fix: live-QA follow-up batch (masternodes, wallets, fonts)

Cargo.toml

@@ -44,6 +44,13 @@ serde = "1.0.219"
 serde_json = "1.0.140"
 serde_yaml_ng = { version = "0.10.0" }
 tokio = { version = "1.46.1", features = ["full"] }
+# Pin is deliberate; do not "fix" the audit warning by bumping. bincode is flagged
+# unmaintained (RUSTSEC-2025-0141, INFO-level — no known vulnerability). The advisory
+# covers *all* versions, so no bump can clear it: 2.0.1 is the last functional release
+# and 3.0.0 is a tombstone whose lib.rs is a bare `compile_error!`. This crate encodes
+# the on-disk wallet-secret envelopes and QualifiedIdentity blobs, so switching encoders
+# changes the wire format of data users already have on disk — that needs a designed
+# read-old/write-new migration, not a dependency bump.
 bincode = { version = "=2.0.1", features = ["serde"] }
 hex = { version = "0.4.3" }
 async-trait = "0.1.89"

assets/Fonts/Noto_Sans_Symbols2/OFL.txt

@@ -0,0 +1,93 @@
+Copyright 2022 The Noto Project Authors (https://github.com/notofonts/symbols)
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+https://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded, 
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.

docs/ai-design/2026-05-28-migration-tool/notes.md

@@ -203,19 +203,27 @@ idempotency is confirmed.
 
 ### `identity` (DET source file: `src/database/identities.rs`)
 
-- **Source:** `identity` in `data.db`
-- **Destination:** `identities.entry_blob` (typed BLOB column) in `platform-wallet-storage`
-- **Mapping:** Deserialize DET's stored identity representation → serialize as
-  bincode-encoded `QualifiedIdentity` with a leading version byte prepended
-- **Per-network split:** Yes
-- **Gotchas:** Upstream schema uses a leading version byte in `entry_blob` for
-  forward/backward compatibility — this byte must be present and set correctly, or upstream
-  deserialization will silently produce garbage. Confirm the byte format with the
-  platform-wallet-storage author before implementing. This is the highest-risk table in the
-  migration.
+> **SUPERSEDED (2026-07-13).** Design and task breakdown now live in
+> `docs/ai-design/2026-07-13-legacy-identity-migration/design.md`. The entry below is kept
+> for context; two of its claims are wrong. The destination is **not** upstream's
+> `identities.entry_blob` — commit `b14bf32c` moved it to DET's own per-network k/v
+> (`det:identity:v1` under `DetScope::Identity`, roster at `det:identity_index:v1`). And the
+> version byte needs no agreement with the platform-wallet-storage author: `DetKv::put`
+> prepends `kv::SCHEMA_VERSION` automatically, so an importer that goes through
+> `AppContext::insert_local_qualified_identity` gets it for free.
+
+- **Source:** `identity` in `data.db` (`is_local = 1 AND data IS NOT NULL`)
+- **Destination:** `StoredQualifiedIdentity` in DET's per-network k/v — see the design doc
+- **Mapping:** `QualifiedIdentity::from_bytes(row.data)` → restore `status` from its column →
+  `AppContext::insert_local_qualified_identity(&qi, &wallet_link)`. The `data` BLOB carries
+  **all identity key material**; there is no second key table in v0.9.3.
+- **Per-network split:** Yes — two-value filter (`mainnet` / legacy `dash`)
+- **Gotchas:** The real risk is cross-version bincode compatibility of the `data` BLOB, not a
+  version byte. Every DET-side and dpp-side struct in the blob was verified unchanged between
+  v0.9.3 and HEAD; only the `bincode` rc.3 → 2.0.1 wire format is unproven, and a golden-blob
+  test closes it. Still the highest-risk table in the migration.
 - **Status:** DONE for new-install path — see commit `b14bf32c` (identities + tokens →
-  per-network k/v). Migration tool still needs to import legacy rows with the version-byte
-  contract correct.
+  per-network k/v). Migration tool still needs to import legacy rows.
 
 ---