Laid out for iPhone Duo, with a more accurate balance. • On iPhone Duo, the keypad, pop-ups and the PAY button in Settings keep clear of the fold. • A payment you send stays off your balance until it confirms, and a dropped one gives its coin back at once. • Screens that cannot fetch a price or a balance now say so instead of showing zero. • On the Mac, an open wallet no longer runs overlapping address searches that kept the processor busy. • Fixes to Full Sync, queued payments and history, and VoiceOver no longer spells out shortened identifiers.

A clearer transaction page, a steadier balance, and fixes for large text sizes. • The transaction page now leads with the message, shows shorter identifiers, and keeps the details behind a disclosure. • Your balance is held to what the chain holds after a payment, and coins known to be spent lower it. • A sign-in challenge that has expired is now refused instead of signed. • Seed words are never cut short at the largest text sizes, and the seed screen's buttons stay reachable. • The payment sheet scrolls clear of the Pay bar, and long identifiers wrap without hyphens. • An imported receipt must now match its transaction identifier, and the identifier is shown in lower case. • Notification settings name the app Henceforth, and the scan-to-sign-in close button is announced as Close by VoiceOver. • A transaction with an empty coinbase field is no longer labelled as a coinbase.

Wallet balances now match the chain. • A balance that had grown too large comes back down to what the chain holds. • A wallet emptied on another device now reads empty here too. • Payments signed in Cold Mode are no longer overwritten if their list can't be read. • Discarding a payment that is waiting to be sent now asks you first. • Checking a payment now confirms its proof belongs to that payment.

The Bitcoin price screen now agrees with itself. The chart, the change, and the high, low and average all run up to the live price at the top, so the high can no longer sit below today's price after a sharp move, and the touch marker lands on the live point. A range you pick that ended before today still shows the record as it was. In the wallet, a spend recorded on another of your devices now hides a coin here for at most a day unless this device holds the spending transaction, so a payment that never settles can no longer keep a real coin off every device, and a spend recorded while the wallet is saving its coins is no longer lost after a restart.

When two wallet cards hold the same address, spend evidence now reaches every card that holds it, so balances stay right on every card after a restore. The Bitcoin price graph keeps its daily prices in memory for an hour, so switching time ranges no longer waits on the network and the chart stays on screen while it changes. Wallet files are now decrypted before anything guesses whether they are plain text, so the roughly one encrypted file in a hundred and twenty eight that happened to look like plain text no longer loses its derived addresses on the next launch. When you archive a profile with xfolklore from a wallet card that does not own its handle, the paid posts now stay queued for the card that does, instead of being quoted and paid for again on the next run, and the app names that remedy rather than asking you to try again shortly. A coin spent from another device, or by another wallet holding the same seed, now comes off the card on its own, because the wallet's periodic refresh includes the full pass that can lower a balance rather than only the quick one that could raise it. That spend is recorded for good only once its block is buried six blocks deep, so a block that a chain reorganisation takes back can no longer hide a coin that is still unspent; the card figure therefore comes down about an hour after the spend confirms, while the coins you can spend from are corrected in the same refresh.

Wallet balances you can trust. Spend evidence is now kept per wallet, so switching between wallets can no longer hide a coin or bring back a spent one. Coins restored after a failed broadcast always return to the wallet that owns them, including from the All Wallets view.

A rebuilt scanner that focuses where you tap, zooms past the close-focus dead zone, and keeps working after the first read. Payment links beginning bsv: or bitcoinsv: now open straight in the app. And an accessibility pass: Reduce Motion is respected throughout, controls announce themselves properly, and a refused camera explains itself instead of sitting blank.

Smarter wallet address scanning that backs off gently instead of re-checking every day, and clearer guidance when a paid folklore archive is waiting on its owning wallet card. Small fixes.

- Scan to pay: point the camera at a payment code and it opens straight into the pay sheet, and bitcoin: links from other apps now open in Henceforth. - The Twetch gallery: paste a seed phrase and every recoverable ordinal it holds renders in one place. - Files kept in iCloud are no longer overwritten at launch by an older copy from another device. - Sending is more careful under failure: payment state recovers cleanly from an interrupted broadcast, and a miner outage can no longer be mistaken for a refusal. - Change from certain older wallets lands on its own addresses instead of colliding with receiving ones.

- Broadcasting fails over to a second miner when an endpoint is unreachable, instead of reporting a false rejection. - Newly rotated receiving addresses join live deposit monitoring immediately. - Reliability improvements across handle registration and archive scripts.

Archive fixes. An archive you paid for now registers to the wallet that paid for it, every time — including when your wallet holds more than one card, and when a run is resumed rather than started fresh. A batch that has already landed is never re-quoted or re-sold. Henceforth also now asks what you think of it only after something has actually worked — a broadcast that settled — rather than at a moment of its own choosing.

The window toolbar symbols lose their glass fill and now paint the role colour straight onto the icon, while the circles inside content keep theirs. Also in this release: iCloud file sync, wider wallet restore and rediscover coverage, folklore sync, and a fix for an xtext retry that could pay twice.

This update sharpens the wallet and steadies the interpreter. • More dependable payments. The wallet now correctly accounts for coins already spent elsewhere, so transactions build and broadcast cleanly the first time. • Paymail payments notify the recipient's wallet automatically. • A steadier interpreter — several edge cases that could interrupt a session are now handled gracefully, and large transactions are faster. • Refreshed Settings, and a smoother wallet loading animation.

Wallet improvements: • Wallets open instantly — cached balances show at once and refresh quietly in the background. • Payment results are honest: a broadcast that fails now says so on the spot, with a retry. • Deleting a wallet now sticks across relaunches. • Balance counting is more accurate for wallets synced across devices.

A polish update: • Fixed the Settings back button — it could miss taps. • The terminal keyboard now gets out of the way: press Return on a blank line to dismiss it. • Removed the keyboard-type setting — the terminal always picks the right keyboard. • Stability and performance improvements.

The Script engine, rebuilt • The data stack is now the live Bitcoin Script consensus stack — what you see on .ds is exactly what the validator sees. • script-step walks any saved script opcode-by-opcode, rendering the stack live at every step. • script-tx-context loads any on-chain transaction and makes it replayable at the prompt. • checksig-fixture arms a real signed transaction so you can single-step a full P2PKH / OP_CHECKSIG verification to VALID. • >scriptnum and scriptnum> make the number↔bytes boundary explicit; 0x literals push bytes everywhere. Live chain data on the stack • balance, tx-confirmations, and spv-verified? put chain state directly on the stack — and they work inside loops and your own word definitions now. • Broadcasting a transaction pushes its TXID onto the stack. • THROW and CATCH let payment scripts handle failure instead of just stopping. Clearer errors and help • Errors name the word that failed and dump the stack. • Mistype a word and the terminal suggests near matches. • help and see now work on built-in words; built-ins can no longer be silently redefined. Faster and smoother • Quicker launch and faster wallet sync via bulk address/UTXO/history fetching. • Smoother terminal scrolling across long sessions. Accessibility • VoiceOver now announces command results and broadcast outcomes. Wallet, vocab & navigation • More accurate balances; the correct signing wallet is kept on payments. • Browse the vocabulary by category and search definitions. • macOS: back navigation works on every pushed screen.

Fixes and reliability. Wallet • First-time sync is far faster: block headers now download in bulk during initial catch-up. Every header is still verified on this device — proof-of-work, chain linkage and the checkpoint anchor are unchanged; only the download got faster. • If the primary balance source is unreachable, a second independent source answers, so balance checks keep working through an outage. • "Show New Address QR" in wallet details opens again. • Seed verification: starting the quiz from wallet details no longer re-reveals the seed first, a Cancel button appears after a failed quiz, and success is confirmed clearly. Mac • Every pushed page now has a back button. Six pages — among them the vocabulary word definitions and the create- and restore-wallet flows — could previously strand you with no way back. • Importing and exporting Air-Gap Tools files and choosing script files now works — the file-access permission was missing from the sandboxed build. • The app quits when you close its last window. Terminal & keyboards • A line that errors no longer also prints "ok." — the error message stands alone. • Script recording prints one output line per entry instead of running lines together. • With a hardware keyboard, the terminal keeps focus after each command — no more pressing Return twice between commands. • Your keyboard choice in Settings now persists across launches, and the selected-keyboard label reads correctly for all three keyboard types. Interface • All text now follows your chosen theme colour. Text that fell back to system colours could render dark-on-dark — most visibly in Light appearance on Mac. Field placeholders are themed too. • Approval prompts now say "Authentication required" instead of naming Face ID on machines that don't have it. • Settings shows the app version at the foot of the page. Several of these were reported by testers — thank you.

Mac launch. Henceforth now runs natively on Mac alongside iPhone and iPad — one app, three idioms, with iCloud wallet sync across all three. Your keys never leave the device they're on; the public side of your wallet — addresses, balances, history — stays in step. Read any transaction The transaction decoder is rebuilt. Paste a raw transaction, or open one you just built or sent, and read it back in plain terms: TXID, size, fee, version and locktime up top, then every input and output labelled by type. P2PKH outputs show the address, OP_RETURN outputs show the embedded message, and any script expands to its full opcode disassembly. The raw hex is one tap away, with Copy and Share. Wallet & restore • Sync now names the wallet it's working on and its place in the queue, above a live "X of N" address counter — you can see which wallet is being processed. • Restore and Full Sync can scan additional BSV account numbers you declare on the Restore screen or in a wallet's details, for wallets set up under a non-zero BIP44 account. • A burst of network blips during a restore scan no longer makes addresses look empty and cut the scan short. Payments • A stalled broadcast now stops after 20 seconds and tells you the payment may still have gone through, instead of spinning. • The Pay button no longer looks ready when the amount or address is empty. • A just-sent payment holds a steady Pending label, and a dropped phantom transaction stays gone when you reopen the wallet. • Your balance no longer hides funds when one data source briefly can't see a transaction. Charts & accessibility • Bar, line and pie chart popups redesigned — clearer axes, aligned labels, distinct pie-wedge colours. • Each chart now speaks a summary to VoiceOver. Interface • Consistent tinted-glass buttons throughout, a clearer back button aligned with the page title, and a native Mac toolbar and fanned wallet-card stack. For script authors • OP_PUSHDATA1/2/4 records the exact push width you name, hex>data decodes the bytes you actually pushed, and the RIPEMD opcode is now spelled op_ripemd160 (older op_ripmd160 scripts still load). Three HELP stack diagrams corrected. If you've been running a prior version: open each wallet once so the new scan can pick up any addresses the older filter may have missed.

This update focuses on wallet reliability, with terminal and interface refinements throughout. Wallet • Unconfirmed balance no longer gets stuck. A transaction that never reached the network is now detected and its outputs cleared — and they stay cleared after the app is reopened. • Fixed a "malformed input" error that could block sending. • Pending transactions now sort to the top of the UTXO list. • More reliable balance syncing — pending transactions are re-checked first on every refresh, partial syncs save progress instead of discarding it, and the balance recomputes after every change. • Cross-device sync — a wallet's public data (addresses, UTXOs) syncs via iCloud, and wallets seen on another device are offered for import. • Stuck outgoing transactions are detected, and can be retried or dropped from the UTXO detail screen. • Clearer sync status — an honest "Catching up" indicator. Notifications • Deposit alerts now fire only for genuinely recent payments (the last 24 hours) — no more notifications for a wallet's existing history on first sync or import. Terminal • New word: chars>data. hex2data / data2hex gain arrow-form names hex>data / data>hex (the old names still work). • Fixed confusing errors after an unterminated string or comment carried into the next line. • Hold delete to repeat; the suggestion bar no longer overflows or covers the keypad toggle. Also • Redesigned amount-unit control on the payment screen; a broadcast button when decoding a transaction. • Native macOS app icon and a range of Mac layout fixes.

Wallet & Cold Mode • Cold Mode broadcasts now route to the wallet that signed them, even after switching wallets in the picker. • Pending broadcasts moved to a per-wallet badge — the count you see is the queue for the wallet you're viewing. • First deposit notifications now fire on fresh wallets (previously silently absorbed on install). • BIP39 seed handling unified between BIP44 and Type42 derivation paths. • PAY button reflects valid state from the first frame when the recipient was pre-filled — by the send Forth word, a URL scheme, or paste-from-clipboard. Previously showed "invalid address" until you tapped the field. • New terminal words: send (single recipient) and send-many (multi-recipient with per-amount control) — open the review sheet, biometric-gated, broadcast on confirm. • Every multi-recipient send shows the full per-payee breakdown before Face ID — approval is over the bytes, not a label. • Two-iPhone Cold Mode via AirDrop bundles — export receive addresses, receive bundles, and verify SPV proofs across an air-gap without dedicated hardware. dApp & BRC-100 integration • Multi-output transactions honour each recipient's amount (no more equal-split rewrites). • Incoming transactions are owner-verified before registering UTXOs. • signAction approval sheets show the original transaction description instead of "wants to call signAction." • Faster "confirmed" badges — ARC now returns Merkle proofs inline so SPV verification runs at broadcast time. Design • Liquid Glass design system unified across every wallet surface — tinted action buttons, chrome glass close X, glass section headers. • Custom Bitcoin glyph replaces the system icon throughout. • Files screen: symmetric inline header (search · FILES · add). • Square add-wallet button distinguishes "create" from circular "modify" affordances. • Refreshed wallet detail, restore-wallet, decode-transaction, and seed-verification screens. Accessibility • VoiceOver reads each transaction row as a single sentence ("Sent 0.0001 BSV on 11 May, pending") instead of a glyph stream. • Live countdown on auth approval sheets. • Keypad keys hit Apple's 44pt touch-target minimum on every device. • Automation IDs on payment fields for snapshot/UI tests. Reliability & security • SPV trust store now has a single chain-validated write path; dApps reading headers see the bounded validated range. • Defensive decoders on persisted state — schema additions can't crash the wallet on update. • Cancellation-safe networking: rate limiter and mempool monitor no longer leak slots or crash on concurrent polls. • Defence-in-depth biometric on decrypt; HTTPS-only auth callbacks. • Approval cache binds to the exact recipient set + output digest — a recently-approved 770k send to A,B won't auto-authorise a 770k send to X,Y inside the 120-second window. • Fragmentation-aware UTXO selection — normal sends drain dust as a side effect, with a hard transaction-size ceiling enforced before biometric. • 1Sat Ordinal protection — UTXOs holding inscriptions are filtered from spending across every send path. Forth interpreter • ?DO/LOOP and DO/+LOOP propagate body errors instead of silently swallowing them. • 0 0 DO ... LOOP is now a clean zero-trip (matches gforth/SwiftForth behaviour). • New script bridge words: >script, data>script, text>script, file>script — push terminal data into the Bitcoin Script buffer for B://, 1Sat Ordinals, and MAP protocol posts.

Wallet & Cold Mode • Cold Mode broadcasts now route to the wallet that signed them, even after switching wallets in the picker. • Pending broadcasts moved to a per-wallet badge — the count you see is the queue for the wallet you're viewing. • First deposit notifications now fire on fresh wallets (previously silently absorbed on install). • BIP39 seed handling unified between BIP44 and Type42 derivation paths. • PAY button reflects valid state from the first frame when the recipient was pre-filled — by the send Forth word, a URL scheme, or paste-from-clipboard. Previously showed "invalid address" until you tapped the field. • New terminal words: send (single recipient) and send-many (multi-recipient with per-amount control) — open the review sheet, biometric-gated, broadcast on confirm. • Every multi-recipient send shows the full per-payee breakdown before Face ID — approval is over the bytes, not a label. • Two-iPhone Cold Mode via AirDrop bundles — export receive addresses, receive bundles, and verify SPV proofs across an air-gap without dedicated hardware. dApp & BRC-100 integration • Multi-output transactions honour each recipient's amount (no more equal-split rewrites). • Incoming transactions are owner-verified before registering UTXOs. • signAction approval sheets show the original transaction description instead of "wants to call signAction." • Faster "confirmed" badges — ARC now returns Merkle proofs inline so SPV verification runs at broadcast time. Design • Liquid Glass design system unified across every wallet surface — tinted action buttons, chrome glass close X, glass section headers. • Custom Bitcoin glyph replaces the system icon throughout. • Files screen: symmetric inline header (search · FILES · add). • Square add-wallet button distinguishes "create" from circular "modify" affordances. • Refreshed wallet detail, restore-wallet, decode-transaction, and seed-verification screens. Accessibility • VoiceOver reads each transaction row as a single sentence ("Sent 0.0001 BSV on 11 May, pending") instead of a glyph stream. • Live countdown on auth approval sheets. • Keypad keys hit Apple's 44pt touch-target minimum on every device. • Automation IDs on payment fields for snapshot/UI tests. Reliability & security • SPV trust store now has a single chain-validated write path; dApps reading headers see the bounded validated range. • Defensive decoders on persisted state — schema additions can't crash the wallet on update. • Cancellation-safe networking: rate limiter and mempool monitor no longer leak slots or crash on concurrent polls. • Defence-in-depth biometric on decrypt; HTTPS-only auth callbacks. • Approval cache binds to the exact recipient set + output digest — a recently-approved 770k send to A,B won't auto-authorise a 770k send to X,Y inside the 120-second window. • Fragmentation-aware UTXO selection — normal sends drain dust as a side effect, with a hard transaction-size ceiling enforced before biometric. • 1Sat Ordinal protection — UTXOs holding inscriptions are filtered from spending across every send path. Forth interpreter • ?DO/LOOP and DO/+LOOP propagate body errors instead of silently swallowing them. • 0 0 DO ... LOOP is now a clean zero-trip (matches gforth/SwiftForth behaviour). • New script bridge words: >script, data>script, text>script, file>script — push terminal data into the Bitcoin Script buffer for B://, 1Sat Ordinals, and MAP protocol posts.

Forth-2012 compliance: • PAGE now clears the terminal (6.2.2030) • MS pauses inside loops for millisecond delays • ." and S" preserve verbatim spacing for ASCII art • EKEY?, WORDS, and stack-diagram fixes across the vocabulary Wallet: • Faster address discovery on Sync (history-first scan, parallel UTXO fetch) • Pays the miner-quoted fee exactly — no over-paying • Seed and private keys hidden from the iOS app switcher • SPV sync and mempool monitor pause in the background to save battery • Concurrent-safe UTXO merging; filename-safe wallet titles BRC-100 protocol: • signAction completes the delayed-broadcast flow • Replay protection on QR authentication challenges • Hardened createAction and certificate encryption paths Reliability: • Idle watchdog and exponential backoff on JungleBus connections • Stray WhatsOnChain calls now route through the shared rate limiter • HeaderSync respects wifi-only preference at monitor install

• Bitcoin wallet is now included with the app — no in-app purchase, no unlock screen. • Customise the FORTH terminal's "ok." response from Settings → Customise Appearance. Make it "yes sir!", an arrow, or anything you like. • Smaller download and faster launch — removed an unused internal dependency. • Stability and performance improvements across the wallet, SPV verification, and the FORTH interpreter.

- Full Forth-2012 CORE compliance (133/133 words) - Smart suggestions and built-in number pad - BSV wallet: send, receive, and manage Bitcoin SV - Transaction builder from the terminal - Customisable themes

Update 4.12 print words ." " work updated to work with forth print (no space required after or before the " key word fixed general bug fixes