v0.4.8

Highlights

• Production race fixes in ECDH (#562) and signing (#570) coordination: subscribe() now happens before publishing, so a fast cosigner's response can no longer fire before the requester is listening (which previously stalled until the 30s timeout).
• Persistent NIP-46 grants CLI — keep nip46 apps / grant / revoke (#506), hidden-vault grant support (#514), and a bunker auto-approval + transport-key persistence fix (#574).
• Audit-log expansion covering rotate_password / rotate_data_key (#578), RateLimitTripped on next successful unlock (#521), hidden-vault outer-volume audit (#538, #540), and a richer audit stats (#528).
• Mutation-testing campaign (#417) closed out across signing / ECDH / descriptor / PSBT / NIP-46 with end-to-end MockRelay integration tests for each.
• FROST coordination: fast failover on co-signer timeout (#505), frost-network sign-event end-to-end software path (#523), opt-in RefuseRawSignatureHooks (#530).
• Dependency bumps: frost 3.0 (#585) and signature 3.0 (#548).

Install

• CLI / Desktop: download the asset for your platform from the Assets section below.
• StartOS: bundled via keep-startos.
• Build from source: see the README.

Verify

sha256sum -c SHA256SUMS

Full changelog

v0.4.7...v0.4.8