On-device hardware wallet
A new wallet type. The gadget generates an Ed25519 key, refuses to export the secret, shows the exact payload on the LCD, and emits a signature only after a physical confirm inside a bounded window.
- No signature before confirm, after expiry, or after cancel.
- The signature verifies for that payload and fails for any other.