Review, Remediation e Upgrades

Review

Avaliação técnica e de segurança central

GreyBound Review is a technical and security assessment of a Bitcoin system that already exists: wallet, signing path, node, backend, indexer, or side chain. Do this before mainnet funds or a public launch. The client gets an executive summary, a risk register, a remediation roadmap, and a validation plan. This is not a public contest report.

Review is for architecture and trust boundaries. Remediation is for issues already named. Upgrade is for new features in a product that already runs.

O cliente recebe:

• Executive Summary (estado geral do sistema, riscos-chave, prioridades imediatas, readiness para o objetivo declarado)
• Findings / Risk Register (problema, componente afetado, impacto técnico, impacto de segurança/confiabilidade, severidade, evidência, condições para exploração/falha, remediação recomendada)
• Prioritized Remediation Roadmap (roteiro de remediação priorizado)
• Architecture / Engineering Recommendations (recomendações de arquitetura / engenharia)
• Validation Plan (testes, validação de segurança, checks de configuração, checks de regressão, re-review quando necessário)

Remediation

Remediação de issues técnicos e de segurança

GreyBound Remediation fixes Bitcoin infrastructure issues the client already knows or that Review found. The work is code, configuration, architecture, and operations on the running system, then checks and handoff.

O cliente recebe:

• Scoped Fix Plan (lista acordada de issues, prioridade, critérios de aceite e risco da mudança)
• Implemented Fixes (mudanças de código, configuração, arquitetura e operações conforme necessário)
• Verification Evidence (testes, checks de segurança, checks de configuração e resultados de regressão)
• Change Documentation (o que mudou, por quê, como operar e residual risk se houver)
• Handoff for Follow-up (próximos passos claros, incluindo re-check ou re-review direcionado quando necessário)

Upgrades

Desenvolvimento de features e melhoria de produto

GreyBound adds features to a Bitcoin wallet or signing stack that already ships. The work goes into the live codebase: descriptors, PSBT flows, multisig, hardware-signer paths, fee and coin selection, and the backend or indexer the wallet uses.

This is for

• a mobile, desktop, or extension Bitcoin wallet that already exists
• a signing service or non-custodial payments path that already exists
• Bitcoin or a side chain the client already runs

This is not for

• building a new wallet from nothing
• a template wallet for many chains

O cliente recebe:

• Feature Scope & Design (requisitos, interfaces, constraints e considerações Bitcoin/segurança)
• Implementation on the Existing Product (features entregues no codebase existente)
• Tests & Validation (cobertura unit/integration, checks relevantes de segurança e proteção de regressão)
• Documentation & Handoff (como a feature funciona, como operar e como estender)
• Upgrade Path Notes (rollout, compatibilidade e readiness de produção da mudança)

What we need from you

To start, we need the running system:

• what is live today
• what must not break
• what you want changed or proved
• who can answer questions on the repo

If the system signs or moves bitcoin, we need enough of the signing path to trace one transaction from screen to bytes. If you cannot share that yet, say so. We will say what we can still do.

What the work is

A Review maps trust boundaries and names what can lose funds.

Remediation changes the running code or config and shows the check.

An Upgrade adds a feature in that same codebase.

What we decline

We do not produce a public audit PDF meant only for a launch page.

We do not take a chain we do not operate.

We do not build a new wallet from nothing for every network.

Email contact@greybound.tech. We reply in 1–2 business days.