# WordFinance Securit Libertary

UNDER DEVELOPMENT · EXPERIMENTAL 0.2.7

Project document · October12,2026

WordFinance Securit Libertary is built on Debian13 with the Xfce desktop and a cryptocurrency focus. Its goal is one unified wallet combining WordFinance Linux, Windows, Android and Chrome features. It remains a general-purpose Linux computer: browsers, applications and compatible games can run according to the hardware.

## Purpose and control of keys

The design keeps on-chain recovery phrases and keys under user control. BIP39 phrases and an optional passphrase derive Bitcoin, EVM, Solana and Dogecoin accounts. Separately imported vaults require their own backups and are not automatically merged. Never send your phrase to a website, support, AI or purchase service.

## Security through verifiable controls

The lab implements an authenticated AES-256-GCM/scrypt vault, restrictive permissions, inactivity locking, an inbound firewall, Debian updates and loopback-only local services. The new application disables Node.js access from HTML and uses fixed Core control actions. The native vault blocks creation and restore in volatile live sessions. These controls reduce risk; they do not establish absolute security or a world ranking. Independent audit, complete preload isolation and recovery validation remain pending.

## One wallet, progressive integration

One Linux is the baseline. Stage0.2.0 incorporates the current Windows/Android EVM interface, a history model preserving precision and per-source cache, Chrome contract engine code, and Core/update panels. Including code does not validate every transaction or connect every dApp. Nineteen automated Node checks and three Python dispatch checks passed; UI verification used a disposable profile without external networking. Complete financial regression remains unfinished.

## Bitcoin and Lightning: different models

Bitcoin Core is optional, does not start automatically and validates the chain locally. The pruned profile requires at least25GiB extra; the full profile has a conservative800GiB requirement. The node does not receive wallet recovery phrases. Bitcoin balances, UTXOs, PSBT signing, address rotation and sending still need consolidation in the same interface. WordFinance Lightning accesses a hosted node: its availability and service balance are not restored by an on-chain Bitcoin phrase alone.

## Updates without reinstalling

Update system reviews packages and requests administrative authorization through APT. Application packages are separate from personal data. Expiring plans, preservation of fictitious user data, and rejection of tampered or expired indexes were tested. The own repository still needs an official signing key, signatures, hosting and persistent-installation testing. There is no validated public WordFinance update channel yet.

## Older computers and installation

The initial target is x86_64 with 4 GB RAM, including the Dell Inspiron 1526 PP29L. ISO 0.2.6 completed a clean, automated, encrypted offline installation in a 4 GiB BIOS VM. First and second boots from disk, without the ISO and after human unlock, reached the desktop. A local wallet update from 0.2.1 to 0.2.2 preserved the OS, installed versions, a QA file and Portuguese preference across reboot. No wallet or seed was created; vault persistence and recovery remain untested. Experimental ISO 0.2.7 was built with wallet 0.2.3, first-language onboarding recovery and one-time command registration on reload. Its contents and installer files were checked against 0.2.6; this is not a full installation retest of 0.2.7. The signed public repository, complete financial integration, physical Dell, Wi-Fi and Secure Boot remain pending. Back up before installation.

## Next stages and future services

Next steps are installed-image validation, complete Bitcoin and history/dApp/Lightning adapters, security and license review, and a signed update channel. Direct THORChain integration is reserved for a future update, with explicit swap fees and quote, expiry, destination and refund testing. It is not active in this version. New fiat services depend on provider, country, asset and payment method. No new commission is generating revenue now.

## Open source and version limits

New lab code uses MIT. Debian, reused applications and libraries retain their licenses. The goal is open distribution with source, license inventory, SBOM and verifiable hashes; full review is ongoing. This whitepaper distinguishes implemented work from pending work. It is not certification or a promise of timing, revenue, WFC appreciation or absolute security.

## Integration status

| Component | Current status |
|---|---|
| Debian/Xfce and installer | Baseline VM tested; new ISO under validation |
| EVM ETH/BNB/Robinhood | Interface and vaults incorporated; financial regression pending |
| Unified history | Model/cache tested; all-network discovery pending |
| Chrome/dApp engine | Code incorporated; transport/permissions not connected |
| Bitcoin Core | Optional controls integrated; balances/UTXO/PSBT pending |
| Hosted Lightning | Authorization/history integration in development |
| Updater | APT/packages prepared; official channel pending |
| THORChain and new commissions | Future update; disabled now |

Experimental version for development and testing. No absolute-security certification. Do not use real funds before the corresponding validation.