Four things the suite could not previously catch:
- The emitted token is cashuA. It is still valid, so nothing fails — the
send succeeds and the receiver redeems it. The only symptom of cashuB
encoding falling back is a warning in the journal nobody reads, which
is exactly the kind of silent regression a route check exists for.
- The wallet has no backup phrase. Without one the coins live in exactly
one file and nothing can bring them back.
- The phrase changes between reveals, which would orphan every coin
minted under the previous one.
- Restore double-counts. It runs against a live wallet, so running it
twice must leave the balance where it was.
Reveal is also asserted to refuse a wrong password: it is the one route
here that hands out key material, and a session alone must not be enough.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
