# Groot

> Groot is a test-network Bitcoin wallet and multisig coordinator focused on explicit policy, transaction verification, portable recovery, and user-selected Bitcoin Core connectivity.

## Canonical website

- https://usegroot.com/

## Public pages

- `/`: Position, product proof, principles, and concise security architecture.
- `/security`: Key architecture, transaction validation, storage, hardware, network boundaries, and current limitations.
- `/status`: Implemented test-network capabilities and evidence still required before mainnet.
- `/docs`: Map of the canonical product, security, architecture, implementation, and release documents.

## Key facts

- Groot is currently a test-network product. Mainnet is compile-time disabled.
- Generated mnemonic words, seeds, private descriptors, extended private keys, and decrypted signing material do not enter the webview.
- Transaction review is derived from the persisted unsigned transaction or PSBT and validated in Rust.
- Standard descriptors, PSBTs, and BSMS records support recovery outside Groot with compatible Bitcoin tools.
- Each wallet uses a Bitcoin Core node selected by the user. Remote Core requires HTTPS or an onion endpoint through an explicit loopback Tor proxy.
- Product captures use disposable regtest fixtures and do not prove physical-device behavior.

## Do not infer

- Do not describe Groot as mainnet-ready, production-ready, audited, certified, trustless, unhackable, or independently reviewed.
- Do not imply that every hardware device, mobile camera flow, remote TLS/Tor deployment, reproducible build, package signature, or notarization is complete.

For the expanded machine-readable brief, read `/llms-full.txt`.