This update focuses on wallet reliability, with terminal and interface refinements throughout. Wallet • Unconfirmed balance no longer gets stuck. A transaction that never reached the network is now detected and its outputs cleared — and they stay cleared after the app is reopened. • Fixed a "malformed input" error that could block sending. • Pending transactions now sort to the top of the UTXO list. • More reliable balance syncing — pending transactions are re-checked first on every refresh, partial syncs save progress instead of discarding it, and the balance recomputes after every change. • Cross-device sync — a wallet's public data (addresses, UTXOs) syncs via iCloud, and wallets seen on another device are offered for import. • Stuck outgoing transactions are detected, and can be retried or dropped from the UTXO detail screen. • Clearer sync status — an honest "Catching up" indicator. Notifications • Deposit alerts now fire only for genuinely recent payments (the last 24 hours) — no more notifications for a wallet's existing history on first sync or import. Terminal • New word: chars>data. hex2data / data2hex gain arrow-form names hex>data / data>hex (the old names still work). • Fixed confusing errors after an unterminated string or comment carried into the next line. • Hold delete to repeat; the suggestion bar no longer overflows or covers the keypad toggle. Also • Redesigned amount-unit control on the payment screen; a broadcast button when decoding a transaction. • Native macOS app icon and a range of Mac layout fixes.

Wallet & Cold Mode • Cold Mode broadcasts now route to the wallet that signed them, even after switching wallets in the picker. • Pending broadcasts moved to a per-wallet badge — the count you see is the queue for the wallet you're viewing. • First deposit notifications now fire on fresh wallets (previously silently absorbed on install). • BIP39 seed handling unified between BIP44 and Type42 derivation paths. • PAY button reflects valid state from the first frame when the recipient was pre-filled — by the send Forth word, a URL scheme, or paste-from-clipboard. Previously showed "invalid address" until you tapped the field. • New terminal words: send (single recipient) and send-many (multi-recipient with per-amount control) — open the review sheet, biometric-gated, broadcast on confirm. • Every multi-recipient send shows the full per-payee breakdown before Face ID — approval is over the bytes, not a label. • Two-iPhone Cold Mode via AirDrop bundles — export receive addresses, receive bundles, and verify SPV proofs across an air-gap without dedicated hardware. dApp & BRC-100 integration • Multi-output transactions honour each recipient's amount (no more equal-split rewrites). • Incoming transactions are owner-verified before registering UTXOs. • signAction approval sheets show the original transaction description instead of "wants to call signAction." • Faster "confirmed" badges — ARC now returns Merkle proofs inline so SPV verification runs at broadcast time. Design • Liquid Glass design system unified across every wallet surface — tinted action buttons, chrome glass close X, glass section headers. • Custom Bitcoin glyph replaces the system icon throughout. • Files screen: symmetric inline header (search · FILES · add). • Square add-wallet button distinguishes "create" from circular "modify" affordances. • Refreshed wallet detail, restore-wallet, decode-transaction, and seed-verification screens. Accessibility • VoiceOver reads each transaction row as a single sentence ("Sent 0.0001 BSV on 11 May, pending") instead of a glyph stream. • Live countdown on auth approval sheets. • Keypad keys hit Apple's 44pt touch-target minimum on every device. • Automation IDs on payment fields for snapshot/UI tests. Reliability & security • SPV trust store now has a single chain-validated write path; dApps reading headers see the bounded validated range. • Defensive decoders on persisted state — schema additions can't crash the wallet on update. • Cancellation-safe networking: rate limiter and mempool monitor no longer leak slots or crash on concurrent polls. • Defence-in-depth biometric on decrypt; HTTPS-only auth callbacks. • Approval cache binds to the exact recipient set + output digest — a recently-approved 770k send to A,B won't auto-authorise a 770k send to X,Y inside the 120-second window. • Fragmentation-aware UTXO selection — normal sends drain dust as a side effect, with a hard transaction-size ceiling enforced before biometric. • 1Sat Ordinal protection — UTXOs holding inscriptions are filtered from spending across every send path. Forth interpreter • ?DO/LOOP and DO/+LOOP propagate body errors instead of silently swallowing them. • 0 0 DO ... LOOP is now a clean zero-trip (matches gforth/SwiftForth behaviour). • New script bridge words: >script, data>script, text>script, file>script — push terminal data into the Bitcoin Script buffer for B://, 1Sat Ordinals, and MAP protocol posts.

Wallet & Cold Mode • Cold Mode broadcasts now route to the wallet that signed them, even after switching wallets in the picker. • Pending broadcasts moved to a per-wallet badge — the count you see is the queue for the wallet you're viewing. • First deposit notifications now fire on fresh wallets (previously silently absorbed on install). • BIP39 seed handling unified between BIP44 and Type42 derivation paths. • PAY button reflects valid state from the first frame when the recipient was pre-filled — by the send Forth word, a URL scheme, or paste-from-clipboard. Previously showed "invalid address" until you tapped the field. • New terminal words: send (single recipient) and send-many (multi-recipient with per-amount control) — open the review sheet, biometric-gated, broadcast on confirm. • Every multi-recipient send shows the full per-payee breakdown before Face ID — approval is over the bytes, not a label. • Two-iPhone Cold Mode via AirDrop bundles — export receive addresses, receive bundles, and verify SPV proofs across an air-gap without dedicated hardware. dApp & BRC-100 integration • Multi-output transactions honour each recipient's amount (no more equal-split rewrites). • Incoming transactions are owner-verified before registering UTXOs. • signAction approval sheets show the original transaction description instead of "wants to call signAction." • Faster "confirmed" badges — ARC now returns Merkle proofs inline so SPV verification runs at broadcast time. Design • Liquid Glass design system unified across every wallet surface — tinted action buttons, chrome glass close X, glass section headers. • Custom Bitcoin glyph replaces the system icon throughout. • Files screen: symmetric inline header (search · FILES · add). • Square add-wallet button distinguishes "create" from circular "modify" affordances. • Refreshed wallet detail, restore-wallet, decode-transaction, and seed-verification screens. Accessibility • VoiceOver reads each transaction row as a single sentence ("Sent 0.0001 BSV on 11 May, pending") instead of a glyph stream. • Live countdown on auth approval sheets. • Keypad keys hit Apple's 44pt touch-target minimum on every device. • Automation IDs on payment fields for snapshot/UI tests. Reliability & security • SPV trust store now has a single chain-validated write path; dApps reading headers see the bounded validated range. • Defensive decoders on persisted state — schema additions can't crash the wallet on update. • Cancellation-safe networking: rate limiter and mempool monitor no longer leak slots or crash on concurrent polls. • Defence-in-depth biometric on decrypt; HTTPS-only auth callbacks. • Approval cache binds to the exact recipient set + output digest — a recently-approved 770k send to A,B won't auto-authorise a 770k send to X,Y inside the 120-second window. • Fragmentation-aware UTXO selection — normal sends drain dust as a side effect, with a hard transaction-size ceiling enforced before biometric. • 1Sat Ordinal protection — UTXOs holding inscriptions are filtered from spending across every send path. Forth interpreter • ?DO/LOOP and DO/+LOOP propagate body errors instead of silently swallowing them. • 0 0 DO ... LOOP is now a clean zero-trip (matches gforth/SwiftForth behaviour). • New script bridge words: >script, data>script, text>script, file>script — push terminal data into the Bitcoin Script buffer for B://, 1Sat Ordinals, and MAP protocol posts.

Forth-2012 compliance: • PAGE now clears the terminal (6.2.2030) • MS pauses inside loops for millisecond delays • ." and S" preserve verbatim spacing for ASCII art • EKEY?, WORDS, and stack-diagram fixes across the vocabulary Wallet: • Faster address discovery on Sync (history-first scan, parallel UTXO fetch) • Pays the miner-quoted fee exactly — no over-paying • Seed and private keys hidden from the iOS app switcher • SPV sync and mempool monitor pause in the background to save battery • Concurrent-safe UTXO merging; filename-safe wallet titles BRC-100 protocol: • signAction completes the delayed-broadcast flow • Replay protection on QR authentication challenges • Hardened createAction and certificate encryption paths Reliability: • Idle watchdog and exponential backoff on JungleBus connections • Stray WhatsOnChain calls now route through the shared rate limiter • HeaderSync respects wifi-only preference at monitor install

• Bitcoin wallet is now included with the app — no in-app purchase, no unlock screen. • Customise the FORTH terminal's "ok." response from Settings → Customise Appearance. Make it "yes sir!", an arrow, or anything you like. • Smaller download and faster launch — removed an unused internal dependency. • Stability and performance improvements across the wallet, SPV verification, and the FORTH interpreter.

- Full Forth-2012 CORE compliance (133/133 words) - Smart suggestions and built-in number pad - BSV wallet: send, receive, and manage Bitcoin SV - Transaction builder from the terminal - Customisable themes

Update 4.12 print words ." " work updated to work with forth print (no space required after or before the " key word fixed general bug fixes

Vocabulary added to show the words available and its definition.

Bug fixes. restore default appearance settings added.