session is recreated ValeraFinebits/btcpayserver-payjoin-plugin#76
• Give armed settlement records a grace period and an operator retry. Give armed settlement records a grace period and an operator retry ValeraFinebits/btcpayserver-payjoin-plugin#74

Open PRs (BTCPay Payjoin plugin, policy and hardening):

• Derive the receiver's maximum fee rate from estimation plus a per-store override. Derive the receiver's maximum fee rate from estimation ValeraFinebits/btcpayserver-payjoin-plugin#80
• Broadcast the sender's original transaction when a session ends unpaid. Broadcast the sender's original transaction when a session ends unpaid ValeraFinebits/btcpayserver-payjoin-plugin#79
• Refresh cached OHTTP keys sooner and on session-build failure. Refresh cached OHTTP keys sooner and on session build failure ValeraFinebits/btcpayserver-payjoin-plugin#77
• Enforce the segwit assumptions on both sides of a payjoin. Enforce the segwit assumptions on both sides of a payjoin ValeraFinebits/btcpayserver-payjoin-plugin#78

Open PRs (rust-payjoin):

• Prepare a release-ready C# NuGet package workflow. Prepare release-ready C# NuGet package workflow #1707

Reviews (BTCPay Payjoin plugin):

• Clarify Async Payjoin checkout mode UI. fix: clarify Async Payjoin checkout mode UI ValeraFinebits/btcpayserver-payjoin-plugin#67

Focus

• Land the correctness-pass tail. Every remaining audit has a PR; merge the stack in order.
• Probably release C# packages, unblocked by the C# packaging work (Prepare release-ready C# NuGet package workflow #1707).

Blockers

• The settlement cluster is a stack, merge order matters and the later PRs rebase as the earlier ones land.

[payjoin-bot]

zealsham

@zealsham

Shipped

PRs reviewed:

• Add core RelaySelector

Last Week

Review your previous thread: Last week's thread

[zealsham]

Focus

• Read up https://davidschinazi.github.io/draft-schinazi-httpbis-ohttp-ext-key-config/draft-schinazi-httpbis-ohttp-ext-key-config.html , relevant for OHTTP keys should be rotated #1449
• implement a cache that isn't TTL aware for now (temporary) Payjoin-cli should cache ohttp-keys for re-use #1035
• Review payjoin-cli related PRS

[payjoin-bot]

Mshehu5

@Mshehu5

Shipped

No activity found.

Last Week

Review your previous thread: Last week's thread

[Mshehu5]

Shipped

bitcoindevkit/bdk-cli#242 Merged

Focus

Make #1514 In to review ready state. I initially planned to keep this as a larger PR to show the overall goal of the smaller pieces. But since the work can be split into main crate changes, CLI implementation, and tests. I think structured commits should make it easy enough for reviewers to follow

[payjoin-bot]

0xZaddyy

@0xZaddyy

Shipped

No activity found.

Last Week

Review your previous thread: Last week's thread

[ValeraFinebits]

Shipped

Issues opened:

• Retry transient directory errors with fresh requests ValeraFinebits/btcpayserver-payjoin-plugin#69
• Add RelaySelector support to the plugin ValeraFinebits/btcpayserver-payjoin-plugin#70
• Investigate PostgreSQL shared memory exhaustion after repeated integration test runs ValeraFinebits/btcpayserver-payjoin-plugin#73

PRs merged:

• Check input/output ownership against the wallet and persist seen inputs ValeraFinebits/btcpayserver-payjoin-plugin#58
• Use rust-payjoin privacy-preserving receiver input selection ValeraFinebits/btcpayserver-payjoin-plugin#59

Focus

• Continue working on the plugin.

[caarloshenriq]

Shipped

Focus

• write e2e tests and generate harness to feat: port payjoin core to no_std #1615
• Review PRs

Bottlenack

I still travelling and just back home on weekend

[bc1cindy]

Shipped

Issues opened:

• Add core RelaySelector #1694
• Durable relay failure tracking #1697
• Bitcoin sends use nLockTime = 0 (anti-fee-sniping + payjoin fingerprint) cake-tech/cake_wallet#3361

PRs reviewed:

• Add comments to FFI interface #1653
• Cli cancel UX #1700
• Dedup utxos locked method #1568

PRs opened:

• Add core RelaySelector #1696
• Add locktime param to BitcoinTransactionBuilder cake-tech/bitcoin_base#13
• Set anti-fee-sniping locktime on bitcoin sends cake-tech/cake_wallet#3362

Focus

• fingerprints
• review

[xstoicunicornx]

/check-in

[payjoin-bot]

Shipped

PRs reviewed:

• Add core RelaySelector
• Look up RK instead of looping
• Fix output substitution change misdirect

Issues opened:

• Ambiguous state when persisting MaybeTerminalSuccessTransition

Auto-detected signals:

• PR awaiting review: Add and Revise Receiver Interface Comments
• PR has requested changes: Async Interface for Payjoin Receiver State Machine

[xstoicunicornx]

Focus

• PR review

Bottleneck

PRs awaiting review:

• Add and Revise Receiver Interface Comments #1710
• Non-blocking Interface for Payjoin State Machine  #1446