Review、Remediation 与 Upgrades

Review

核心技术与安全评估

对系统进行完整的技术与安全分析。

Review is for architecture and trust boundaries. Remediation is for issues already named. Upgrade is for new features in a product that already runs.

客户将收到：

• Executive Summary（整体系统状态、关键风险、即时优先级、相对既定目标的就绪度）
• Findings / Risk Register（问题、受影响组件、技术影响、安全/可靠性影响、严重级别、证据、利用/故障所需条件、建议修复）
• Prioritized Remediation Roadmap（优先修复路线图）
• Architecture / Engineering Recommendations（架构 / 工程建议）
• Validation Plan（测试、安全验证、配置检查、回归检查，必要时复审）

Remediation

技术与安全问题修复

修复客户已知问题，或我们在 Review 中发现的问题。

客户将收到：

• Scoped Fix Plan（约定问题清单、优先级、验收标准与变更风险）
• Implemented Fixes（按需完成代码、配置、架构与运维变更）
• Verification Evidence（测试、安全检查、配置检查与回归结果）
• Change Documentation（变更内容、原因、如何运维，以及任何残余风险）
• Handoff for Follow-up（明确后续步骤，包括必要时的定向复查或复审）

Upgrades

功能开发与产品增强

为现有产品添加新功能。

This is for

• a mobile, desktop, or extension Bitcoin wallet that already exists
• a signing service or non-custodial payments path that already exists
• Bitcoin or a side chain the client already runs

This is not for

• building a new wallet from nothing
• a template wallet for many chains

客户将收到：

• Feature Scope & Design（需求、接口、约束以及比特币/安全考量）
• Implementation on the Existing Product（在现有代码库中交付功能，而非从零重写）
• Tests & Validation（单元/集成覆盖、安全相关检查与回归保护）
• Documentation & Handoff（功能如何工作、如何运维、如何扩展）
• Upgrade Path Notes（发布考量、兼容性与变更的生产就绪说明）

What we need from you

To start, we need the running system:

• what is live today
• what must not break
• what you want changed or proved
• who can answer questions on the repo

If the system signs or moves bitcoin, we need enough of the signing path to trace one transaction from screen to bytes. If you cannot share that yet, say so. We will say what we can still do.

What the work is

A Review maps trust boundaries and names what can lose funds.

Remediation changes the running code or config and shows the check.

An Upgrade adds a feature in that same codebase.

What we decline

We do not produce a public audit PDF meant only for a launch page.

We do not take a chain we do not operate.

We do not build a new wallet from nothing for every network.

Email contact@greybound.tech. We reply in 1–2 business days.