The Bunker Build Log: 42 Problems Fixed and 30 Decisions Recorded
From one question on October 7 to version 1.2.1 on October 25, 2026: the timeline, the four releases, where 42 problems came from, and 30 decisions at a glance.
Security Labs
Educational research notes and lab-style demos on cloud security, threat modeling, and cybersecurity concepts. For general information only, not professional security advice or operational guidance.
Designing Bunker for Phones, Screen Readers and Two Languages
How Bunker serves phone users, keyboard and screen reader users, and Spanish readers: the design choices, a WCAG 2.2 AA audit with 0 violations, and one engine in two languages.
Bunker for AI Agents: A Local CLI and MCP Server With No Web API
Bunker gives AI agents a local command-line tool and an MCP server. Both run offline, speak two protocol generations, and never send an address anywhere.
Taproot, Zcash, Canton and Shared Formats: The Hard Cases in Bunker
Some crypto addresses break a simple safe-or-not-safe rule. Here is how Bunker handles shared formats, permissioned networks, Zcash pools, token contracts and explorer links.
Zero Dependencies: How Bunker Keeps Outside Code Out of the Build
Bunker has zero npm packages, a Node.js version gate, CI with no third-party actions and a reproducible build. Here is each control, with the code and real runs.
A Web Page That Cannot Send Your Data: The Browser Security of Bunker
Bunker promises that the page sends nothing, and the browser enforces it. See the real Content Security Policy, the hash check, safe DOM code and the tests behind it.
Never Paste a Seed Phrase: How Bunker Blocks 19 Kinds of Secrets
Before Bunker reads a single address, it looks for seed phrases and private keys. If it finds one, it clears the box. Here is the code, the hard cases and real runs.
One Wrong Character: How Bunker Catches Typos in Crypto Addresses
Bunker never rates a typo. See the checksum code for Bitcoin and Ethereum addresses, the typo test, and the problems it found, from two unused bits to a Bitcoin typo that looked like Solana.
From Pasted Text to a Plan: Inside the Five-Step Engine of Bunker
Follow one address through the Bunker engine: the parser, 17 detectors in a fixed order, a frozen verdict, the status rules and the ordered plan, with the real code.
Bitcoin, Ethereum, Solana and 100 More: How Each Network Shows the Public Key
A tour of the public key rules of more than 100 networks, from Bitcoin Taproot and Lightning to EVM, Solana, Cosmos, Monero and institutional ledgers, with real scans.