Weekly Check-in: Week of 2026-08-10

[payjoin-bot]

Weekly standup — comment /check-in by end-of-day Monday (your timezone) for an auto-gathered activity thread.

Copy the template below and fill it in:

### Shipped
<!-- Add anything the bot missed: design work, specs, conversations, off-GitHub contributions. Correct any mistakes. Skip if the bot covered everything. -->

### Focus
What are you working on this week?

### Bottleneck
What is the single biggest bottleneck in progress toward your greater goal?
Name your goal. Name the constraint. Name who or what can unblock it.

Participated: @spacebear21, @caarloshenriq, @DanGould, @benalleng

[ValeraFinebits]

Shipped

PRs opened:

• build: Update BTCPay submodule and package versions ValeraFinebits/btcpayserver-payjoin-plugin#115
• Add SECURITY.md ValeraFinebits/btcpayserver-payjoin-plugin#120

PRs reviewed:

• Broadcast the sender's original transaction when a session ends unpaid ValeraFinebits/btcpayserver-payjoin-plugin#79
• build(deps): bump btcpayserver from 2c9bf97 to ede7cc7 ValeraFinebits/btcpayserver-payjoin-plugin#116
• build(deps): bump rust-payjoin from dee54d6 to cefe1ca ValeraFinebits/btcpayserver-payjoin-plugin#117
• Bump NBXplorer.Client from 5.0.7 to 5.0.8 ValeraFinebits/btcpayserver-payjoin-plugin#118

Issues opened:

• Enforce invoice-scoped accounting-bridge mutations ValeraFinebits/btcpayserver-payjoin-plugin#114

Focus

• Continue working on the plugin.

[spacebear21]

/check-in

[payjoin-bot]

Shipped

PRs merged:

• Bump dart payjoin 0.2.1 for pub.dev
• Prefer MSRV-compatible deps in the ubrn build
• Bump payjoin to version 1.0.0-rc.8
• Sighash all followups
• Reject non-SIGHASH_ALL sender inputs in proposal
• Bump payjoin-cli version to 1.0.0-rc.2
• Bump dart payjoin 0.2.0 for pub.dev

Issues opened:

• Release payjoin-1.0.0-rc.8
• Release payjoin-cli-1.0.0-rc.2

[caarloshenriq]

/check-in

[payjoin-bot]

Shipped

PRs merged:

• update runners to Ubuntu 26.04

PRs reviewed:

• fix(payjoin-ffi): validate brew and llvm on macOS
• Add tests for signing in psbt_input_is_signed
• Reject non-SIGHASH_ALL sender inputs in proposal

[caarloshenriq]

Focus

• Review PRs
• Find an issue to work

Bottleneck

None

Note: last week I finished the test harness and validated it on real embedded hardware.

[DanGould]

/check-in

[payjoin-bot]

Shipped

PRs merged:

• Publish csharp from tag with Nuget OIDC

PRs reviewed:

• Reject non-SIGHASH_ALL sender inputs in proposal
• Make the C# package README user-facing
• Bump dart payjoin 0.2.0 for pub.dev

Auto-detected signals:

• PR awaiting review: Trigger JavaScript CI on dependency manifest changes

[benalleng]

/check-in

[payjoin-bot]

Shipped

PRs merged:

• Bump payjoin to version 1.0.0
• Add tests for signing in psbt_input_is_signed

PRs reviewed:

• fix(payjoin-ffi): validate brew and llvm on macOS
• Bump dart payjoin 0.2.1 for pub.dev
• Bump payjoin-cli version to 1.0.0-rc.2
• Bump payjoin to version 1.0.0-rc.8
• Prefer MSRV-compatible deps in the ubrn build
• update runners to Ubuntu 26.04
• Sighash all followups
• Reject non-SIGHASH_ALL sender inputs in proposal

Auto-detected signals:

• PR awaiting review: Disable docs build verification in CI for non-lib crates
• PR awaiting review: Remove nix cache action in CI

[benalleng]

Focus

• Perhaps before or after tomorrows core dev meeting we can diagnose and fix the payjoin-bot action permissions

Bottleneck

• Just waiting on 1.0

[chavic]

/check-in

[payjoin-bot]

Shipped

PRs merged:

• Make the C# package README user-facing

PRs reviewed:

• Bump payjoin to version 1.0.0
• Publish csharp from tag with Nuget OIDC

[chavic]

Shipped

Merged BTCPay Payjoin plugin (own):

• Reset the accounting record when a receiver session is recreated. [#76](Reset the accounting record when a receiver session is recreated ValeraFinebits/btcpayserver-payjoin-plugin#76)
• Derive the receiver's maximum fee rate from estimation plus a per-store override, closing issue [#60](Derive the receiver fee cap from estimation and make it configurable ValeraFinebits/btcpayserver-payjoin-plugin#60). [#80](Derive the receiver's maximum fee rate from estimation ValeraFinebits/btcpayserver-payjoin-plugin#80)

Merged rust-payjoin (own):

• Make the C# package README user-facing. [#1764](Make the C# package README user-facing #1764)

Closed BTCPay Payjoin plugin (own):

• By the cleanup deadline the invoice is usually expired, so broadcasting charges the customer for an invoice that can no longer settle normally; in BIP 77 the sender owns the fallback broadcast. [#79](Broadcast the sender's original transaction when a session ends unpaid ValeraFinebits/btcpayserver-payjoin-plugin#79)

Reviews (rust-payjoin, merged):

• Bump payjoin to version 1.0.0. [#1801](Bump payjoin to version 1.0.0 #1801)
• Publish csharp from tag with NuGet OIDC, which automates the releases after Payjoin 0.24.0-preview.1. [#1767](Publish csharp from tag with Nuget OIDC #1767)

Reviews (BTCPay Payjoin plugin, merged):

• Report why Payjoin v2 is unavailable instead of a boolean. [#110](feat: Report why Payjoin v2 is unavailable instead of a boolean ValeraFinebits/btcpayserver-payjoin-plugin#110)
• Add SECURITY.md. [#120](Add SECURITY.md ValeraFinebits/btcpayserver-payjoin-plugin#120)
• Fix btcpayserver submodule URL. [#124](Fix btcpayserver submodule URL ValeraFinebits/btcpayserver-payjoin-plugin#124)

Focus

• Drive the wallet-side sending draft [#113](Add wallet-side async payjoin sending ValeraFinebits/btcpayserver-payjoin-plugin#113) toward review-ready.
• Share one conceptual description of payjoin across the package READMEs, filed off the [#1764](Make the C# package README user-facing #1764) review. [#1772](Share one conceptual description of payjoin across the package READMEs #1772)

Blockers

• OHTTP key refresh [#77](Refresh cached OHTTP keys sooner and on session build failure ValeraFinebits/btcpayserver-payjoin-plugin#77) is the last audit PR still waiting on review.