docs: link CHANGELOG.md and require updating it on new version tags

CLAUDE.md: add a working rule to update CHANGELOG.md whenever <Version> is
bumped for a new release tag. README.md: add a Changelog section pointing
to it, and fix a stale claim that release signing "is not set up yet" for
Android — it now is, via docker/build.sh android and the persistent
keystore (docker/keystore/).

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,80 @@
+name: Bug Report
+description: Report a problem with Palladium Wallet
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to report a bug.
+        Please fill in every section — incomplete reports are hard to reproduce and may be closed.
+
+  - type: input
+    id: version
+    attributes:
+      label: Wallet version
+      description: Shown in Help → Info (e.g. `1.0.0`).
+      placeholder: "1.0.0"
+    validations:
+      required: true
+
+  - type: dropdown
+    id: platform
+    attributes:
+      label: Platform
+      options:
+        - Windows
+        - Linux
+        - Android
+    validations:
+      required: true
+
+  - type: textarea
+    id: description
+    attributes:
+      label: What happened?
+      description: Describe the bug clearly and concisely. What did you see? What did you expect?
+      placeholder: "When I click … the wallet shows … instead of …"
+    validations:
+      required: true
+
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+      description: Numbered steps that reliably trigger the bug.
+      placeholder: |
+        1. Open the wallet
+        2. Go to …
+        3. Click …
+        4. Observe …
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+      description: What should have happened instead?
+    validations:
+      required: true
+
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs / error messages
+      description: |
+        Paste any error dialogs, crash messages, or stack traces.
+        Leave blank if none.
+      render: text
+    validations:
+      required: false
+
+  - type: checkboxes
+    id: checklist
+    attributes:
+      label: Before submitting
+      options:
+        - label: I searched existing issues and this is not a duplicate
+          required: true
+        - label: I reproduced this on the latest available version
+          required: false

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Security vulnerability
+    url: https://github.com/davide3011/PalladiumWallet/security/policy
+    about: Please report security vulnerabilities privately, not as a public issue. See SECURITY.md.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,55 @@
+name: Feature Request
+description: Suggest an idea or improvement for Palladium Wallet
+labels: ["enhancement"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to suggest an improvement.
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What problem are you trying to solve? Is it related to something you find missing or frustrating?
+      placeholder: "I'm always frustrated when …"
+    validations:
+      required: true
+
+  - type: textarea
+    id: solution
+    attributes:
+      label: Proposed solution
+      description: Describe what you'd like to happen.
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Any alternative solutions or workarounds you've considered.
+    validations:
+      required: false
+
+  - type: dropdown
+    id: platform
+    attributes:
+      label: Affected platform(s)
+      multiple: true
+      options:
+        - Windows
+        - Linux
+        - Android
+        - CLI
+        - All
+    validations:
+      required: false
+
+  - type: checkboxes
+    id: checklist
+    attributes:
+      label: Before submitting
+      options:
+        - label: I searched existing issues and this is not a duplicate
+          required: true

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,26 @@
+## Summary
+
+<!-- What does this PR change and why? -->
+
+## Related issue
+
+<!-- Closes #... (if applicable) -->
+
+## Type of change
+
+- [ ] Bug fix
+- [ ] New feature
+- [ ] Refactor / cleanup
+- [ ] Documentation
+- [ ] Build / CI
+
+## Testing
+
+<!-- How was this verified? e.g. `dotnet test`, manual run on Windows/Linux/Android, golden-vector comparison -->
+
+## Checklist
+
+- [ ] `dotnet test` passes
+- [ ] No seed/private key material logged or persisted in plaintext (if touching Crypto/Wallet/Storage)
+- [ ] Server responses still validated with Merkle + checkpoints (if touching Spv/Net)
+- [ ] Code/comments/commit messages are in English

.gitignore

@@ -74,6 +74,8 @@ temp/
 *.key
 *.pfx
 *.p12
+*.keystore
+*.jks
 secrets/
 
 # Wallet data and local runtime state

AGENTS.md

@@ -0,0 +1,84 @@
+# AGENTS.md
+
+This file provides guidance to coding agents when working with code in this repository.
+
+## Role
+
+Operate as an **expert in cryptocurrencies and cryptography**: reason with the domain's rigor about UTXO consensus, HD key derivation (BIP32/39/SLIP-132), signature schemes and scripts (P2PKH/P2SH/P2WPKH, PSBT), address encoding (base58/bech32), Merkle/SPV proofs, and at-rest encryption. When a choice touches cryptographic correctness or fund safety, judge it through that lens and flag known risks and pitfalls (nonce reuse, missing validation, exposed keys/seed, wrong fee/coin-selection, unverified server responses). Explain trade-offs with technical precision; never take for granted what hasn't been verified.
+
+## Language policy
+
+- **Conversation with the user**: Italian.
+- **All code, comments, commit messages, and documentation files**: English only.
+
+## How to assist
+
+On **every requested change**, before implementing, judge whether it makes sense and say so plainly: if a request is useful and consistent with the project, proceed; if it is useless, redundant, already covered elsewhere, or risks degrading the code, **say so** with a short rationale and propose the better alternative (or doing nothing). No automatic agreement -- an honest opinion is worth more than blind execution.
+
+## What it is
+
+SPV wallet (Sparrow-style) for the **Palladium (PLM)** cryptocurrency, a Bitcoin-derived UTXO chain. Targets desktop (Windows/Linux) and Android, from the same source. Lightning is excluded from the first release.
+
+## Stack and structure
+
+.NET 10 + Avalonia UI 12 + NBitcoin.
+
+```
+src/Core/         Chain/ Crypto/ Wallet/ Spv/ Net/ Storage/  (no UI dependency)
+src/App/          shared Avalonia UI library (App, Views, ViewModels, Loc, Assets)
+src/App.Desktop/  desktop head (WinExe): Program.cs, app.manifest, .ico -> runnable
+src/App.Android/  Android head (net10.0-android): MainApplication/MainActivity -> apk
+src/Cli/          CLI on the same Core            tests/   xUnit
+```
+
+The Avalonia UI lives **once** in `src/App` (a library); the two heads only carry the
+per-platform entry point and packages. `MainView` (UserControl) is the shared root, hosted
+by `MainWindow` on desktop and as the single-view root on Android.
+
+**Non-negotiable dependency rule:** `App`/`Cli` depend only on `Core`; the UI goes through the wallet domain, never directly through network or cryptography. `Core` knows nothing about the UI.
+
+## Commands
+
+.NET 10 SDK lives in `~/.dotnet10`: in non-interactive shells, before any `dotnet` command run
+`export PATH="$HOME/.dotnet10:$PATH" DOTNET_ROOT="$HOME/.dotnet10"`.
+
+- Build: `dotnet build`
+- Tests (headless, the primary verification layer): `dotnet test` -- single: `dotnet test --filter "FullyQualifiedName~TestName"`; property-based tests (CsCheck, `PropertyTests.cs`) run in the same command and take ~30 s
+- GUI hot reload: `dotnet watch --project src/App.Desktop` (on WSL2/WSLg the window shows on the Windows desktop, no graphics dependencies to install)
+- CLI: `dotnet run --project src/Cli -- <command>` (no args -> usage)
+- Windows publish: `dotnet publish src/App.Desktop -r win-x64 -p:PublishSingleFile=true --self-contained`
+- Linux publish: `dotnet publish src/App.Desktop -r linux-x64 --self-contained` (then AppImage via PupNet Deploy)
+
+**Android (apk).** Needs the `android` workload (`dotnet workload install android`), a JDK
+(`JAVA_HOME`), and the Android SDK. To provision the SDK once:
+`dotnet build src/App.Android -t:InstallAndroidDependencies -p:AndroidSdkDirectory=$HOME/android-sdk -p:AcceptAndroidSDKLicenses=true`.
+Then build a debug apk (output in `src/App.Android/bin/Debug/net10.0-android/*-Signed.apk`):
+`JAVA_HOME=<jdk> dotnet build src/App.Android -c Debug -t:SignAndroidPackage -p:AndroidSdkDirectory=$HOME/android-sdk`
+(set `ANDROID_HOME` to skip the `-p:AndroidSdkDirectory` flag). The head is an application,
+not a library, because it sets `<OutputType>Exe</OutputType>`; min SDK 23 (AndroidX requirement).
+Note: a plain `dotnet build` at the solution level needs the Android SDK path for the Android head.
+
+**CLI** (`src/Cli`): `create`/`restore`/`restore-xpub`/`info`; `sync`/`send`/`servers`/`reset-certs` (`--server host:port [--ssl]`); `newseed`/`addresses`. Default wallet file `~/.palladium-wallet/<network>/wallets/default.wallet.json` (`--file` to change it).
+
+## Architecture (points that require reading multiple files)
+
+- **Layers:** GUI -> wallet domain -> SPV/Sync -> Network -> Cryptography -> Persistence; each layer depends only downward.
+- **Network profile:** all chain constants (address prefixes, BIP32 headers, bech32 HRP, genesis, ports, coin_type 746) **centralized in `Core/Chain`** (`ChainProfiles`/`PalladiumNetworks`), selectable per network (mainnet/testnet/regtest). No scattered magic numbers.
+- **LWMA / skip PoW:** LWMA difficulty, 2-minute blocks; an SPV client cannot recompute it -> `SkipPowValidation = true`, trust anchored to **hardcoded checkpoints**. Custom layer: NBitcoin assumes Bitcoin's retargeting.
+- **NBitcoin vs custom:** NBitcoin covers the custom network, BIP32/39, addresses, transactions, PSBT, signing, encoding, hashing -- **do not reimplement these**. Hand-written custom code: JSON-RPC client for the indexing server (ElectrumX-like); SPV sync with Merkle verification; header/checkpoint validation; coin selection and fee policy; versioned encrypted JSON wallet file.
+- **PSBT-centric:** every signing flow goes through PSBT (offline/air-gapped/multisig/hardware).
+- **Ports:** 50001/50002 = indexing server (what the SPV wallet talks to), **not** the node's P2P port (2333).
+
+## GUI conventions (`src/App`)
+
+- **Shared `MainView` + heads:** the whole UI is a single `MainView` (UserControl), so it works both as a desktop window's content and as Android's single-view root. Top-level APIs (file/folder picker, clipboard) are reached via `TopLevel.GetTopLevel(this)` since a UserControl doesn't expose them. `MainWindowViewModel.IsDesktop` (from `OperatingSystem.IsAndroid()`) hides filesystem-only features (open-from-file; the data-location wizard step auto-skips on Android because the head sets `AppPaths.OverrideDataRoot`).
+- **Single ViewModel** `MainWindowViewModel` (CommunityToolkit.Mvvm: `[ObservableProperty]`, `[RelayCommand]`); `Core` is driven directly from here.
+- **In-app overlays, not OS windows:** details (address, transaction), settings, and help are full-screen `Border`s gated by an `IsXxxOpen` flag, not separate `Window`s -- instant open/close, mobile-friendly, and popups/top-levels are slow on WSLg. Pattern: bool property + Open/Close commands + backdrop handler and Esc key in `MainView`'s code-behind; overlay close buttons bind via `$parent[UserControl]` (not `$parent[Window]`, absent on mobile). Heavy network work runs off the UI thread (`Task.Run`) so the overlay never freezes.
+- **Localization:** `Localization/Loc.cs`, key->6 languages dictionary (it/en/es/fr/pt/de); in XAML `{Binding Loc[key]}`, in C# `Loc.Tr("key")`. On language change the `Loc` instance is replaced.
+- **App version:** single source = `<Version>` in `src/App/PalladiumWallet.App.csproj`; read at runtime (`MainWindowViewModel.AppVersion`) and shown in the title.
+- **Storage paths:** `Core/Storage/AppPaths` resolves data locations; `AppPaths.OverrideDataRoot` (top priority) is the per-platform seam -- the Android head sets it to the app sandbox (`Context.FilesDir`), desktop leaves it null.
+
+## Working rules
+
+- **Cross-implementation tests:** compare addresses, txids, and PSBTs against a reference wallet (golden vectors). A different address or txid is a blocking bug.
+- **Security:** seed and private keys never in plaintext on disk/logs/network; every server response validated with Merkle + checkpoints; watch-only truly read-only.

CHANGELOG.md

@@ -0,0 +1,156 @@
+# Changelog
+
+Technical changelog for PalladiumWallet. Format loosely follows
+[Keep a Changelog](https://keepachangelog.com/en/1.0.0/); entries are grouped
+by subsystem rather than strictly by date, since `0.9.0` is the first
+release and covers the full history from the initial commit.
+
+## [0.9.0] — 2026-07-02
+
+First release. SPV wallet (Sparrow-style) for the Palladium (PLM) network —
+Bitcoin-derived UTXO chain — targeting desktop (Windows/Linux) and Android
+from a single Avalonia UI codebase on .NET 10 + NBitcoin.
+
+### Core — Chain
+
+- Network profiles and consensus constants centralized in `Core/Chain`
+  (`ChainProfiles`/`PalladiumNetworks`): address prefixes, BIP32 headers,
+  bech32 HRP, genesis, ports, `coin_type` 746 — selectable per network
+  (mainnet/testnet/regtest), no scattered magic numbers.
+- LWMA difficulty / 2-minute blocks: SPV cannot recompute LWMA retargeting,
+  so PoW validation is skipped and trust is anchored to hardcoded
+  checkpoints instead.
+
+### Core — Crypto
+
+- HD key derivation: BIP32/39/84, HD accounts, SLIP-132 extended key
+  serialization.
+- Address types: P2PKH, P2SH-P2WPKH, and P2TR (Taproot/BIP86).
+- `IWalletAccount` abstraction with WIF/xpub/xprv keystore import (including
+  watch-only accounts from public material only).
+
+### Core — Net
+
+- Custom `ElectrumClient`: JSON-RPC 2.0 client for the ElectrumX-like
+  indexing server, with TLS support and TOFU certificate pinning.
+- `ServerRegistry`: bootstrap server list, peer discovery, persisted last-used
+  server, fallback resolution for `--server`.
+- Batched writes, zero-allocation reads, bounded in-flight requests for
+  network throughput.
+- Fix: allow changing the indexing server at any time, including during an
+  active sync.
+
+### Core — Spv
+
+- Header sync with Merkle proof verification and scripthash subscriptions
+  against hardcoded checkpoints (no full PoW recomputation, per the chain
+  profile above).
+- Per-address balance and transaction-count aggregation in sync results.
+- Electrum-style continuous updates: incremental, parallelized sync across
+  address chains, with a persistent header cache.
+- Fix: resilient sync — history discovery via `GetHistory`, transaction
+  caching, automatic reconnect fallback.
+
+### Core — Storage
+
+- Versioned, encrypted JSON wallet file (`WalletDocument`) with dedicated
+  persistence and loader layer.
+- `WalletLock`: prevents concurrent access to the same wallet file; acquired
+  before load and before close (fixed a race where it wasn't).
+- XDG-compliant data paths (`AppPaths`) with per-platform override seam used
+  by the Android head; English as default UI language.
+- Contacts list (name + address) persisted in `WalletDocument`.
+- Documented caveat: `WalletStore.Save` writes plaintext JSON when the
+  wallet is unencrypted — seed/keys are only ever encrypted-at-rest when the
+  user opts into a password.
+
+### Core — Wallet
+
+- Coin selection, PSBT-centric transaction factory, and wallet loader.
+- Confirmation-threshold enforcement before spending UTXOs; immature
+  (coinbase) balance surfaced separately from confirmed balance; pending
+  mempool balance shown, with unconfirmed UTXOs excluded from spending by
+  default.
+- Fix: reject amounts with sub-satoshi precision.
+
+### App — Avalonia UI (shared, `src/App`)
+
+- Single shared `MainView` (UserControl) hosted by `MainWindow` on desktop
+  and as the single-view root on Android; single `MainWindowViewModel`
+  (CommunityToolkit.Mvvm), later split into partial files by area
+  (Wizard/Settings/Sync/Send/Contacts/Receive/...).
+- Step-by-step setup wizard (replacing a single-form panel), including a
+  first-run data-location step, multi-wallet chooser, confirm-password and
+  encrypt toggle, and dedicated flows for creating a wallet vs. importing
+  from xpub/xprv/WIF.
+- In-app overlay pattern for details/settings/help (`IsXxxOpen` flags, no OS
+  windows) replacing earlier nested submenus and a separate
+  `AddressInfoWindow`: server settings, app settings (language/unit),
+  wallet info (xpub, password-gated seed reveal), address detail
+  (password-gated private key reveal), transaction detail with full
+  on-chain data (inputs/outputs, no truncation), and a Help overlay
+  (Info/Donate tabs).
+- Connection-status indicator in the bottom bar; connect-before-wallet-open
+  flow; persisted last-used server; server discovery split into its own
+  always-usable button; mainnet hardcoded (network selector removed for the
+  first release).
+- Localization: `Loc` key → 6-language dictionary (it/en/es/fr/pt/de) with
+  live language switching.
+- Receive: QR code generation and copy-to-clipboard for the receive address.
+- Android: QR code scanner for the Send address field.
+- Centralized design system (color tokens, gradient hero, SVG tab icons);
+  responsive layout for portrait mobile, unified tab bar (desktop +
+  mobile), two-column desktop layout for Send/Receive; various mobile-only
+  fixes (tab bar sizing/indicator overlap, text overflow, full-screen server
+  overlay on mobile).
+- App version shown in window title and Help overlay, read from the single
+  `<Version>` source in the App csproj.
+- In-app update check: compares the running version against the latest
+  GitHub release tag on startup and shows an overlay with the new tag when
+  one is available (best-effort — silent on network/parse failure).
+- In-app bug-report button (Help overlay) opening a pre-filled GitHub issue
+  template; issue/PR templates completed.
+
+### Android head (`src/App.Android`)
+
+- Architecture split: shared UI library (`src/App`) + `src/App.Desktop` +
+  `src/App.Android` heads from the same source (`refactor(arch)`), each
+  carrying only the per-platform entry point and packages.
+- App logo as launcher icon.
+- Persistent release-signing keystore workflow
+  (`docker/keystore/generate-keystore.sh`, git-ignored output): every
+  release APK is signed with the same key so installing a newer build
+  updates a previous install in place instead of requiring an uninstall.
+  `versionCode` derived from `<Version>` instead of a fixed constant.
+
+### CLI (`src/Cli`)
+
+- Commands: `create`/`restore`/`restore-xpub`/`info`,
+  `sync`/`send`/`servers`/`reset-certs`, `newseed`/`addresses`.
+- `servers` command, `info --addresses`, and registry-based fallback
+  resolution for `--server`.
+
+### Build & Distribution
+
+- Docker-based reproducible build system (`docker/build.sh` +
+  `docker/Dockerfile.*`): pinned toolchain (.NET 10 SDK, JDK, Android SDK),
+  builds Windows/Linux single-file executables and a signed Android APK
+  without any SDK installed on the host.
+- Android release signing wired into `build_android` (see Android head
+  above): requires the persistent keystore, prompts for its passwords at
+  build time, mounts it read-only into the build container.
+
+### Testing
+
+- Unit test coverage across all Core modules, later expanded to 209 tests.
+- Property-based tests via CsCheck (`PropertyTests.cs`), bringing total
+  coverage to 218 tests; dedicated `WalletLock` concurrency tests.
+
+### Documentation
+
+- `README.md` (project overview, quickstart, reproducible builds), `CLAUDE.md`
+  (codebase guidance for AI tooling, kept in sync with the multi-head
+  architecture and .NET 10 migration), `SECURITY.md` (threat model and SPV
+  trust assumptions), coding-agent guide.
+- Code comments translated to English project-wide, per the language policy
+  (Italian conversation, English code/docs).

CLAUDE.md

@@ -6,6 +6,11 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 
 Operate as an **expert in cryptocurrencies and cryptography**: reason with the domain's rigor about UTXO consensus, HD key derivation (BIP32/39/SLIP-132), signature schemes and scripts (P2PKH/P2SH/P2WPKH, PSBT), address encoding (base58/bech32), Merkle/SPV proofs, and at-rest encryption. When a choice touches cryptographic correctness or fund safety, judge it through that lens and flag known risks and pitfalls (nonce reuse, missing validation, exposed keys/seed, wrong fee/coin-selection, unverified server responses). Explain trade-offs with technical precision; never take for granted what hasn't been verified.
 
+## Language policy
+
+- **Conversation with the user**: Italian.
+- **All code, comments, commit messages, and documentation files**: English only.
+
 ## How to assist
 
 On **every requested change**, before implementing, judge whether it makes sense and say so plainly: if a request is useful and consistent with the project, proceed; if it is useless, redundant, already covered elsewhere, or risks degrading the code, **say so** with a short rationale and propose the better alternative (or doing nothing). No automatic agreement — an honest opinion is worth more than blind execution.
@@ -14,8 +19,6 @@ On **every requested change**, before implementing, judge whether it makes sense
 
 SPV wallet (Sparrow-style) for the **Palladium (PLM)** cryptocurrency, a Bitcoin-derived UTXO chain. Targets desktop (Windows/Linux) and Android, from the same source. Lightning is excluded from the first release.
 
-[blueprint.md](blueprint.md) is a **reference for understanding** (consensus parameters verified against the node, algorithms, network protocol): consult it when it helps to understand an area, but **it is no longer binding** — it need not be followed to the letter or read before every change. The source of truth is the current code; the `§` references below point to the blueprint only as further reading.
-
 ## Stack and structure
 
 .NET 10 + Avalonia UI 12 + NBitcoin.
@@ -26,6 +29,7 @@ src/App/          shared Avalonia UI library (App, Views, ViewModels, Loc, Asset
 src/App.Desktop/  desktop head (WinExe): Program.cs, app.manifest, .ico → runnable
 src/App.Android/  Android head (net10.0-android): MainApplication/MainActivity → apk
 src/Cli/          CLI on the same Core            tests/   xUnit
+docker/           reproducible release builds (build.sh + pinned Dockerfiles) → dist/
 ```
 
 The Avalonia UI lives **once** in `src/App` (a library); the two heads only carry the
@@ -43,8 +47,9 @@ by `MainWindow` on desktop and as the single-view root on Android.
 - Tests (headless, the primary verification layer): `dotnet test` — single: `dotnet test --filter "FullyQualifiedName~TestName"`; property-based tests (CsCheck, `PropertyTests.cs`) run in the same command and take ~30 s
 - GUI hot reload: `dotnet watch --project src/App.Desktop` (on WSL2/WSLg the window shows on the Windows desktop, no graphics dependencies to install)
 - CLI: `dotnet run --project src/Cli -- <command>` (no args → usage)
-- Windows publish: `dotnet publish src/App.Desktop -r win-x64 -p:PublishSingleFile=true --self-contained`
+- **Release binaries (all 3 targets): `./docker/build.sh [windows|linux|android|all]`** — reproducible builds in Docker (toolchain pinned in `docker/Dockerfile.*`, no SDK needed on host), artifacts in `dist/`, version taken from the App csproj. See `docker/README.md`. Gotchas already encoded there: single-file desktop publishes need `-p:IncludeNativeLibrariesForSelfExtract=true` (without it Avalonia's native libs — Skia/HarfBuzz/ANGLE — stay outside the exe, which then silently fails to start); the android workload dictates the SDK API level (error XA5207 → bump `ANDROID_SDK_PLATFORM` in `Dockerfile.android`). Android release builds need a persistent signing keystore, generated once with `docker/keystore/generate-keystore.sh` (never committed — see `docker/keystore/README.md`): without it every build gets a different random signature and users must uninstall the old app to receive an update instead of updating in place.
-- Linux publish: `dotnet publish src/App.Desktop -r linux-x64 --self-contained` (then AppImage via PupNet Deploy)
+- Manual Windows publish: `dotnet publish src/App.Desktop -r win-x64 -p:PublishSingleFile=true -p:IncludeNativeLibrariesForSelfExtract=true --self-contained`
+- Manual Linux publish: same with `-r linux-x64` (single-file binary; AppImage via PupNet Deploy is a future step, no pupnet.conf yet)
 
 **Android (apk).** Needs the `android` workload (`dotnet workload install android`), a JDK
 (`JAVA_HOME`), and the Android SDK. To provision the SDK once:
@@ -59,11 +64,11 @@ Note: a plain `dotnet build` at the solution level needs the Android SDK path fo
 
 ## Architecture (points that require reading multiple files)
 
-- **Layers (§2):** GUI → wallet domain → SPV/Sync → Network → Cryptography → Persistence; each layer depends only downward.
+- **Layers:** GUI → wallet domain → SPV/Sync → Network → Cryptography → Persistence; each layer depends only downward.
-- **Network profile (§3):** all chain constants (address prefixes, BIP32 headers, bech32 HRP, genesis, ports, coin_type 746) **centralized in `Core/Chain`** (`ChainProfiles`/`PalladiumNetworks`), selectable per network (mainnet/testnet/regtest). No scattered magic numbers.
+- **Network profile:** all chain constants (address prefixes, BIP32 headers, bech32 HRP, genesis, ports, coin_type 746) **centralized in `Core/Chain`** (`ChainProfiles`/`PalladiumNetworks`), selectable per network (mainnet/testnet/regtest). No scattered magic numbers.
-- **LWMA / skip PoW (§3, §7):** LWMA difficulty, 2-minute blocks; an SPV client cannot recompute it → `SkipPowValidation = true`, trust anchored to **hardcoded checkpoints** (§7.3). Custom layer: NBitcoin assumes Bitcoin's retargeting.
+- **LWMA / skip PoW:** LWMA difficulty, 2-minute blocks; an SPV client cannot recompute it → `SkipPowValidation = true`, trust anchored to **hardcoded checkpoints**. Custom layer: NBitcoin assumes Bitcoin's retargeting.
-- **NBitcoin vs custom (§19.2):** NBitcoin covers the custom network, BIP32/39, addresses, transactions, PSBT, signing, encoding, hashing — **do not reimplement these**. Hand-written custom code: JSON-RPC client for the indexing server (ElectrumX-like, §10); SPV sync with Merkle verification (§7.4); header/checkpoint validation; coin selection and fee policy; versioned encrypted JSON wallet file.
+- **NBitcoin vs custom:** NBitcoin covers the custom network, BIP32/39, addresses, transactions, PSBT, signing, encoding, hashing — **do not reimplement these**. Hand-written custom code: JSON-RPC client for the indexing server (ElectrumX-like); SPV sync with Merkle verification; header/checkpoint validation; coin selection and fee policy; versioned encrypted JSON wallet file.
-- **PSBT-centric (§6.5):** every signing flow goes through PSBT (offline/air-gapped/multisig/hardware).
+- **PSBT-centric:** every signing flow goes through PSBT (offline/air-gapped/multisig/hardware).
 - **Ports:** 50001/50002 = indexing server (what the SPV wallet talks to), **not** the node's P2P port (2333).
 
 ## GUI conventions (`src/App`)
@@ -75,14 +80,8 @@ Note: a plain `dotnet build` at the solution level needs the Android SDK path fo
 - **App version:** single source = `<Version>` in `src/App/PalladiumWallet.App.csproj`; read at runtime (`MainWindowViewModel.AppVersion`) and shown in the title.
 - **Storage paths:** `Core/Storage/AppPaths` resolves data locations; `AppPaths.OverrideDataRoot` (top priority) is the per-platform seam — the Android head sets it to the app sandbox (`Context.FilesDir`), desktop leaves it null.
 
-## Implementation state (§16 steps 1–7 + GUI)
-
-`Core/Chain` network profiles; `Core/Crypto` BIP39/32/SLIP-132/`HdAccount`; `Core/Storage` JSON wallet v1 + AES-GCM (PBKDF2-SHA512) + data paths; `Core/Net` `ElectrumClient` (newline JSON-RPC over TCP/TLS, TOFU in `server-certs.json`, concurrent requests) + `ElectrumApi`; `Core/Spv` scripthash, mandatory Merkle verification on every confirmed tx, sync with gap limit; `Core/Wallet` `TransactionFactory` (RBF on, send-all, watch-only PSBT), `TransactionInspector` (tx detail from the server), `WalletLoader`. GUI: setup wizard, dashboard (history/send/receive with QR+copy/addresses/contacts), transaction detail, settings/server/help, multi-wallet. Runs on desktop and Android from one shared UI (debug apk builds end-to-end).
-
-**TODO (§16 steps 8–9):** multisig, hardware wallet, coin control UI, fee ETA/mempool, RBF/CPFP UI, on-disk header chain, multi-server pool, proxy/Tor.
-
 ## Working rules
 
-- **Cross-implementation tests (§16):** compare addresses, txids, and PSBTs against a reference wallet (golden vectors). A different address or txid is a blocking bug.
+- **Cross-implementation tests:** compare addresses, txids, and PSBTs against a reference wallet (golden vectors). A different address or txid is a blocking bug.
-- **Security (§17):** seed and private keys never in plaintext on disk/logs/network; every server response validated with Merkle + checkpoints; watch-only truly read-only.
+- **Security:** seed and private keys never in plaintext on disk/logs/network; every server response validated with Merkle + checkpoints; watch-only truly read-only.
-- *(Optional)* blueprint features may be deferred but must still be considered in the design.
+- **Releases:** whenever a new version tag is created (bumping `<Version>` in `src/App/PalladiumWallet.App.csproj`), update `CHANGELOG.md` with an entry for that version before/with the tag — it's the technical record of what shipped, not optional bookkeeping.

README.md

@@ -55,8 +55,8 @@ For desktop and the CLI you only need the **.NET 10 SDK**. The core and crypto a
 
 1. Install the .NET 10 SDK through your distro's package manager, or without root via the official script:
    ```bash
-   curl -sSL https://dot.net/v1/dotnet-install.sh | bash -s -- --channel 10.0
+   curl -sSL https://dot.net/v1/dotnet-install.sh | bash -s -- --channel 10.0 --install-dir "$HOME/.dotnet10"
-   export PATH="$HOME/.dotnet:$PATH" DOTNET_ROOT="$HOME/.dotnet"
+   export PATH="$HOME/.dotnet10:$PATH" DOTNET_ROOT="$HOME/.dotnet10"
    ```
    (add the two `export` lines to your `~/.bashrc` to make them permanent)
 2. Clone and restore:
@@ -147,6 +147,26 @@ The suite includes **property-based tests** ([CsCheck](https://github.com/Anthon
 
 ## Building
 
+### Reproducible builds (Docker) — recommended for release binaries
+
+All three distribution targets (Windows exe, Linux binary, Android apk) can be
+built with one command inside Docker, with **no SDK installed on the host**:
+
+```bash
+./docker/build.sh          # interactive menu, or: ./docker/build.sh all
+```
+
+Why build this way: the whole toolchain is pinned in the Dockerfiles, so every
+build uses exactly the same SDK versions regardless of the host machine — no
+toolchain drift between releases — and the build environment itself is
+reviewable in the repo. For a wallet this is a trust property, not a
+convenience: anyone can rebuild the published binaries from source and check
+they were produced by the process the repository declares.
+
+See [docker/README.md](docker/README.md) for prerequisites, usage, how to run
+each produced artifact, and troubleshooting. The sections below cover manual
+builds with a locally installed SDK (the normal path during development).
+
 ### Development build
 
 ```bash
@@ -162,7 +182,10 @@ dotnet build src/App.Desktop              # desktop head only
 
 ```bash
 # Windows — single self-contained .exe (output: src/App.Desktop/bin/Release/net10.0/win-x64/publish/PalladiumWallet.exe)
-dotnet publish src/App.Desktop -c Release -r win-x64 -p:PublishSingleFile=true --self-contained
+# IncludeNativeLibrariesForSelfExtract embeds Avalonia's native libs (Skia, HarfBuzz, ANGLE):
+# without it they stay as separate DLLs and the .exe alone silently fails to start.
+dotnet publish src/App.Desktop -c Release -r win-x64 -p:PublishSingleFile=true \
+  -p:IncludeNativeLibrariesForSelfExtract=true --self-contained
 
 # Linux — self-contained; AppImage then produced with PupNet Deploy
 # (output: src/App.Desktop/bin/Release/net10.0/linux-x64/publish/PalladiumWallet)
@@ -195,8 +218,11 @@ The ABI restriction uses the `AbiArm64Only` flag, which is scoped to the Android
 command line, it leaks to the `net10.0` projects (`Core`/`App`) and breaks the build. (The legacy
 `AndroidSupportedAbis` property is deprecated and ignored.)
 
-(Set `ANDROID_HOME` to skip the `-p:AndroidSdkDirectory` flag.) Release signing with your own
+(Set `ANDROID_HOME` to skip the `-p:AndroidSdkDirectory` flag.) This debug apk is fine for personal
-keystore is not set up yet; the debug apk is fine for personal sideloading.
+sideloading, but debug builds are signed with a key regenerated per build machine/container, so a
+newer debug apk won't install over an older one without an uninstall first. For a stable signature
+across releases (needed to update an existing install in place), build via
+`./docker/build.sh android` instead — see [docker/keystore/README.md](docker/keystore/README.md).
 
 > **Verification status.** The default multi-ABI apk is verified running on the x86_64 emulator
 > (UI renders, connects to a server over TLS). The arm64-only apk builds correctly (41 MB,
@@ -309,6 +335,10 @@ The default wallet file is `~/.palladium-wallet/<network>/wallets/default.wallet
 
 ---
 
+## Changelog
+
+Technical, per-version changes are tracked in [CHANGELOG.md](CHANGELOG.md).
+
 ## License
 
 Released under the MIT License. See the [LICENSE](LICENSE) file.

docker/Dockerfile.android

@@ -0,0 +1,39 @@
+FROM mcr.microsoft.com/dotnet/sdk:10.0
+
+# ── Java (required by the Android SDK tools) ─────────────────────────────────
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        openjdk-17-jdk-headless \
+        wget \
+        unzip \
+    && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+ENV JAVA_HOME=/usr/lib/jvm/java-17-openjdk-amd64
+ENV ANDROID_HOME=/opt/android-sdk
+# .NET 10 android workload compiles against API level 36 (see error XA5207
+# if this drifts: the workload's Xamarin.Android.Tooling.targets dictates it).
+ENV ANDROID_SDK_PLATFORM=36
+ENV ANDROID_SDK_BUILD_TOOLS=36.0.0
+
+# ── Android command-line tools ────────────────────────────────────────────────
+# Pin the build number to a known-good release; update when Google breaks the URL.
+# Latest as of 2025: commandlinetools-linux-11076708_latest.zip (cmdline-tools 12.0)
+RUN mkdir -p "${ANDROID_HOME}/cmdline-tools" && \
+    wget -q "https://dl.google.com/android/repository/commandlinetools-linux-11076708_latest.zip" \
+         -O /tmp/cmdtools.zip && \
+    unzip -q /tmp/cmdtools.zip -d "${ANDROID_HOME}/cmdline-tools" && \
+    mv "${ANDROID_HOME}/cmdline-tools/cmdline-tools" "${ANDROID_HOME}/cmdline-tools/latest" && \
+    rm /tmp/cmdtools.zip
+
+ENV PATH="${JAVA_HOME}/bin:${ANDROID_HOME}/cmdline-tools/latest/bin:${ANDROID_HOME}/platform-tools:${PATH}"
+
+# ── Android SDK packages ──────────────────────────────────────────────────────
+RUN yes | sdkmanager --licenses > /dev/null && \
+    sdkmanager \
+        "platform-tools" \
+        "platforms;android-${ANDROID_SDK_PLATFORM}" \
+        "build-tools;${ANDROID_SDK_BUILD_TOOLS}"
+
+# ── dotnet android workload (~1 GB, baked into this layer) ───────────────────
+RUN dotnet workload install android
+
+WORKDIR /tmp/build

docker/Dockerfile.desktop

@@ -0,0 +1,11 @@
+FROM mcr.microsoft.com/dotnet/sdk:10.0
+
+# clang and zlib are required by the .NET SDK for native compilation steps
+# that occur even during managed cross-publish (win-x64 / linux-x64).
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        clang \
+        zlib1g-dev \
+        libkrb5-dev \
+    && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /tmp/build

docker/README.md

@@ -0,0 +1,199 @@
+# PalladiumWallet — Reproducible Builds via Docker
+
+This folder builds all three distribution targets — **Windows**, **Linux**,
+**Android** — inside Docker containers. The entire toolchain (.NET 10 SDK,
+JDK, Android SDK, android workload) lives in the container images, pinned in
+the Dockerfiles, so:
+
+- **anyone can produce the official binaries** with a single command, on any
+  Linux machine, without installing any SDK on the host;
+- **the toolchain never drifts**: every build uses exactly the same SDK
+  versions, regardless of what is installed (or updated) on the host;
+- **the build environment is auditable**: the Dockerfiles in this folder are
+  the complete, reviewable definition of how release binaries are made — which
+  matters for a wallet, where users must be able to trust that the shipped
+  binary comes from the published source.
+
+> **Scope note:** this pins the *build environment*. Bit-for-bit identical
+> output across machines is a stronger property that .NET does not guarantee
+> by default (embedded timestamps, signing); if two builds of the same commit
+> differ, they differ only in those metadata, not in code.
+
+---
+
+## Prerequisites
+
+A Linux host (native, WSL2, or a VM) with **Docker Engine** installed and
+running. Nothing else — no .NET SDK, no JDK, no Android SDK.
+
+```bash
+# Check that Docker works:
+docker info
+```
+
+If Docker is missing, install it from <https://docs.docker.com/engine/install/>
+(or `sudo apt install docker.io` on Debian/Ubuntu). If `docker info` fails
+with a permission error, add yourself to the `docker` group and start a new
+shell:
+
+```bash
+sudo usermod -aG docker $USER
+```
+
+**Disk space:** ~2 GB for the desktop image, ~7 GB for the Android image
+(SDK + emulator-less toolchain). **First-run time:** the images are built
+automatically on first use — a few minutes for desktop, 10–20 minutes for
+Android (large downloads). Subsequent builds reuse the cached images and take
+well under a minute (desktop) / a few minutes (Android).
+
+**Android release signing:** before the first `android` build, generate the
+persistent signing keystore once — see [`keystore/README.md`](keystore/README.md):
+
+```bash
+./docker/keystore/generate-keystore.sh
+```
+
+Without it, `build_android` refuses to run — every APK must be signed with
+the same key so future releases can update a previous install in place.
+
+---
+
+## Quick start
+
+```bash
+# From the repository root (or from the docker/ folder — both work):
+./docker/build.sh
+```
+
+Running without arguments shows an interactive menu — pick a single target or
+`all`. Non-interactive usage:
+
+```
+./docker/build.sh [TARGET] [--rebuild]
+
+Targets:
+  windows   Win x64 single-file executable (native libs embedded)
+  linux     Linux x64 single-file binary (runs as-is, nothing to install)
+  android   Android APK (release-signed, prompts for keystore passwords)
+  all       All three targets
+
+Options:
+  --rebuild   Force rebuild of the Docker images (needed after editing a Dockerfile)
+```
+
+Examples:
+
+```bash
+./docker/build.sh all               # build everything
+./docker/build.sh windows           # Windows only
+./docker/build.sh android --rebuild # Android, rebuilding the image first
+```
+
+---
+
+## Output — and how to use each artifact
+
+All artifacts land in `dist/` at the repository root. The version number is
+read automatically from `<Version>` in `src/App/PalladiumWallet.App.csproj`.
+
+| Target  | Path                                             |
+|---------|--------------------------------------------------|
+| Windows | `dist/windows/PalladiumWallet-{ver}-win-x64.exe` |
+| Linux   | `dist/linux/PalladiumWallet-{ver}-linux-x64`     |
+| Android | `dist/android/PalladiumWallet-{ver}.apk`         |
+
+**Windows** — a single self-contained `.exe` (runtime and native libraries
+embedded). Copy it to any 64-bit Windows 10/11 machine and double-click.
+The first launch takes a few extra seconds (it unpacks native libraries to a
+per-user cache); later launches are normal. SmartScreen may warn because the
+binary is not code-signed — choose "Run anyway".
+
+**Linux** — a single self-contained binary, already executable. Copy and run:
+
+```bash
+./PalladiumWallet-{ver}-linux-x64
+```
+
+Works on any desktop distro with glibc, X11/Wayland and fontconfig (i.e.
+effectively all of them); no .NET or other packages to install. If you
+transfer it through a channel that strips permissions (e.g. a web download),
+restore the execute bit with `chmod +x`.
+
+**Android** — a release-signed APK for sideloading: transfer it to the phone
+and open it (enable "install from unknown sources" if prompted), or install
+via `adb install dist/android/PalladiumWallet-*.apk`. Supports Android 6.0+
+(API 23), arm64 phones and x86_64 emulators.
+
+> **Signature:** every APK is signed with the persistent keystore in
+> `docker/keystore/` (see [Prerequisites](#prerequisites)), so installing a
+> newer build over an existing one updates it in place — no uninstall, no
+> data loss. This only holds as long as every release keeps using that same
+> keystore file; see `docker/keystore/README.md` for the backup story.
+
+---
+
+## How it works
+
+### Docker images
+
+| Image               | Dockerfile           | Used for        | Size    |
+|---------------------|----------------------|-----------------|---------|
+| `plm-build-desktop` | `Dockerfile.desktop` | windows + linux | ~1.5 GB |
+| `plm-build-android` | `Dockerfile.android` | android         | ~5 GB   |
+
+Images are built automatically the first time a target needs them and reused
+afterwards. Use `--rebuild` only after modifying a Dockerfile.
+
+### Source isolation
+
+The repository is mounted **read-only** inside the container; the build works
+on a copy at `/tmp/build`. Your working tree is never touched — no stray
+`bin/`/`obj/` directories, and a dirty working tree doesn't leak into the
+build beyond the files it contains. Artifacts are written back through a
+bind mount to `dist/` and chown'd to your user.
+
+### NuGet cache
+
+A Docker named volume `plm-nuget-cache` holds downloaded NuGet packages
+across builds. To reclaim the space or force a clean re-download:
+
+```bash
+docker volume rm plm-nuget-cache
+```
+
+---
+
+## Troubleshooting
+
+- **`Docker daemon is not running`** — start it (`sudo systemctl start
+  docker`; on WSL2, start Docker Desktop or the docker service).
+- **Android image build fails downloading `commandlinetools`** — Google
+  rotates the build number in the URL. Update the URL in
+  `Dockerfile.android` to the current one from
+  <https://developer.android.com/studio#command-tools> and rerun with
+  `--rebuild`.
+- **`error XA5207: Could not find android.jar for API level N`** — the .NET
+  android workload moved to a newer API level. Bump
+  `ANDROID_SDK_PLATFORM` (and `ANDROID_SDK_BUILD_TOOLS`) in
+  `Dockerfile.android` to the level the error names, then `--rebuild`.
+- **APK won't install over an existing app
+  (`INSTALL_FAILED_UPDATE_INCOMPATIBLE`)** — the new build wasn't signed with
+  the same keystore as the installed one. Make sure `docker/keystore/release.keystore`
+  hasn't changed since the installed build; if it's genuinely a different key,
+  the user must uninstall the old app first (this deletes app data — back up
+  the wallet seed before doing this).
+- **`build_android` refuses to run, asks to generate a keystore** — run
+  `./docker/keystore/generate-keystore.sh` once (see `docker/keystore/README.md`).
+- **Everything is broken / start from scratch** —
+  `docker system prune -a && docker volume rm plm-nuget-cache`, then rerun
+  the script (images and packages are re-downloaded).
+
+---
+
+## Linux AppImage (future)
+
+The Linux target currently produces a single-file self-contained binary.
+Once a `pupnet.conf` is added to the repository, the `build_linux` function
+in `build.sh` can be extended to call PupNet Deploy inside the same
+`plm-build-desktop` image to also produce an AppImage with desktop
+integration (icon, menu entry).

docker/build.sh

@@ -0,0 +1,235 @@
+#!/usr/bin/env bash
+# Reproducible build script for PalladiumWallet using Docker.
+# Run from anywhere; paths are resolved relative to this script.
+set -euo pipefail
+
+# ── Paths ─────────────────────────────────────────────────────────────────────
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(cd "${SCRIPT_DIR}/.." && pwd)"
+DIST_DIR="${PROJECT_ROOT}/dist"
+
+# ── Docker image names ────────────────────────────────────────────────────────
+IMAGE_DESKTOP="plm-build-desktop"
+IMAGE_ANDROID="plm-build-android"
+
+# Named volume for NuGet package cache (shared across all builds, survives reboots).
+NUGET_VOLUME="plm-nuget-cache"
+
+# ── Helpers ───────────────────────────────────────────────────────────────────
+bold()  { printf '\033[1m%s\033[0m\n' "$*"; }
+info()  { printf '\033[1;34m>>>\033[0m %s\n' "$*"; }
+ok()    { printf '\033[1;32m✓\033[0m  %s\n' "$*"; }
+err()   { printf '\033[1;31m✗\033[0m  %s\n' "$*" >&2; }
+die()   { err "$*"; exit 1; }
+
+usage() {
+    cat <<EOF
+$(bold "Usage:") $(basename "$0") [TARGET] [OPTIONS]
+
+$(bold "Targets:")
+  windows   Win x64 single-file executable  →  dist/windows/
+  linux     Linux x64 single-file binary    →  dist/linux/
+  android   Android APK (release-signed)    →  dist/android/
+  all       All three targets
+
+$(bold "Options:")
+  --rebuild   Force rebuild of Docker images (e.g. after Dockerfile change)
+  -h, --help  Show this help
+
+$(bold "Examples:")
+  $(basename "$0")               # interactive menu
+  $(basename "$0") all           # build everything
+  $(basename "$0") windows       # Windows only
+  $(basename "$0") android --rebuild
+EOF
+}
+
+# ── Argument parsing ──────────────────────────────────────────────────────────
+REBUILD=false
+TARGET=""
+
+for arg in "$@"; do
+    case "$arg" in
+        windows|linux|android|all) TARGET="$arg" ;;
+        --rebuild)                 REBUILD=true ;;
+        -h|--help)                 usage; exit 0 ;;
+        *) err "Unknown argument: $arg"; usage; exit 1 ;;
+    esac
+done
+
+# ── Interactive menu if no target given ───────────────────────────────────────
+if [[ -z "$TARGET" ]]; then
+    bold "PalladiumWallet — reproducible build"
+    echo ""
+    PS3="Select target: "
+    options=("windows" "linux" "android" "all" "quit")
+    select opt in "${options[@]}"; do
+        case "$opt" in
+            windows|linux|android|all) TARGET="$opt"; break ;;
+            quit) echo "Aborted."; exit 0 ;;
+            *) echo "Invalid choice, try again." ;;
+        esac
+    done
+    echo ""
+fi
+
+# ── Preflight checks ──────────────────────────────────────────────────────────
+command -v docker &>/dev/null || die "Docker is not installed or not in PATH."
+docker info &>/dev/null       || die "Docker daemon is not running."
+
+# ── Read project version from csproj ─────────────────────────────────────────
+CSPROJ="${PROJECT_ROOT}/src/App/PalladiumWallet.App.csproj"
+[[ -f "$CSPROJ" ]] || die "Cannot find $CSPROJ — run this script from the repo."
+VERSION=$(grep -oP '(?<=<Version>)[^<]+' "$CSPROJ") || die "Cannot extract <Version> from $CSPROJ."
+info "Version: ${VERSION}"
+
+# ── Ensure NuGet volume exists ────────────────────────────────────────────────
+docker volume inspect "$NUGET_VOLUME" &>/dev/null || \
+    docker volume create "$NUGET_VOLUME" > /dev/null
+
+# ── Image builders ────────────────────────────────────────────────────────────
+ensure_desktop_image() {
+    if [[ "$REBUILD" == true ]] || ! docker image inspect "$IMAGE_DESKTOP" &>/dev/null; then
+        info "Building Docker image: ${IMAGE_DESKTOP}"
+        docker build \
+            --tag "$IMAGE_DESKTOP" \
+            --file "${SCRIPT_DIR}/Dockerfile.desktop" \
+            "${SCRIPT_DIR}"
+    fi
+}
+
+ensure_android_image() {
+    if [[ "$REBUILD" == true ]] || ! docker image inspect "$IMAGE_ANDROID" &>/dev/null; then
+        info "Building Docker image: ${IMAGE_ANDROID}"
+        docker build \
+            --tag "$IMAGE_ANDROID" \
+            --file "${SCRIPT_DIR}/Dockerfile.android" \
+            "${SCRIPT_DIR}"
+    fi
+}
+
+# ── Common docker run wrapper ─────────────────────────────────────────────────
+# $1 = image name, $2 = inline bash commands to execute inside the container.
+# Source is copied to /tmp/build inside the container so bin/obj never pollute
+# the repo. Output is written to /output (→ host DIST_DIR sub-folder).
+# Optional extra `docker run` args (e.g. keystore mount, signing passwords via
+# -e) can be set by the caller in the EXTRA_DOCKER_ARGS array beforehand.
+EXTRA_DOCKER_ARGS=()
+
+run_build() {
+    local image="$1"
+    local commands="$2"
+    local out_dir="$3"
+
+    mkdir -p "$out_dir"
+
+    docker run --rm \
+        --volume "${PROJECT_ROOT}:/src:ro" \
+        --volume "${out_dir}:/output" \
+        --volume "${NUGET_VOLUME}:/root/.nuget/packages" \
+        "${EXTRA_DOCKER_ARGS[@]}" \
+        "$image" \
+        bash -euo pipefail -c "
+            cp -r /src/. /tmp/build
+            cd /tmp/build
+            ${commands}
+            chown -R $(id -u):$(id -g) /output
+        "
+}
+
+# ── Per-target build functions ────────────────────────────────────────────────
+build_windows() {
+    ensure_desktop_image
+    info "Building Windows x64 …"
+    run_build "$IMAGE_DESKTOP" \
+        "dotnet publish src/App.Desktop \
+            -r win-x64 \
+            -c Release \
+            -p:PublishSingleFile=true \
+            -p:IncludeNativeLibrariesForSelfExtract=true \
+            --self-contained \
+            -o /tmp/win-out
+         cp /tmp/win-out/PalladiumWallet.exe \
+            \"/output/PalladiumWallet-${VERSION}-win-x64.exe\"" \
+        "${DIST_DIR}/windows"
+    ok "Windows → dist/windows/PalladiumWallet-${VERSION}-win-x64.exe"
+}
+
+build_linux() {
+    ensure_desktop_image
+    info "Building Linux x64 …"
+    run_build "$IMAGE_DESKTOP" \
+        "dotnet publish src/App.Desktop \
+            -r linux-x64 \
+            -c Release \
+            -p:PublishSingleFile=true \
+            -p:IncludeNativeLibrariesForSelfExtract=true \
+            --self-contained \
+            -o /tmp/linux-out
+         install -m 755 /tmp/linux-out/PalladiumWallet \
+             \"/output/PalladiumWallet-${VERSION}-linux-x64\"" \
+        "${DIST_DIR}/linux"
+    ok "Linux → dist/linux/PalladiumWallet-${VERSION}-linux-x64"
+}
+
+build_android() {
+    ensure_android_image
+
+    local keystore="${SCRIPT_DIR}/keystore/release.keystore"
+    [[ -f "$keystore" ]] || die "No release keystore found at docker/keystore/release.keystore. Run ./docker/keystore/generate-keystore.sh once first (see docker/keystore/README.md)."
+
+    info "Building Android APK …"
+    read -r -s -p "Keystore password: " ANDROID_KS_PASS
+    echo
+    read -r -s -p "Key password (press Enter to reuse the keystore password): " ANDROID_KEY_PASS
+    echo
+    ANDROID_KEY_PASS="${ANDROID_KEY_PASS:-$ANDROID_KS_PASS}"
+
+    # versionCode derived from <Version> (MAJOR.MINOR.PATCH, pre-release suffix
+    # stripped) so it always increases with releases — required for some
+    # installers to accept an in-place update even when the signature matches.
+    local semver="${VERSION%%-*}"
+    IFS='.' read -r VMAJOR VMINOR VPATCH <<< "$semver"
+    local VERSION_CODE=$(( ${VMAJOR:-0} * 10000 + ${VMINOR:-0} * 100 + ${VPATCH:-0} ))
+    info "versionCode: ${VERSION_CODE}"
+
+    EXTRA_DOCKER_ARGS=(
+        --volume "${keystore}:/keystore/release.keystore:ro"
+        --env "ANDROID_KS_PASS=${ANDROID_KS_PASS}"
+        --env "ANDROID_KEY_PASS=${ANDROID_KEY_PASS}"
+    )
+    run_build "$IMAGE_ANDROID" \
+        "JAVA_HOME=/usr/lib/jvm/java-17-openjdk-amd64 \
+         dotnet build src/App.Android \
+            -c Release \
+            -t:SignAndroidPackage \
+            -p:AndroidSdkDirectory=\${ANDROID_HOME} \
+            -p:ApplicationVersion=${VERSION_CODE} \
+            -p:AndroidSigningKeyStore=/keystore/release.keystore \
+            -p:AndroidSigningKeyAlias=palladiumwallet \
+            -p:AndroidSigningStorePass=\${ANDROID_KS_PASS} \
+            -p:AndroidSigningKeyPass=\${ANDROID_KEY_PASS}
+         cp src/App.Android/bin/Release/net10.0-android/*-Signed.apk \
+            \"/output/PalladiumWallet-${VERSION}.apk\"" \
+        "${DIST_DIR}/android"
+    EXTRA_DOCKER_ARGS=()
+    ok "Android → dist/android/PalladiumWallet-${VERSION}.apk"
+}
+
+# ── Dispatch ──────────────────────────────────────────────────────────────────
+START=$(date +%s)
+
+case "$TARGET" in
+    windows) build_windows ;;
+    linux)   build_linux   ;;
+    android) build_android ;;
+    all)
+        build_windows
+        build_linux
+        build_android
+        ;;
+esac
+
+ELAPSED=$(( $(date +%s) - START ))
+bold ""
+bold "Done in ${ELAPSED}s.  Artifacts in: ${DIST_DIR}/"

docker/keystore/README.md

@@ -0,0 +1,37 @@
+# Android release-signing keystore
+
+This folder holds the persistent keystore used to sign release APKs built by
+`docker/build.sh android`. Every release must be signed with the **same**
+key, or Android refuses to install a new build over a previously installed
+one (`INSTALL_FAILED_UPDATE_INCOMPATIBLE`) and forces the user to uninstall
+first — which deletes the app's data.
+
+## First-time setup
+
+```bash
+./docker/keystore/generate-keystore.sh
+```
+
+Run this **once**, on whichever machine will keep producing release builds.
+It creates `release.keystore` in this folder and asks for a keystore
+password (and, optionally, a separate key password). Nothing is written to
+git — `release.keystore` is ignored by `.gitignore`, and the script never
+saves the passwords anywhere.
+
+`docker/build.sh android` will refuse to run without this file, and will
+prompt you for the same passwords at every build.
+
+## Back it up
+
+The keystore file and its passwords cannot be regenerated: if lost, no
+future release can ever update existing installs in place again — every
+user would need to uninstall and reinstall from scratch. Copy
+`release.keystore` and the passwords to a password manager or encrypted
+backup outside this repository as soon as you generate them.
+
+## What NOT to do
+
+- Do not commit `release.keystore` (or any `*.jks`/`*.keystore` file) to git.
+- Do not re-run `generate-keystore.sh` once a keystore already exists — it
+  refuses on purpose; delete the file yourself only if you fully accept the
+  consequences above.

docker/keystore/generate-keystore.sh

@@ -0,0 +1,65 @@
+#!/usr/bin/env bash
+# Generates the persistent Android release-signing keystore used by
+# docker/build.sh. Every APK built with this keystore carries the same
+# signature, which is what lets Android treat a new release as an update to
+# a previously installed one instead of a conflicting, different app.
+#
+# Run this ONCE. Re-running it after the keystore already exists is refused
+# below on purpose: regenerating it changes the signature, and every device
+# with a prior release installed would then need a full uninstall (and lose
+# any app data that isn't in the wallet file itself) to receive the next
+# update.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+KEYSTORE_PATH="${SCRIPT_DIR}/release.keystore"
+ALIAS="palladiumwallet"
+
+if [[ -f "$KEYSTORE_PATH" ]]; then
+    echo "A keystore already exists at $KEYSTORE_PATH — refusing to overwrite it." >&2
+    echo "Delete it manually first only if you understand the consequences above." >&2
+    exit 1
+fi
+
+command -v keytool &>/dev/null || {
+    echo "keytool not found on PATH — install a JDK (e.g. openjdk-17-jdk) and retry." >&2
+    exit 1
+}
+
+echo "Creating the Palladium Wallet Android release-signing keystore."
+echo "This file and the passwords you enter now must be kept safe OUTSIDE this"
+echo "repository (password manager, encrypted backup, ...). They are never"
+echo "committed to git. Losing them means no future release can ever update"
+echo "existing installs in place — only a fresh keystore + full user reinstall."
+echo
+
+read -r -s -p "Keystore password (min 6 characters): " KS_PASS
+echo
+read -r -s -p "Confirm keystore password: " KS_PASS_CONFIRM
+echo
+if [[ "$KS_PASS" != "$KS_PASS_CONFIRM" ]]; then
+    echo "Passwords do not match." >&2
+    exit 1
+fi
+if [[ "${#KS_PASS}" -lt 6 ]]; then
+    echo "Password too short (keytool requires at least 6 characters)." >&2
+    exit 1
+fi
+
+read -r -s -p "Key password (press Enter to reuse the keystore password): " KEY_PASS
+echo
+KEY_PASS="${KEY_PASS:-$KS_PASS}"
+
+export KS_PASS KEY_PASS
+keytool -genkeypair -v \
+    -keystore "$KEYSTORE_PATH" \
+    -alias "$ALIAS" \
+    -keyalg RSA -keysize 2048 -validity 10000 \
+    -storepass:env KS_PASS -keypass:env KEY_PASS \
+    -dname "CN=PalladiumWallet, OU=PalladiumWallet, O=PalladiumWallet, C=IT"
+unset KS_PASS KEY_PASS
+
+echo
+echo "Keystore created at $KEYSTORE_PATH (git-ignored, alias: $ALIAS)."
+echo "Back it up now, together with the passwords — it cannot be regenerated."
+echo "./docker/build.sh android will prompt for these same passwords at build time."

src/App.Android/MainApplication.cs

@@ -10,9 +10,9 @@ using PalladiumWallet.Core.Storage;
 
 namespace PalladiumWallet.Mobile;
 
-// In Avalonia 12 l'AppBuilder Android si configura nella sottoclasse Application
+// In Avalonia 12 the Android AppBuilder is configured in the Application subclass
-// (AvaloniaAndroidApplication<TApp>), non più nell'Activity. allowBackup=false:
+// (AvaloniaAndroidApplication<TApp>), no longer in the Activity. allowBackup=false:
-// il file wallet cifrato/seed non deve finire nei backup cloud automatici.
+// the encrypted wallet file/seed must not end up in automatic cloud backups.
 [Application(Label = "Palladium Wallet", AllowBackup = false,
              Icon = "@mipmap/ic_launcher", RoundIcon = "@mipmap/ic_launcher_round")]
 public class MainApplication : AvaloniaAndroidApplication<global::PalladiumWallet.App.App>
@@ -26,7 +26,7 @@ public class MainApplication : AvaloniaAndroidApplication<global::PalladiumWalle
     {
         AppPaths.OverrideDataRoot = FilesDir?.AbsolutePath;
 
-        // Registra lo scanner QR: apre ScannerActivity e ne attende il risultato.
+        // Registers the QR scanner: opens ScannerActivity and waits for its result.
         PlatformServices.ScanQrAsync = async () =>
         {
             var activity = MainActivity.Current;

src/App.Android/ScannerActivity.cs

@@ -16,8 +16,8 @@ using AndroidResult = Android.App.Result;
 namespace PalladiumWallet.Mobile;
 
 /// <summary>
-/// Activity full-screen per la scansione QR via Camera2 + ZXing.Net.
+/// Full-screen activity for QR scanning via Camera2 + ZXing.Net.
-/// Torna a MainActivity via SetResult con l'extra "qr" = testo del codice.
+/// Returns to MainActivity via SetResult with the extra "qr" = code text.
 /// </summary>
 [Activity(Theme = "@style/MyTheme.NoActionBar",
           ScreenOrientation = Android.Content.PM.ScreenOrientation.Portrait)]
@@ -162,7 +162,7 @@ internal sealed class ScannerActivity : Activity, TextureView.ISurfaceTextureLis
             bmp.GetPixels(pixels, 0, w, 0, 0, w, h);
             bmp.Recycle();
 
-            // ARGB int[] → RGB byte[] per ZXing.RGBLuminanceSource
+            // ARGB int[] → RGB byte[] for ZXing.RGBLuminanceSource
             var rgb = new byte[pixels.Length * 3];
             for (int i = 0; i < pixels.Length; i++)
             {

src/App/App.axaml

@@ -9,7 +9,19 @@
         <local:ViewLocator/>
     </Application.DataTemplates>
 
+    <!-- Semantic design tokens (colors, radii, brand accent): defined for
+         both light/dark variants. See Styles/Theme.axaml. -->
+    <Application.Resources>
+        <ResourceDictionary>
+            <ResourceDictionary.MergedDictionaries>
+                <ResourceInclude Source="/Styles/Theme.axaml"/>
+            </ResourceDictionary.MergedDictionaries>
+        </ResourceDictionary>
+    </Application.Resources>
+
     <Application.Styles>
         <FluentTheme />
+        <!-- Control refinements and reusable classes (on top of Fluent) -->
+        <StyleInclude Source="/Styles/Controls.axaml"/>
     </Application.Styles>
 </Application>

src/App/App.axaml.cs

@@ -17,8 +17,8 @@ public partial class App : Application
     {
         var vm = new MainWindowViewModel();
 
-        // Desktop (Windows/Linux): finestra classica. Mobile (Android): vista
+        // Desktop (Windows/Linux): classic window. Mobile (Android): single
-        // singola. Stessa UI condivisa (MainView) e stesso ViewModel.
+        // view. Same shared UI (MainView) and same ViewModel.
         switch (ApplicationLifetime)
         {
             case IClassicDesktopStyleApplicationLifetime desktop:

src/App/Localization/Loc.cs

@@ -3,9 +3,9 @@ using System.Collections.Generic;
 namespace PalladiumWallet.App.Localization;
 
 /// <summary>
-/// Localizzazione UI: dizionario chiave → traduzioni per lingua, con
+/// UI localisation: key → per-language translations dictionary, with an
-/// indicizzatore bindabile da XAML ({Binding Loc[chiave]}). Al cambio lingua
+/// indexer bindable from XAML ({Binding Loc[key]}). On language change the
-/// il ViewModel sostituisce l'istanza così Avalonia rivaluta tutte le binding.
+/// ViewModel replaces the instance so Avalonia re-evaluates all bindings.
 /// </summary>
 public sealed class Loc
 {
@@ -20,10 +20,10 @@ public sealed class Loc
     private Loc(string language) { Language = language; }
 
     /// <summary>
-    /// Crea una nuova istanza con la lingua specificata e aggiorna il singleton
+    /// Creates a new instance for the specified language and updates the singleton
-    /// usato da <see cref="Tr"/>. Il ViewModel assegna questa istanza alla
+    /// used by <see cref="Tr"/>. The ViewModel assigns this instance to its Loc
-    /// propria property Loc così Avalonia vede un riferimento diverso e
+    /// property so Avalonia sees a different reference and re-evaluates all
-    /// rivaluta tutte le binding {Binding Loc[chiave]}.
+    /// {Binding Loc[key]} bindings.
     /// </summary>
     internal static Loc SwitchTo(string language)
     {
@@ -45,8 +45,8 @@ public sealed class Loc
         // Menu                                                it                                          en                              es                                      fr                                          pt                                          de
         ["menu.file"]             = ["_File",                                                             "_File",                        "_Archivo",                             "_Fichier",                                 "_Arquivo",                                 "_Datei"],
         ["menu.file.new"]         = ["Nuovo / ripristina wallet…",                                        "New / restore wallet…",        "Nuevo / restaurar wallet…",            "Nouveau / restaurer le wallet…",           "Novo / restaurar carteira…",               "Neu / Wallet wiederherstellen…"],
-        ["menu.file.open"]        = ["Apri wallet da file…",                                              "Open wallet from file…",       "Abrir wallet desde archivo…",          "Ouvrir le wallet depuis un fichier…",      "Abrir carteira de arquivo…",               "Wallet aus Datei öffnen…"],
 ["menu.file.close"]       = ["Chiudi wallet",                                                     "Close wallet",                 "Cerrar wallet",                        "Fermer le wallet",                         "Fechar carteira",                          "Wallet schließen"],
+        ["menu.file.quit"]        = ["Esci",                                                               "Quit",                         "Salir",                                "Quitter",                                  "Sair",                                     "Beenden"],
         ["menu.net"]              = ["_Rete",                                                             "_Network",                     "_Red",                                 "_Réseau",                                  "_Rede",                                    "_Netzwerk"],
         ["menu.net.discover"]     = ["Cerca altri server (peer)",                                         "Discover servers (peers)",     "Buscar otros servidores (peers)",      "Rechercher d'autres serveurs (pairs)",     "Procurar outros servidores (peers)",        "Weitere Server suchen (Peers)"],
         ["menu.net.resetcerts"]   = ["Reset certificati SSL",                                             "Reset SSL certificates",       "Restablecer certificados SSL",         "Réinitialiser les certificats SSL",        "Redefinir certificados SSL",               "SSL-Zertifikate zurücksetzen"],
@@ -54,12 +54,30 @@ public sealed class Loc
         ["menu.help"]             = ["_Help",                                                             "_Help",                        "_Ayuda",                               "_Aide",                                    "_Ajuda",                                   "_Hilfe"],
         ["help.title"]            = ["Informazioni",                                                     "About",                        "Información",                          "À propos",                                 "Sobre",                                    "Über"],
         ["help.info"]             = [
-            "Wallet SPV per la criptovaluta Palladium (PLM).",
+            "Wallet SPV leggero e non-custodiale per la rete Palladium (PLM). Sicurezza locale: seed e chiavi sempre cifrati, mai esposti in rete.",
-            "SPV wallet for the Palladium (PLM) cryptocurrency.",
+            "Lightweight, non-custodial SPV wallet for the Palladium (PLM) network. Local security: seed and keys always encrypted, never exposed on the wire.",
-            "Monedero SPV para la criptomoneda Palladium (PLM).",
+            "Monedero SPV ligero y sin custodia para la red Palladium (PLM). Seguridad local: semilla y claves siempre cifradas, nunca expuestas en la red.",
-            "Portefeuille SPV pour la cryptomonnaie Palladium (PLM).",
+            "Portefeuille SPV léger et non-custodial pour le réseau Palladium (PLM). Sécurité locale : graine et clés toujours chiffrées, jamais exposées sur le réseau.",
-            "Carteira SPV para a criptomoeda Palladium (PLM).",
+            "Carteira SPV leve e não custodial para a rede Palladium (PLM). Segurança local: semente e chaves sempre cifradas, nunca expostas na rede.",
-            "SPV-Wallet für die Kryptowährung Palladium (PLM)."],
+            "Leichtes, nicht-verwahrendes SPV-Wallet für das Palladium (PLM)-Netzwerk. Lokale Sicherheit: Seed und Schlüssel stets verschlüsselt, nie im Netzwerk exponiert."],
+        ["help.tab.info"]         = ["Info",                                                               "Info",                         "Info",                                 "Info",                                     "Info",                                     "Info"],
+        ["help.tab.donate"]       = ["Dona",                                                               "Donate",                       "Donar",                                "Faire un don",                             "Doar",                                     "Spenden"],
+        ["help.bug.report"]       = ["Segnala un bug",                                                     "Report a bug",                 "Informar un error",                    "Signaler un bug",                          "Reportar um bug",                          "Fehler melden"],
+        ["update.title"]          = ["Aggiornamento disponibile",                                          "Update available",             "Actualización disponible",             "Mise à jour disponible",                   "Atualização disponível",                   "Update verfügbar"],
+        ["update.message"]        = ["È disponibile una nuova versione:",                                  "A new version is available:",  "Hay una nueva versión disponible:",    "Une nouvelle version est disponible :",    "Uma nova versão está disponível:",         "Eine neue Version ist verfügbar:"],
+        ["update.download"]       = ["Scarica",                                                            "Download",                     "Descargar",                            "Télécharger",                              "Baixar",                                   "Herunterladen"],
+        ["update.dismiss"]        = ["Ignora",                                                              "Dismiss",                      "Ignorar",                               "Ignorer",                                  "Ignorar",                                  "Verwerfen"],
+        ["donate.desc"]           = [
+            "Se questo wallet ti è utile, considera una piccola donazione allo sviluppatore.",
+            "If you find this wallet useful, consider a small donation to the developer.",
+            "Si esta wallet te resulta útil, considera una pequeña donación al desarrollador.",
+            "Si ce portefeuille vous est utile, envisagez un petit don au développeur.",
+            "Se esta carteira é útil para você, considere uma pequena doação ao desenvolvedor.",
+            "Wenn Ihnen dieses Wallet nützlich ist, erwägen Sie eine kleine Spende an den Entwickler."],
+        ["donate.dev.address"]    = ["Indirizzo sviluppatore",                                             "Developer address",            "Dirección del desarrollador",          "Adresse du développeur",                   "Endereço do desenvolvedor",                "Entwickleradresse"],
+        ["donate.amount"]         = ["Importo donazione",                                                  "Donation amount",              "Monto de donación",                    "Montant du don",                           "Valor da doação",                          "Spendenbetrag"],
+        ["donate.prepare"]        = ["Prepara donazione",                                                  "Prepare donation",             "Preparar donación",                    "Préparer le don",                          "Preparar doação",                          "Spende vorbereiten"],
+        ["donate.confirm"]        = ["Conferma e invia",                                                   "Confirm and send",             "Confirmar y enviar",                   "Confirmer et envoyer",                     "Confirmar e enviar",                       "Bestätigen und senden"],
         ["settings.unit.short"]   = ["Unità",                                                             "Unit",                         "Unidad",                               "Unité",                                    "Unidade",                                  "Einheit"],
 
         // Wizard
@@ -146,18 +164,18 @@ public sealed class Loc
             "Fügen Sie einen oder mehrere WIF-Schlüssel ein (einer pro Zeile). Sie können mehrere Schlüssel importieren, um mehrere Adressen mit demselben Wallet zu verwalten."],
         ["wiz.importwif.placeholder"] = ["K… / L… / 5… (una chiave per riga)",                            "K… / L… / 5… (one key per line)", "K… / L… / 5… (una clave por línea)", "K… / L… / 5… (une clé par ligne)", "K… / L… / 5… (uma chave por linha)", "K… / L… / 5… (ein Schlüssel pro Zeile)"],
 
-        // Messaggi di errore import
+        // Import error messages
         ["msg.xkey.required"]     = ["Incolla una chiave estesa (xpub/xprv o variante).",                  "Paste an extended key (xpub/xprv or variant).", "Pega una clave extendida (xpub/xprv o variante).", "Collez une clé étendue (xpub/xprv ou variante).", "Cole uma chave estendida (xpub/xprv ou variante).", "Fügen Sie einen erweiterten Schlüssel ein (xpub/xprv oder Variante)."],
         ["msg.xkey.invalid"]      = ["Chiave estesa non riconosciuta per questa rete.",                     "Extended key not recognised for this network.", "Clave extendida no reconocida para esta red.", "Clé étendue non reconnue pour ce réseau.", "Chave estendida não reconhecida para esta rede.", "Erweiterter Schlüssel für dieses Netzwerk nicht erkannt."],
         ["msg.wif.required"]      = ["Incolla almeno una chiave WIF.",                                      "Paste at least one WIF key.",  "Pega al menos una clave WIF.",         "Collez au moins une clé WIF.",             "Cole pelo menos uma chave WIF.",           "Fügen Sie mindestens einen WIF-Schlüssel ein."],
         ["msg.wif.invalid"]       = ["Chiave WIF non valida per questa rete.",                              "WIF key not valid for this network.", "Clave WIF no válida para esta red.", "Clé WIF invalide pour ce réseau.",        "Chave WIF inválida para esta rede.",       "WIF-Schlüssel für dieses Netzwerk ungültig."],
 
-        // Pannello wallet
+        // Wallet panel
         ["wallet.close"]          = ["Chiudi wallet",                                                     "Close wallet",                 "Cerrar wallet",                        "Fermer le wallet",                         "Fechar carteira",                          "Wallet schließen"],
         ["wallet.server"]         = ["Server:",                                                           "Server:",                      "Servidor:",                            "Serveur :",                                "Servidor:",                                "Server:"],
-        ["wallet.connect"]        = ["Connetti e sincronizza",                                            "Connect and sync",             "Conectar y sincronizar",               "Connecter et synchroniser",                "Conectar e sincronizar",                   "Verbinden und synchronisieren"],
+        ["wallet.connect"]        = ["Connetti",                                                          "Connect",                       "Conectar",                             "Connecter",                                "Conectar",                                  "Verbinden"],
         ["wallet.manual"]         = ["oppure host:porta manuale",                                         "or manual host:port",          "o host:puerto manual",                 "ou hôte:port manuel",                      "ou host:porta manual",                     "oder manuell host:port"],
-        ["wallet.discover"]       = ["Cerca altri server",                                                "Discover servers",             "Buscar otros servidores",              "Rechercher des serveurs",                  "Procurar servidores",                      "Server suchen"],
+        ["wallet.discover"]       = ["Sincronizza",                                                       "Sync servers",                  "Sincronizar",                          "Synchroniser",                             "Sincronizar",                              "Synchronisieren"],
         ["wallet.resetcert"]      = ["Reset cert.",                                                       "Reset certs",                  "Restablecer cert.",                    "Réinit. cert.",                            "Redefinir cert.",                          "Zert. zurücksetzen"],
         ["tab.receive"]           = ["Ricevi",                                                            "Receive",                      "Recibir",                              "Recevoir",                                 "Receber",                                  "Empfangen"],
         ["tab.history"]           = ["Storico",                                                           "History",                      "Historial",                            "Historique",                               "Histórico",                                "Verlauf"],
@@ -182,13 +200,15 @@ public sealed class Loc
         ["addr.pubkey"]           = ["Chiave pubblica:",                                                  "Public key:",                  "Clave pública:",                       "Clé publique :",                           "Chave pública:",                           "Öffentlicher Schlüssel:"],
         ["addr.privkey"]          = ["Chiave privata (WIF):",                                             "Private key (WIF):",           "Clave privada (WIF):",                 "Clé privée (WIF) :",                       "Chave privada (WIF):",                     "Privater Schlüssel (WIF):"],
         ["addr.show.privkey"]     = ["Mostra",                                                            "Show",                         "Mostrar",                              "Afficher",                                 "Mostrar",                                  "Anzeigen"],
+        ["addr.privkey.prompt.title"] = ["Conferma identità",                                           "Confirm identity",             "Confirmar identidad",                  "Confirmer l'identité",                     "Confirmar identidade",                     "Identität bestätigen"],
+        ["addr.privkey.prompt.desc"]  = ["Inserisci la password del wallet per visualizzare la chiave privata.", "Enter the wallet password to reveal the private key.", "Ingresa la contraseña del wallet para ver la clave privada.", "Entrez le mot de passe du wallet pour afficher la clé privée.", "Digite a senha da carteira para ver a chave privada.", "Geben Sie das Wallet-Passwort ein, um den privaten Schlüssel anzuzeigen."],
         ["addr.hide.privkey"]     = ["Nascondi",                                                          "Hide",                         "Ocultar",                              "Masquer",                                  "Ocultar",                                  "Ausblenden"],
         ["addr.receive"]          = ["ricezione",                                                         "receive",                      "recepción",                            "réception",                                "recebimento",                              "Empfang"],
         ["addr.change"]           = ["change",                                                            "change",                       "cambio",                               "monnaie",                                  "troco",                                    "Wechselgeld"],
         ["addr.info.title"]       = ["Informazioni indirizzo",                                          "Address information",          "Información de dirección",             "Informations sur l'adresse",               "Informações do endereço",                  "Adressinformationen"],
         ["addr.close"]            = ["Chiudi",                                                          "Close",                        "Cerrar",                               "Fermer",                                   "Fechar",                                   "Schließen"],
 
-        // Storico → dettaglio transazione
+        // History → transaction detail
         ["history.hint"]          = ["Doppio click su una transazione per i dettagli.",                  "Double-click a transaction for details.", "Doble clic en una transacción para ver los detalles.", "Double-cliquez sur une transaction pour les détails.", "Clique duplo numa transação para ver os detalhes.", "Doppelklick auf eine Transaktion für Details."],
         ["tx.title"]              = ["Dettagli transazione",                                            "Transaction details",          "Detalles de la transacción",           "Détails de la transaction",                "Detalhes da transação",                    "Transaktionsdetails"],
         ["tx.close"]              = ["Chiudi",                                                          "Close",                        "Cerrar",                               "Fermer",                                   "Fechar",                                   "Schließen"],
@@ -210,12 +230,16 @@ public sealed class Loc
         ["tx.size.total"]         = ["Dimensione totale",                                              "Total size",                   "Tamaño total",                         "Taille totale",                            "Tamanho total",                            "Gesamtgröße"],
         ["tx.size.virtual"]       = ["Dimensione virtuale",                                            "Virtual size",                 "Tamaño virtual",                       "Taille virtuelle",                         "Tamanho virtual",                          "Virtuelle Größe"],
         ["tx.rbf"]                = ["Sostituibile (RBF)",                                              "Replaceable (RBF)",            "Reemplazable (RBF)",                   "Remplaçable (RBF)",                        "Substituível (RBF)",                       "Ersetzbar (RBF)"],
-        ["tx.verified"]           = ["Verifica SPV",                                                    "SPV verification",             "Verificación SPV",                     "Vérification SPV",                         "Verificação SPV",                          "SPV-Prüfung"],
 ["tx.inputs"]             = ["Input",                                                           "Inputs",                       "Entradas",                             "Entrées",                                  "Entradas",                                 "Eingänge"],
         ["tx.outputs"]            = ["Output",                                                          "Outputs",                      "Salidas",                              "Sorties",                                  "Saídas",                                   "Ausgänge"],
         ["tx.yes"]                = ["Sì",                                                              "Yes",                          "Sí",                                   "Oui",                                      "Sim",                                      "Ja"],
         ["tx.no"]                 = ["No",                                                              "No",                           "No",                                   "Non",                                      "Não",                                      "Nein"],
         ["tx.needconnection"]     = ["Connettiti al server per vedere i dettagli della transazione.",   "Connect to the server to view transaction details.", "Conéctate al servidor para ver los detalles de la transacción.", "Connectez-vous au serveur pour voir les détails de la transaction.", "Conecte-se ao servidor para ver os detalhes da transação.", "Mit dem Server verbinden, um die Transaktionsdetails zu sehen."],
+        ["tx.sect.overview"]      = ["Panoramica",                                                       "Overview",                     "Resumen",                              "Aperçu",                                   "Visão geral",                              "Übersicht"],
+        ["tx.sect.amounts"]       = ["Importi e commissioni",                                            "Amounts & fees",               "Importes y comisiones",                "Montants et frais",                        "Valores e taxas",                          "Beträge & Gebühren"],
+        ["tx.sect.tech"]          = ["Dettagli tecnici",                                                 "Technical details",            "Detalles técnicos",                    "Détails techniques",                       "Detalhes técnicos",                        "Technische Details"],
+        ["tx.coinbase"]           = ["Coinbase",                                                        "Coinbase",                     "Coinbase",                             "Coinbase",                                 "Coinbase",                                 "Coinbase"],
+        ["tx.coinbase.newcoins"]  = ["Nuova emissione (mining)",                                         "Newly generated (mining)",     "Nueva emisión (minería)",              "Nouvelle émission (minage)",               "Nova emissão (mineração)",                 "Neu erzeugt (Mining)"],
         ["send.from.contact"]     = ["Da contatti:",                                                      "From contacts:",               "De contactos:",                        "Depuis les contacts :",                    "De contatos:",                             "Aus Kontakten:"],
         ["send.contact.hint"]     = ["seleziona per riempire l'indirizzo",                                "select to fill address",       "selecciona para rellenar la dirección", "sélectionner pour remplir l'adresse",      "selecione para preencher o endereço",      "auswählen um Adresse einzufügen"],
         ["send.to"]               = ["Indirizzo destinatario",                                            "Recipient address",            "Dirección destinataria",               "Adresse du destinataire",                  "Endereço do destinatário",                 "Empfängeradresse"],
@@ -225,8 +249,41 @@ public sealed class Loc
         ["send.prepare"]          = ["Prepara transazione",                                               "Prepare transaction",          "Preparar transacción",                 "Préparer la transaction",                  "Preparar transação",                       "Transaktion vorbereiten"],
         ["send.scan"]             = ["Scansiona QR",                                                      "Scan QR",                      "Escanear QR",                          "Scanner QR",                               "Escanear QR",                              "QR scannen"],
         ["send.confirm"]          = ["CONFERMA E TRASMETTI",                                              "CONFIRM AND BROADCAST",        "CONFIRMAR Y TRANSMITIR",               "CONFIRMER ET DIFFUSER",                    "CONFIRMAR E TRANSMITIR",                   "BESTÄTIGEN UND SENDEN"],
+        ["send.sect.recipient"]   = ["Destinatario",                                                       "Recipient",                    "Destinatario",                         "Destinataire",                             "Destinatário",                             "Empfänger"],
+        ["send.sect.amount"]      = ["Importo e commissione",                                              "Amount & fee",                 "Importe y comisión",                   "Montant et frais",                         "Valor e taxa",                             "Betrag & Gebühr"],
+        ["send.summary"]          = ["Riepilogo",                                                          "Summary",                      "Resumen",                              "Résumé",                                   "Resumo",                                   "Zusammenfassung"],
+        ["receive.your.address"]  = ["Il tuo indirizzo",                                                   "Your address",                 "Tu dirección",                         "Votre adresse",                            "Seu endereço",                             "Deine Adresse"],
 
-        // Stato connessione
+        // Wallet info overlay
+        ["menu.wallet"]              = ["_Wallet",                                                          "_Wallet",                      "_Wallet",                              "_Wallet",                                  "_Wallet",                                  "_Wallet"],
+        ["walletinfo.title"]         = ["Informazioni Wallet",                                              "Wallet Information",           "Información del Wallet",               "Informations Wallet",                      "Informações da Carteira",                  "Wallet-Informationen"],
+        ["walletinfo.file"]          = ["File",                                                             "File",                         "Archivo",                              "Fichier",                                  "Arquivo",                                  "Datei"],
+        ["walletinfo.network"]       = ["Rete",                                                             "Network",                      "Red",                                  "Réseau",                                   "Rede",                                     "Netzwerk"],
+        ["walletinfo.type"]          = ["Tipo wallet",                                                      "Wallet type",                  "Tipo de wallet",                       "Type de wallet",                           "Tipo de carteira",                         "Wallet-Typ"],
+        ["walletinfo.type.seed"]     = ["HD (seed BIP39)",                                                  "HD (BIP39 seed)",              "HD (seed BIP39)",                      "HD (graine BIP39)",                        "HD (semente BIP39)",                       "HD (BIP39-Seed)"],
+        ["walletinfo.type.xprv"]     = ["HD (xprv importato)",                                              "HD (imported xprv)",           "HD (xprv importado)",                  "HD (xprv importé)",                        "HD (xprv importado)",                      "HD (importierter xprv)"],
+        ["walletinfo.type.wif"]      = ["Chiave WIF importata",                                             "Imported WIF key",             "Clave WIF importada",                  "Clé WIF importée",                         "Chave WIF importada",                      "Importierter WIF-Schlüssel"],
+        ["walletinfo.type.watchonly"] = ["Watch-only (xpub)",                                               "Watch-only (xpub)",            "Watch-only (xpub)",                    "Watch-only (xpub)",                        "Watch-only (xpub)",                        "Watch-only (xpub)"],
+        ["walletinfo.script"]        = ["Script",                                                           "Script",                       "Script",                               "Script",                                   "Script",                                   "Script"],
+        ["walletinfo.derivpath"]     = ["Percorso derivazione",                                             "Derivation path",              "Ruta de derivación",                   "Chemin de dérivation",                     "Caminho de derivação",                     "Ableitungspfad"],
+        ["walletinfo.xpub"]          = ["Chiave pubblica estesa",                                           "Extended public key",          "Clave pública extendida",              "Clé publique étendue",                     "Chave pública estendida",                  "Erweiterter öffentlicher Schlüssel"],
+        ["walletinfo.fingerprint"]   = ["Master fingerprint",                                               "Master fingerprint",           "Huella maestra",                       "Empreinte maître",                         "Impressão digital mestre",                 "Master-Fingerprint"],
+        ["walletinfo.seed.section"]  = ["Seed (mnemonica BIP39)",                                           "Seed (BIP39 mnemonic)",        "Semilla (mnemónico BIP39)",            "Graine (mnémonique BIP39)",                "Semente (mnemônico BIP39)",                "Seed (BIP39-Mnemonic)"],
+        ["walletinfo.seed.noseed"]   = ["Questo wallet non ha una seed (watch-only o importato).",          "This wallet has no seed (watch-only or imported).", "Este wallet no tiene seed (watch-only o importado).", "Ce wallet n'a pas de graine (watch-only ou importé).", "Esta carteira não tem semente (watch-only ou importada).", "Dieses Wallet hat keinen Seed (watch-only oder importiert)."],
+        ["walletinfo.seed.password"] = ["Password del file wallet per sbloccare il seed:",                  "Wallet file password to unlock the seed:", "Contraseña del archivo para desbloquear la seed:", "Mot de passe du fichier pour déverrouiller la graine :", "Senha do arquivo para desbloquear a semente:", "Dateipasswort zum Entsperren des Seeds:"],
+        ["walletinfo.seed.reveal"]   = ["Mostra seed",                                                      "Show seed",                    "Mostrar seed",                         "Afficher la graine",                       "Mostrar semente",                          "Seed anzeigen"],
+        ["walletinfo.seed.hide"]     = ["Nascondi",                                                         "Hide",                         "Ocultar",                              "Masquer",                                  "Ocultar",                                  "Ausblenden"],
+        ["walletinfo.seed.warning"]  = [
+            "Non condividere mai queste parole. Chi le possiede controlla i fondi.",
+            "Never share these words. Whoever holds them controls the funds.",
+            "Nunca compartas estas palabras. Quien las tenga controla los fondos.",
+            "Ne partagez jamais ces mots. Celui qui les possède contrôle les fonds.",
+            "Nunca compartilhe essas palavras. Quem as tiver controla os fundos.",
+            "Teilen Sie diese Wörter niemals. Wer sie hat, kontrolliert die Gelder."],
+        ["walletinfo.passphrase"]    = ["Passphrase BIP39",                                                 "BIP39 passphrase",             "Frase de contraseña BIP39",            "Phrase de passe BIP39",                    "Frase-senha BIP39",                        "BIP39-Passphrase"],
+        ["walletinfo.passphrase.set"] = ["(impostata)",                                                     "(set)",                        "(establecida)",                        "(définie)",                                "(definida)",                               "(gesetzt)"],
+
+        // Connection status
         ["conn.none"]             = ["non connesso",                                                      "not connected",                "no conectado",                         "non connecté",                             "não conectado",                            "nicht verbunden"],
         ["conn.disconnected"]     = ["disconnesso",                                                       "disconnected",                 "desconectado",                         "déconnecté",                               "desconectado",                             "getrennt"],
         ["conn.reconnecting"]     = ["riconnessione…",                                                    "reconnecting…",                "reconectando…",                        "reconnexion…",                             "reconectando…",                            "Verbindung wird wiederhergestellt…"],
@@ -235,7 +292,7 @@ public sealed class Loc
         ["conn.connectedto"]      = ["connesso",                                                          "connected",                    "conectado",                            "connecté",                                 "conectado",                                "verbunden"],
         ["conn.connectingto"]     = ["connessione a",                                                     "connecting to",                "conectando a",                         "connexion à",                              "conectando a",                             "Verbindung zu"],
 
-        // Messaggi di stato principali
+        // Main status messages
         ["msg.welcome.existing"]  = [
             "Trovato un wallet esistente su questa rete: aprilo, oppure creane un altro.",
             "Found an existing wallet on this network: open it, or create another one.",
@@ -336,6 +393,7 @@ public sealed class Loc
         ["msg.height"]            = ["altezza",                                                           "height",                       "altura",                               "hauteur",                                  "altura",                                   "Höhe"],
         ["msg.pending"]           = ["in attesa di conferma",                                             "pending confirmation",         "pendiente de confirmación",            "en attente de confirmation",               "aguardando confirmação",                   "ausstehende Bestätigung"],
         ["msg.notspendable"]      = ["non ancora spendibile",                                             "not yet spendable",            "aún no gastable",                      "pas encore dépensable",                    "ainda não gastável",                       "noch nicht verwendbar"],
+        ["msg.immature"]          = ["in maturazione",                                                    "maturing",                      "en maduración",                        "en maturation",                            "em maturação",                             "in Reifung"],
         ["msg.settings.saved"]    = ["Impostazioni salvate.",                                             "Settings saved.",              "Configuración guardada.",              "Paramètres enregistrés.",                  "Configurações salvas.",                    "Einstellungen gespeichert."],
         ["msg.certreset"]         = [
             "Certificati SSL azzerati: riprova la connessione.",
@@ -346,7 +404,7 @@ public sealed class Loc
             "SSL-Zertifikate zurückgesetzt: Verbindung erneut versuchen."],
         ["msg.error"]             = ["Errore",                                                            "Error",                        "Error",                                "Erreur",                                   "Erro",                                     "Fehler"],
 
-        // Contatti
+        // Contacts
         ["contacts.name"]         = ["Nome",                                                              "Name",                         "Nombre",                               "Nom",                                      "Nome",                                     "Name"],
         ["contacts.address"]      = ["Indirizzo",                                                         "Address",                      "Dirección",                            "Adresse",                                  "Endereço",                                 "Adresse"],
         ["contacts.name.ph"]      = ["Nome contatto",                                                     "Contact name",                 "Nombre del contacto",                  "Nom du contact",                           "Nome do contato",                          "Kontaktname"],
@@ -355,7 +413,7 @@ public sealed class Loc
         ["contacts.remove"]       = ["Rimuovi selezionato",                                               "Remove selected",              "Eliminar seleccionado",                "Supprimer la sélection",                   "Remover selecionado",                      "Auswahl entfernen"],
         ["contacts.empty"]        = ["Nessun contatto salvato.",                                          "No saved contacts.",           "No hay contactos guardados.",          "Aucun contact enregistré.",                "Nenhum contato salvo.",                    "Keine gespeicherten Kontakte."],
 
-        // Finestra impostazioni
+        // Settings window
         ["settings.title"]        = ["Impostazioni",                                                      "Settings",                     "Configuración",                        "Paramètres",                               "Configurações",                            "Einstellungen"],
         ["settings.language"]     = ["Lingua",                                                            "Language",                     "Idioma",                               "Langue",                                   "Idioma",                                   "Sprache"],
         ["settings.unit"]         = ["Unità degli importi",                                               "Amount unit",                  "Unidad de importes",                   "Unité des montants",                       "Unidade dos valores",                      "Betrageinheit"],
@@ -363,7 +421,7 @@ public sealed class Loc
         ["settings.cancel"]       = ["Annulla",                                                           "Cancel",                       "Cancelar",                             "Annuler",                                  "Cancelar",                                 "Abbrechen"],
         ["settings.server"]       = ["Server di indicizzazione…",                                         "Indexing server…",             "Servidor de indexación…",              "Serveur d'indexation…",                    "Servidor de indexação…",                   "Indexierungsserver…"],
 
-        // Finestra server
+        // Server window
         ["server.title"]          = ["Server di indicizzazione",                                          "Indexing server",              "Servidor de indexación",               "Serveur d'indexation",                     "Servidor de indexação",                    "Indexierungsserver"],
         ["server.host"]           = ["Host",                                                              "Host",                         "Host",                                 "Hôte",                                     "Host",                                     "Host"],
         ["server.port"]           = ["Porta",                                                             "Port",                         "Puerto",                               "Port",                                     "Porta",                                    "Port"],

src/App/Services/PlatformServices.cs

@@ -4,14 +4,14 @@ using System.Threading.Tasks;
 namespace PalladiumWallet.App.Services;
 
 /// <summary>
-/// Seam per servizi specifici della piattaforma (Android/desktop).
+/// Seam for platform-specific services (Android/desktop).
-/// Il head Android imposta i delegate in OnCreate; desktop li lascia null.
+/// The Android head sets the delegates in OnCreate; desktop leaves them null.
 /// </summary>
 public static class PlatformServices
 {
     /// <summary>
-    /// Apre lo scanner QR nativo e restituisce il testo raw del codice,
+    /// Opens the native QR scanner and returns the raw code text,
-    /// oppure null se l'utente annulla o lo scanner non è disponibile.
+    /// or null if the user cancels or the scanner is unavailable.
     /// </summary>
     public static Func<Task<string?>>? ScanQrAsync { get; set; }
 }

src/App/Styles/Controls.axaml

@@ -0,0 +1,172 @@
+<Styles xmlns="https://github.com/avaloniaui"
+        xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml">
+    <!-- ============================================================
+         Palladium wallet control styles ("clean fintech").
+         Applied on top of FluentTheme: refine spacing, states and
+         reusable classes without re-templating controls. The "accent"
+         buttons remain managed by Fluent but inherit the brand blue
+         via SystemAccentColor (see Theme.axaml).
+         ============================================================ -->
+
+    <Design.PreviewWith>
+        <Border Padding="20" Width="320">
+            <StackPanel Spacing="12">
+                <TextBlock Classes="h1" Text="Saldo disponibile"/>
+                <TextBlock Classes="amount" Text="1 234,56 PLM"/>
+                <Button Classes="accent" Content="Invia"/>
+                <Button Content="Annulla"/>
+                <Border Classes="card" Padding="16">
+                    <TextBlock Text="Card di esempio"/>
+                </Border>
+            </StackPanel>
+        </Border>
+    </Design.PreviewWith>
+
+    <!-- ===== Typography ===== -->
+    <Style Selector="TextBlock.h1">
+        <Setter Property="FontSize" Value="20"/>
+        <Setter Property="FontWeight" Value="SemiBold"/>
+        <Setter Property="Foreground" Value="{DynamicResource TextPrimaryBrush}"/>
+    </Style>
+    <Style Selector="TextBlock.label">
+        <Setter Property="FontSize" Value="11"/>
+        <Setter Property="FontWeight" Value="Medium"/>
+        <Setter Property="Foreground" Value="{DynamicResource TextSecondaryBrush}"/>
+    </Style>
+    <Style Selector="TextBlock.muted">
+        <Setter Property="Foreground" Value="{DynamicResource TextSecondaryBrush}"/>
+    </Style>
+    <!-- Amounts and numeric data: tabular figures to prevent layout jumps -->
+    <Style Selector="TextBlock.amount">
+        <Setter Property="FontSize" Value="34"/>
+        <Setter Property="FontWeight" Value="Bold"/>
+        <Setter Property="Foreground" Value="{DynamicResource TextPrimaryBrush}"/>
+        <Setter Property="FontFeatures" Value="+tnum"/>
+    </Style>
+    <Style Selector="TextBlock.mono, SelectableTextBlock.mono">
+        <Setter Property="FontFamily" Value="monospace"/>
+        <Setter Property="FontFeatures" Value="+tnum"/>
+    </Style>
+    <!-- Section heading (e.g. transaction detail) -->
+    <Style Selector="TextBlock.section">
+        <Setter Property="FontSize" Value="11"/>
+        <Setter Property="FontWeight" Value="SemiBold"/>
+        <Setter Property="Foreground" Value="{DynamicResource TextMutedBrush}"/>
+        <Setter Property="LetterSpacing" Value="0.8"/>
+    </Style>
+
+    <!-- ===== Buttons ===== -->
+    <Style Selector="Button">
+        <Setter Property="MinHeight" Value="36"/>
+        <Setter Property="Padding" Value="14,8"/>
+        <Setter Property="Cursor" Value="Hand"/>
+        <Setter Property="FontWeight" Value="Medium"/>
+        <Setter Property="VerticalContentAlignment" Value="Center"/>
+        <Setter Property="HorizontalContentAlignment" Value="Center"/>
+    </Style>
+    <!-- Accent (CTA) buttons are already blue via Fluent+SystemAccentColor.
+         Ensure readable white text in both light and dark variants. -->
+    <Style Selector="Button.accent">
+        <Setter Property="Foreground" Value="#FFFFFF"/>
+    </Style>
+    <!-- "ghost" variant: subtle secondary action, no fill -->
+    <Style Selector="Button.ghost">
+        <Setter Property="Background" Value="Transparent"/>
+        <Setter Property="Foreground" Value="{DynamicResource PrimaryBrush}"/>
+        <Setter Property="BorderThickness" Value="0"/>
+    </Style>
+
+    <!-- ===== Inputs ===== -->
+    <Style Selector="TextBox">
+        <Setter Property="MinHeight" Value="36"/>
+        <Setter Property="Padding" Value="10,7"/>
+    </Style>
+    <Style Selector="ComboBox">
+        <Setter Property="MinHeight" Value="36"/>
+        <Setter Property="Padding" Value="10,6"/>
+    </Style>
+
+    <!-- ===== Lists ===== -->
+    <Style Selector="ListBox">
+        <Setter Property="Background" Value="Transparent"/>
+        <Setter Property="BorderThickness" Value="0"/>
+        <Setter Property="Padding" Value="0"/>
+    </Style>
+    <Style Selector="ListBoxItem">
+        <Setter Property="Padding" Value="12,10"/>
+        <Setter Property="CornerRadius" Value="8"/>
+        <Setter Property="Margin" Value="0,1"/>
+    </Style>
+    <!-- Hover: neutral tint; selected: subtle brand-blue tint -->
+    <Style Selector="ListBoxItem:pointerover /template/ ContentPresenter#PART_ContentPresenter">
+        <Setter Property="Background" Value="{DynamicResource SurfaceAltBrush}"/>
+    </Style>
+    <Style Selector="ListBoxItem:selected /template/ ContentPresenter#PART_ContentPresenter">
+        <Setter Property="Background" Value="{DynamicResource PrimarySoftBrush}"/>
+    </Style>
+
+    <!-- ===== Tabs (dashboard) ===== -->
+    <!-- Selected item: brand blue + bold; unselected: muted -->
+    <Style Selector="TabItem">
+        <Setter Property="Foreground" Value="{DynamicResource TextSecondaryBrush}"/>
+        <Setter Property="FontWeight" Value="Medium"/>
+    </Style>
+    <Style Selector="TabItem:selected">
+        <Setter Property="Foreground" Value="{DynamicResource PrimaryBrush}"/>
+    </Style>
+    <Style Selector="TabItem:selected /template/ ContentPresenter#PART_ContentPresenter">
+        <Setter Property="TextElement.Foreground" Value="{DynamicResource PrimaryBrush}"/>
+    </Style>
+    <!-- Push tab header content up so the 2px selection indicator (drawn at Panel bottom)
+         does not overlap the text label. -->
+    <Style Selector="TabItem /template/ ContentPresenter#PART_ContentPresenter">
+        <Setter Property="Margin" Value="0,0,0,4"/>
+    </Style>
+
+    <!-- ===== Reusable classes ===== -->
+    <!-- Card: elevated surface with a subtle border and soft corners -->
+    <Style Selector="Border.card">
+        <Setter Property="Background" Value="{DynamicResource SurfaceBrush}"/>
+        <Setter Property="BorderBrush" Value="{DynamicResource BorderSubtleBrush}"/>
+        <Setter Property="BorderThickness" Value="1"/>
+        <Setter Property="CornerRadius" Value="14"/>
+        <Setter Property="BoxShadow" Value="0 1 3 0 #14000000"/>
+        <Setter Property="Transitions">
+            <Transitions>
+                <BoxShadowsTransition Property="BoxShadow" Duration="0:0:0.18"/>
+            </Transitions>
+        </Setter>
+    </Style>
+    <Style Selector="Border.card:pointerover">
+        <Setter Property="BoxShadow" Value="0 6 16 -4 #26000000"/>
+    </Style>
+    <!-- Balance card: subtle blue accent, slightly more prominent -->
+    <Style Selector="Border.balance-card">
+        <Setter Property="Background" Value="{DynamicResource SurfaceBrush}"/>
+        <Setter Property="BorderBrush" Value="{DynamicResource BorderSubtleBrush}"/>
+        <Setter Property="BorderThickness" Value="1"/>
+        <Setter Property="CornerRadius" Value="14"/>
+        <Setter Property="Padding" Value="20,16"/>
+        <Setter Property="BoxShadow" Value="0 2 8 0 #1A000000"/>
+    </Style>
+    <!-- Hero balance card: brand gradient + blue glow. Signature dashboard
+         element; overlaid text is white (on-hero class). -->
+    <Style Selector="Border.balance-hero">
+        <Setter Property="Background" Value="{DynamicResource BalanceGradientBrush}"/>
+        <Setter Property="CornerRadius" Value="16"/>
+        <Setter Property="Padding" Value="24,20"/>
+        <Setter Property="BoxShadow" Value="0 8 24 -6 #663B82F6"/>
+    </Style>
+    <Style Selector="Border.balance-hero TextBlock.amount">
+        <Setter Property="Foreground" Value="#FFFFFF"/>
+    </Style>
+    <Style Selector="Border.balance-hero TextBlock.on-hero">
+        <Setter Property="Foreground" Value="#D6E2FF"/>
+    </Style>
+    <!-- Status pill / badge -->
+    <Style Selector="Border.chip">
+        <Setter Property="CornerRadius" Value="20"/>
+        <Setter Property="Padding" Value="10,5"/>
+        <Setter Property="Background" Value="{DynamicResource SurfaceAltBrush}"/>
+    </Style>
+</Styles>

src/App/Styles/Theme.axaml

@@ -0,0 +1,96 @@
+<ResourceDictionary xmlns="https://github.com/avaloniaui"
+                    xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml">
+    <!-- ============================================================
+         Palladium wallet design tokens.
+         Identity: cobalt blue (trust) + green (money/positive),
+         derived from the logo. "Clean fintech" style.
+
+         All colors are SEMANTIC (role, not name): components
+         must never use inline hex but these brushes. Defined for
+         both variants (light/dark) via ThemeDictionaries, so
+         the app follows the system theme with no further configuration.
+         ============================================================ -->
+
+    <ResourceDictionary.ThemeDictionaries>
+
+        <!-- ============ LIGHT THEME ============ -->
+        <ResourceDictionary x:Key="Light">
+            <!-- Surfaces -->
+            <SolidColorBrush x:Key="AppBackgroundBrush" Color="#F1F5F9"/>     <!-- slate-100 -->
+            <SolidColorBrush x:Key="SurfaceBrush"        Color="#FFFFFF"/>
+            <SolidColorBrush x:Key="SurfaceAltBrush"     Color="#F8FAFC"/>     <!-- slate-50 -->
+            <SolidColorBrush x:Key="OverlayCardBrush"    Color="#FFFFFF"/>
+            <SolidColorBrush x:Key="ScrimBrush"          Color="#66000000"/>   <!-- 40% -->
+            <!-- Borders and separators -->
+            <SolidColorBrush x:Key="BorderSubtleBrush"   Color="#E2E8F0"/>     <!-- slate-200 -->
+            <SolidColorBrush x:Key="BorderStrongBrush"   Color="#CBD5E1"/>     <!-- slate-300 -->
+            <!-- Text -->
+            <SolidColorBrush x:Key="TextPrimaryBrush"    Color="#0F172A"/>     <!-- slate-900 -->
+            <SolidColorBrush x:Key="TextSecondaryBrush"  Color="#475569"/>     <!-- slate-600 -->
+            <SolidColorBrush x:Key="TextMutedBrush"      Color="#94A3B8"/>     <!-- slate-400 -->
+            <!-- Brand / state -->
+            <SolidColorBrush x:Key="PrimaryBrush"        Color="#2563EB"/>     <!-- blue-600 -->
+            <SolidColorBrush x:Key="PrimaryHoverBrush"   Color="#1D4ED8"/>     <!-- blue-700 -->
+            <SolidColorBrush x:Key="OnPrimaryBrush"      Color="#FFFFFF"/>
+            <SolidColorBrush x:Key="PrimarySoftBrush"    Color="#EFF6FF"/>     <!-- blue-50 -->
+            <SolidColorBrush x:Key="SuccessBrush"        Color="#16A34A"/>     <!-- green-600 -->
+            <SolidColorBrush x:Key="WarningBrush"        Color="#D97706"/>     <!-- amber-600 -->
+            <SolidColorBrush x:Key="DangerBrush"         Color="#DC2626"/>     <!-- red-600 -->
+            <!-- Hero gradient of the balance card: blue → indigo -->
+            <LinearGradientBrush x:Key="BalanceGradientBrush" StartPoint="0%,0%" EndPoint="100%,100%">
+                <GradientStop Offset="0" Color="#2563EB"/>
+                <GradientStop Offset="1" Color="#4F46E5"/>
+            </LinearGradientBrush>
+        </ResourceDictionary>
+
+        <!-- ============ DARK THEME ============ -->
+        <ResourceDictionary x:Key="Dark">
+            <!-- Surfaces -->
+            <SolidColorBrush x:Key="AppBackgroundBrush" Color="#0F172A"/>      <!-- slate-900 -->
+            <SolidColorBrush x:Key="SurfaceBrush"        Color="#1E293B"/>     <!-- slate-800 -->
+            <SolidColorBrush x:Key="SurfaceAltBrush"     Color="#273449"/>
+            <SolidColorBrush x:Key="OverlayCardBrush"    Color="#1E293B"/>
+            <SolidColorBrush x:Key="ScrimBrush"          Color="#99000000"/>   <!-- 60% -->
+            <!-- Borders and separators -->
+            <SolidColorBrush x:Key="BorderSubtleBrush"   Color="#334155"/>     <!-- slate-700 -->
+            <SolidColorBrush x:Key="BorderStrongBrush"   Color="#475569"/>     <!-- slate-600 -->
+            <!-- Text -->
+            <SolidColorBrush x:Key="TextPrimaryBrush"    Color="#F8FAFC"/>     <!-- slate-50 -->
+            <SolidColorBrush x:Key="TextSecondaryBrush"  Color="#94A3B8"/>     <!-- slate-400 -->
+            <SolidColorBrush x:Key="TextMutedBrush"      Color="#64748B"/>     <!-- slate-500 -->
+            <!-- Brand / state (brighter tones on dark background) -->
+            <SolidColorBrush x:Key="PrimaryBrush"        Color="#3B82F6"/>     <!-- blue-500 -->
+            <SolidColorBrush x:Key="PrimaryHoverBrush"   Color="#60A5FA"/>     <!-- blue-400 -->
+            <SolidColorBrush x:Key="OnPrimaryBrush"      Color="#0B1120"/>
+            <SolidColorBrush x:Key="PrimarySoftBrush"    Color="#1E3A8A"/>     <!-- blue-900 -->
+            <SolidColorBrush x:Key="SuccessBrush"        Color="#22C55E"/>     <!-- green-500 -->
+            <SolidColorBrush x:Key="WarningBrush"        Color="#F59E0B"/>     <!-- amber-500 -->
+            <SolidColorBrush x:Key="DangerBrush"         Color="#EF4444"/>     <!-- red-500 -->
+            <!-- Hero gradient of the balance card: blue → indigo (deeper tones) -->
+            <LinearGradientBrush x:Key="BalanceGradientBrush" StartPoint="0%,0%" EndPoint="100%,100%">
+                <GradientStop Offset="0" Color="#1D4ED8"/>
+                <GradientStop Offset="1" Color="#4338CA"/>
+            </LinearGradientBrush>
+        </ResourceDictionary>
+
+    </ResourceDictionary.ThemeDictionaries>
+
+    <!-- ============================================================
+         Override of the Fluent accent → brand blue. Recolors
+         consistently the controls that read SystemAccentColor (accent
+         buttons, selections, tab indicator, focus) without retemplating anything.
+         Variant-independent: #2563EB works on light and dark.
+         ============================================================ -->
+    <Color x:Key="SystemAccentColor">#2563EB</Color>
+    <Color x:Key="SystemAccentColorDark1">#1D4ED8</Color>
+    <Color x:Key="SystemAccentColorDark2">#1E40AF</Color>
+    <Color x:Key="SystemAccentColorDark3">#1E3A8A</Color>
+    <Color x:Key="SystemAccentColorLight1">#3B82F6</Color>
+    <Color x:Key="SystemAccentColorLight2">#60A5FA</Color>
+    <Color x:Key="SystemAccentColorLight3">#93C5FD</Color>
+
+    <!-- Global Fluent control corner radii: rounds buttons, inputs, combos,
+         and lists uniformly without retemplating each control. -->
+    <CornerRadius x:Key="ControlCornerRadius">8</CornerRadius>
+    <CornerRadius x:Key="OverlayCornerRadius">12</CornerRadius>
+</ResourceDictionary>

src/App/ViewModels/BoolToTabPlacementConverter.cs

@@ -6,8 +6,8 @@ using Avalonia.Data.Converters;
 namespace PalladiumWallet.App.ViewModels;
 
 /// <summary>
-/// true (mobile) → Dock.Bottom — tab strip in basso, standard Android.
+/// true (mobile) → Dock.Bottom — tab strip at the bottom, Android standard.
-/// false (desktop) → Dock.Top — comportamento predefinito Avalonia.
+/// false (desktop) → Dock.Top — Avalonia default behavior.
 /// </summary>
 public sealed class BoolToTabPlacementConverter : IValueConverter
 {

src/App/ViewModels/MainWindowViewModel.Contacts.cs

@@ -13,7 +13,7 @@ public partial class MainWindowViewModel
     [ObservableProperty]
     private ContactEntry? selectedContactInList;
 
-    /// <summary>Contatto selezionato nella ComboBox del pannello Invia: riempie SendTo.</summary>
+    /// <summary>Contact selected in the Send panel's ComboBox: fills SendTo.</summary>
     [ObservableProperty]
     private ContactEntry? sendToContact;
 

src/App/ViewModels/MainWindowViewModel.Donate.cs

@@ -0,0 +1,96 @@
+using System;
+using System.Threading.Tasks;
+using CommunityToolkit.Mvvm.ComponentModel;
+using CommunityToolkit.Mvvm.Input;
+using NBitcoin;
+using PalladiumWallet.Core.Chain;
+using PalladiumWallet.Core.Net;
+using PalladiumWallet.Core.Wallet;
+
+namespace PalladiumWallet.App.ViewModels;
+
+public partial class MainWindowViewModel
+{
+    public const string DevAddress = "plm1qdq3gu2zvg9lyr8gxd6yln4wavc5tlp8prmvfay";
+
+    [ObservableProperty]
+    private string donateAmount = "";
+
+    [ObservableProperty]
+    private string donatePreview = "";
+
+    [ObservableProperty]
+    private bool hasPendingDonate;
+
+    private BuiltTransaction? _pendingDonate;
+
+    [RelayCommand]
+    private async Task PrepareDonate()
+    {
+        _pendingDonate = null;
+        HasPendingDonate = false;
+
+        if (_account is null || _doc?.Cache is null || _lastTransactions is null)
+        {
+            DonatePreview = "Sincronizza prima di inviare.";
+            return;
+        }
+        try
+        {
+            var destination = BitcoinAddress.Create(DevAddress, PalladiumNetworks.For(Net));
+            if (!CoinAmount.TryParseIn(DonateAmount.Trim(), _config.Unit, out var amount) || amount <= 0)
+            {
+                DonatePreview = "Importo non valido.";
+                return;
+            }
+            if (!decimal.TryParse(SendFeeRate, System.Globalization.NumberStyles.Any,
+                    System.Globalization.CultureInfo.InvariantCulture, out var feeRate) || feeRate <= 0)
+                feeRate = 1m;
+
+            _pendingDonate = new TransactionFactory(_account).Build(
+                _doc.Cache.Utxos, _lastTransactions, destination, amount, feeRate,
+                _doc.Cache.NextChangeIndex, _doc.Cache.TipHeight, sendAll: false);
+
+            DonatePreview = $"txid {_pendingDonate.Txid[..16]}… · " +
+                $"fee {Fmt(_pendingDonate.Fee.Satoshi)} " +
+                $"({_pendingDonate.Transaction.GetVirtualSize()} vB)" +
+                (_pendingDonate.Signed ? "" : " · watch-only");
+            HasPendingDonate = _pendingDonate.Signed;
+        }
+        catch (Exception ex)
+        {
+            _pendingDonate = null;
+            HasPendingDonate = false;
+            DonatePreview = $"Errore: {ex.Message}";
+        }
+        await Task.CompletedTask;
+    }
+
+    [RelayCommand]
+    private async Task ConfirmDonate()
+    {
+        if (_pendingDonate is null || _client is null)
+            return;
+        try
+        {
+            var txid = await _client.BroadcastAsync(_pendingDonate.ToHex());
+            DonatePreview = $"Grazie! txid: {txid}";
+            DonateAmount = "";
+            _pendingDonate = null;
+            HasPendingDonate = false;
+            await ConnectAndSync();
+        }
+        catch (Exception ex)
+        {
+            DonatePreview = $"Errore broadcast: {ex.Message}";
+        }
+    }
+
+    private void ResetDonate()
+    {
+        DonateAmount = "";
+        DonatePreview = "";
+        HasPendingDonate = false;
+        _pendingDonate = null;
+    }
+}

src/App/ViewModels/MainWindowViewModel.Receive.cs

@@ -17,7 +17,7 @@ namespace PalladiumWallet.App.ViewModels;
 
 public partial class MainWindowViewModel
 {
-    // ---- saldo e info wallet ----
+    // ---- balance and wallet info ----
 
     [ObservableProperty]
     private string balanceText = "—";
@@ -25,10 +25,13 @@ public partial class MainWindowViewModel
     [ObservableProperty]
     private string unconfirmedText = "";
 
+    [ObservableProperty]
+    private string immatureText = "";
+
     [ObservableProperty]
     private string networkInfo = "";
 
-    // ---- indirizzo di ricezione e QR ----
+    // ---- receive address and QR ----
 
     [ObservableProperty]
     private string receiveAddress = "";
@@ -60,7 +63,7 @@ public partial class MainWindowViewModel
         }
     }
 
-    // ---- tab indirizzi ----
+    // ---- addresses tab ----
 
     [ObservableProperty]
     private AddressRow? selectedAddressRow;
@@ -68,13 +71,83 @@ public partial class MainWindowViewModel
     [ObservableProperty]
     private AddressInfo? addressInfo;
 
+    [ObservableProperty]
+    private bool isAddressPrivKeyRevealed;
+
+    // ---- private key password prompt ----
+
+    [ObservableProperty]
+    private bool isPrivKeyPromptOpen;
+
+    [ObservableProperty]
+    private string privKeyPromptPassword = "";
+
+    [ObservableProperty]
+    private string privKeyPromptError = "";
+
+    partial void OnAddressInfoChanged(AddressInfo? value)
+    {
+        IsAddressPrivKeyRevealed = false;
+        ClosePrivKeyPromptInternal();
+    }
+
+    private void ClosePrivKeyPromptInternal()
+    {
+        IsPrivKeyPromptOpen = false;
+        PrivKeyPromptPassword = "";
+        PrivKeyPromptError = "";
+    }
+
     public void ShowAddressInfo(AddressRow row) =>
         AddressInfo = new AddressInfo(Loc, row.Indirizzo, row.DerivPath, row.PubKey, row.PrivKey);
 
     [RelayCommand]
-    private void CloseAddressInfo() => AddressInfo = null;
+    private void CloseAddressInfo()
+    {
+        ClosePrivKeyPromptInternal();
+        AddressInfo = null;
+    }
 
-    // ---- overlay dettaglio transazione ----
+    [RelayCommand]
+    private void RequestPrivKeyReveal()
+    {
+        if (AddressInfo is null || !AddressInfo.HasPrivKey) return;
+        if (string.IsNullOrEmpty(_password))
+        {
+            // No encryption: reveal directly
+            IsAddressPrivKeyRevealed = true;
+        }
+        else
+        {
+            // Encrypted: open password prompt
+            PrivKeyPromptPassword = "";
+            PrivKeyPromptError = "";
+            IsPrivKeyPromptOpen = true;
+        }
+    }
+
+    [RelayCommand]
+    private void ConfirmPrivKeyPassword()
+    {
+        if (PrivKeyPromptPassword != _password)
+        {
+            PrivKeyPromptError = Loc.Tr("msg.wrongpassword");
+            return;
+        }
+        IsAddressPrivKeyRevealed = true;
+        ClosePrivKeyPromptInternal();
+    }
+
+    [RelayCommand]
+    private void CancelPrivKeyPrompt() => ClosePrivKeyPromptInternal();
+
+    [RelayCommand]
+    private void HideAddressPrivKey()
+    {
+        IsAddressPrivKeyRevealed = false;
+    }
+
+    // ---- transaction detail overlay ----
 
     [ObservableProperty]
     private bool isTxDetailsOpen;
@@ -169,7 +242,7 @@ public partial class MainWindowViewModel
         }
     }
 
-    // ---- aggiorna display dal risultato della sync ----
+    // ---- update display from the sync result ----
 
     private void ApplyCache(SyncCache? cache)
     {
@@ -179,6 +252,7 @@ public partial class MainWindowViewModel
         {
             BalanceText = $"0.00000000 {Profile.CoinUnit}";
             UnconfirmedText = "";
+            ImmatureText = "";
             ReceiveAddress = _account.GetReceiveAddress(0).ToString();
             History.Clear();
             Addresses.Clear();
@@ -191,19 +265,21 @@ public partial class MainWindowViewModel
                     $"m/{_doc!.AccountPath}/0/{i}"));
             return;
         }
-        BalanceText = Fmt(cache.ConfirmedSats);
+        BalanceText = Fmt(cache.ConfirmedSats - cache.ImmatureSats);
         var pending = cache.History.Where(t => t.Height <= 0).Sum(t => t.DeltaSats);
         UnconfirmedText = pending != 0
             ? $"{Loc.Tr("msg.pending")}: {(pending > 0 ? "+" : "")}{Fmt(pending)} — {Loc.Tr("msg.notspendable")}"
             : "";
+        ImmatureText = cache.ImmatureSats != 0
+            ? $"{Loc.Tr("msg.immature")}: {Fmt(cache.ImmatureSats)} — {Loc.Tr("msg.notspendable")}"
+            : "";
         ReceiveAddress = _account.GetReceiveAddress(cache.NextReceiveIndex).ToString();
         History.Clear();
         foreach (var tx in cache.History)
             History.Add(new HistoryRow(
                 tx.Height > 0 ? tx.Height.ToString() : "mempool",
                 (tx.DeltaSats >= 0 ? "+" : "") + Fmt(tx.DeltaSats, withLabel: false),
-                tx.Txid,
+                tx.Txid));
-                tx.Verified ? "✓ SPV" : "—"));
 
         Addresses.Clear();
         foreach (var a in cache.Addresses)

src/App/ViewModels/MainWindowViewModel.Send.cs

@@ -36,7 +36,7 @@ public partial class MainWindowViewModel
         if (PlatformServices.ScanQrAsync is not { } scan) return;
         var raw = await scan();
         if (string.IsNullOrWhiteSpace(raw)) return;
-        // Gestisce URI tipo "palladium:ADDRESS?amount=X" estraendo solo l'indirizzo
+        // Handle URIs like "palladium:ADDRESS?amount=X" — extract address only
         var address = raw.Contains(':') ? raw.Split(':')[1] : raw;
         if (address.Contains('?')) address = address.Split('?')[0];
         SendTo = address.Trim();
@@ -73,7 +73,7 @@ public partial class MainWindowViewModel
 
             _pendingSend = new TransactionFactory(_account).Build(
                 _doc.Cache.Utxos, _lastTransactions, destination, amount, feeRate,
-                _doc.Cache.NextChangeIndex, SendAll);
+                _doc.Cache.NextChangeIndex, _doc.Cache.TipHeight, SendAll);
 
             SendPreview = $"txid {_pendingSend.Txid[..16]}… · " +
                 $"fee {Fmt(_pendingSend.Fee.Satoshi)} " +

src/App/ViewModels/MainWindowViewModel.Settings.cs

@@ -70,5 +70,11 @@ public partial class MainWindowViewModel
     private void OpenHelp() => IsHelpOpen = true;
 
     [RelayCommand]
-    private void CloseHelp() => IsHelpOpen = false;
+    private static void QuitApp() =>
+        (Avalonia.Application.Current?.ApplicationLifetime
+            as Avalonia.Controls.ApplicationLifetimes.IClassicDesktopStyleApplicationLifetime)
+            ?.Shutdown();
+
+    [RelayCommand]
+    private void CloseHelp() { IsHelpOpen = false; ResetDonate(); }
 }

src/App/ViewModels/MainWindowViewModel.Sync.cs

@@ -2,6 +2,7 @@ using System;
 using System.Collections.Generic;
 using System.Collections.ObjectModel;
 using System.Linq;
+using System.Threading;
 using System.Threading.Tasks;
 using Avalonia.Threading;
 using CommunityToolkit.Mvvm.ComponentModel;
@@ -16,7 +17,7 @@ namespace PalladiumWallet.App.ViewModels;
 
 public partial class MainWindowViewModel
 {
-    // ---- server e connessione ----
+    // ---- server and connection ----
 
     [ObservableProperty]
     private string serverHost = "";
@@ -31,10 +32,13 @@ public partial class MainWindowViewModel
     private bool isServerSettingsOpen;
 
     [RelayCommand]
-    private void OpenServerSettings()
+    private async Task OpenServerSettings()
     {
         IsSettingsOpen = false;
+        RefreshServers();
         IsServerSettingsOpen = true;
+        if (_client is { IsConnected: true })
+            await DiscoverServers();
     }
 
     [RelayCommand]
@@ -43,12 +47,17 @@ public partial class MainWindowViewModel
     [ObservableProperty]
     private string connectionStatus = Loc.Tr("conn.none");
 
+    [ObservableProperty]
+    private string connectionStatusShort = Loc.Tr("conn.none");
+
     [ObservableProperty]
     private bool isConnected;
 
     [ObservableProperty]
     private bool isSyncing;
 
+    private CancellationTokenSource _syncCts = new();
+
     public ObservableCollection<KnownServer> KnownServers { get; } = [];
 
     [ObservableProperty]
@@ -100,6 +109,18 @@ public partial class MainWindowViewModel
         KnownServers.Clear();
         foreach (var server in Registry.All)
             KnownServers.Add(server);
+
+        if (_config.LastServerHost is { Length: > 0 } savedHost && _config.LastServerPort is { } savedPort)
+        {
+            _syncingServerFields = true;
+            UseSsl = _config.LastServerUseSsl;
+            ServerHost = savedHost;
+            ServerPort = savedPort.ToString();
+            SelectedKnownServer = KnownServers.FirstOrDefault(s => s.Host == savedHost);
+            _syncingServerFields = false;
+        }
+        else
+        {
             SelectedKnownServer = KnownServers.FirstOrDefault();
             if (SelectedKnownServer is null)
             {
@@ -107,6 +128,7 @@ public partial class MainWindowViewModel
                 ServerPort = (UseSsl ? Profile.DefaultSslPort : Profile.DefaultTcpPort).ToString();
             }
         }
+    }
 
     private (string Host, int Port) ParseServer()
     {
@@ -118,20 +140,20 @@ public partial class MainWindowViewModel
     }
 
     /// <summary>
-    /// Restituisce i server da provare in ordine: prima quello selezionato nella UI
+    /// Returns servers to try in order: first the one selected in the UI
-    /// (o digitato manualmente), poi gli altri in KnownServers, evitando duplicati.
+    /// (or manually typed), then the remaining KnownServers, with duplicates skipped.
     /// </summary>
     private IEnumerable<(string Host, int Port)> BuildServerCandidates(string selectedHost, int selectedPort)
     {
         var seen = new HashSet<string>(StringComparer.OrdinalIgnoreCase);
-        // 1. Server corrente (selezionato o digitato manualmente).
+        // 1. Current server (selected or manually typed).
         if (!string.IsNullOrWhiteSpace(selectedHost))
         {
             var key = $"{selectedHost}:{selectedPort}";
             if (seen.Add(key))
                 yield return (selectedHost, selectedPort);
         }
-        // 2. Altri server noti, in ordine di lista.
+        // 2. Other known servers, in list order.
         foreach (var s in KnownServers)
         {
             var p = s.PortFor(UseSsl);
@@ -146,11 +168,23 @@ public partial class MainWindowViewModel
     {
         if (IsSyncing)
         {
+            var (newHost, newPort) = ParseServer();
+            bool serverChanged = _client is null
+                || _client.Host != newHost
+                || _client.Port != newPort
+                || _client.UseSsl != UseSsl;
+            if (serverChanged)
+                _syncCts.Cancel();
+            else
                 _resyncRequested = true;
             return;
         }
+
+        _syncCts = new CancellationTokenSource();
+        var ct = _syncCts.Token;
         IsSyncing = true;
         StatusMessage = "";
+        bool cancelled = false;
         try
         {
             var (host, port) = ParseServer();
@@ -163,42 +197,55 @@ public partial class MainWindowViewModel
 
             if (_client is null || !_client.IsConnected)
             {
-                // Salva le cache prima di distruggere il synchronizer: il nuovo
+                // Persist caches before destroying the synchronizer: the new
-                // synchronizer userà un client diverso e deve essere ricreato,
+                // synchronizer will use a different client and must be recreated,
-                // ma i dati già scaricati vengono preservati via _doc.Cache.
+                // but already-downloaded data is preserved via _doc.Cache.
                 PersistPartialTxCache();
                 _synchronizer = null;
 
-                // Prova tutti i server noti in ordine; parte da quello selezionato
+                // Try all known servers in order; starts with the selected one
-                // e scorre la lista fino al primo che risponde.
+                // and walks the list until the first that responds.
                 var candidates = BuildServerCandidates(host, port);
                 Exception? lastError = null;
                 foreach (var (h, p) in candidates)
                 {
+                    ct.ThrowIfCancellationRequested();
                     ConnectionStatus = $"{Loc.Tr("conn.connectingto")} {h}:{p}…";
+                    ConnectionStatusShort = Loc.Tr("conn.connectingto") + "…";
                     try
                     {
                         var pins = new CertificatePinStore(AppPaths.CertificatePinsPath(Net));
-                        _client = await ElectrumClient.ConnectAsync(h, p, UseSsl, pins);
+                        _client = await ElectrumClient.ConnectAsync(h, p, UseSsl, pins, ct);
                         _client.NotificationReceived += OnServerNotification;
                         _client.Disconnected += _ => Dispatcher.UIThread.Post(() =>
                         {
                             IsConnected = false;
                             ConnectionStatus = Loc.Tr("conn.none");
+                            ConnectionStatusShort = Loc.Tr("conn.none");
                         });
                         IsConnected = true;
                         _autoReconnect = true;
-                        ConnectionStatus = Loc.Tr("conn.connectedto");
+                        ConnectionStatus = $"{Loc.Tr("conn.connectedto")} {h}:{p}";
-                        // Aggiorna la UI per riflettere il server effettivamente connesso.
+                        ConnectionStatusShort = Loc.Tr("conn.connectedto");
+                        // Update the UI to reflect the server actually connected.
                         _syncingServerFields = true;
                         ServerHost = h;
                         ServerPort = p.ToString();
                         SelectedKnownServer = KnownServers.FirstOrDefault(s => s.Host == h)
                             ?? SelectedKnownServer;
                         _syncingServerFields = false;
+                        // Persist the last-used server so it is restored on next launch.
+                        _config.LastServerHost = h;
+                        _config.LastServerPort = p;
+                        _config.LastServerUseSsl = UseSsl;
+                        _config.Save();
                         lastError = null;
                         break;
                     }
+                    catch (OperationCanceledException)
+                    {
+                        throw;
+                    }
                     catch (Exception ex)
                     {
                         lastError = ex;
@@ -215,12 +262,15 @@ public partial class MainWindowViewModel
             if (_synchronizer is null)
             {
                 _synchronizer = new WalletSynchronizer(_account, _client!, _doc.GapLimit);
-                // Ricarica dalla cache su disco: evita di riscaricale le tx già note
+                // Reload from disk cache: avoids re-downloading already known transactions
-                // (fondamentale per wallet con migliaia di tx storiche — previene -101).
+                // (essential for wallets with thousands of historical txs — prevents -101).
                 var net = PalladiumNetworks.For(_account.Profile.Kind);
                 _synchronizer.PreloadCaches(
                     _doc.Cache?.RawTxHex ?? [],
                     _doc.Cache?.VerifiedAt ?? [],
+                    _doc.Cache?.BlockHeaders,
+                    _doc.Cache?.NextReceiveIndex ?? 0,
+                    _doc.Cache?.NextChangeIndex ?? 0,
                     net);
                 _synchronizer.Progress += msg => Dispatcher.UIThread.Post(() => StatusMessage = msg);
             }
@@ -228,16 +278,17 @@ public partial class MainWindowViewModel
             do
             {
                 _resyncRequested = false;
-                var result = await _synchronizer.SyncOnceAsync();
+                var result = await _synchronizer.SyncOnceAsync(ct);
                 _lastTransactions = result.Transactions;
 
-                var (rawHex, verifiedAt) = _synchronizer.ExportCaches(
+                var (rawHex, verifiedAt, blockHeaders) = _synchronizer.ExportCaches(
                     PalladiumNetworks.For(_account.Profile.Kind));
                 _doc.Cache = new SyncCache
                 {
                     TipHeight = result.TipHeight,
                     ConfirmedSats = result.ConfirmedSats,
                     UnconfirmedSats = result.UnconfirmedSats,
+                    ImmatureSats = result.ImmatureSats,
                     NextReceiveIndex = result.NextReceiveIndex,
                     NextChangeIndex = result.NextChangeIndex,
                     History = [.. result.History],
@@ -245,30 +296,42 @@ public partial class MainWindowViewModel
                     Addresses = [.. result.AddressRows],
                     RawTxHex = rawHex,
                     VerifiedAt = verifiedAt,
+                    BlockHeaders = blockHeaders,
                 };
                 WalletStore.Save(_doc, _walletPath!, _password);
                 ApplyCache(_doc.Cache);
                 _syncFailed = false;
                 StatusMessage = $"{Loc.Tr("msg.synced")}: {Loc.Tr("msg.height")} {result.TipHeight}, " +
                     $"{result.History.Count} {Loc.Tr("msg.synced.detail")}";
-            } while (_resyncRequested);
+            } while (_resyncRequested && !ct.IsCancellationRequested);
+        }
+        catch (OperationCanceledException)
+        {
+            // Intentional cancellation due to server change request — not an error.
+            cancelled = true;
+            IsConnected = false;
+            ConnectionStatus = Loc.Tr("conn.none");
+            ConnectionStatusShort = Loc.Tr("conn.none");
+            StatusMessage = "";
         }
         catch (CertificatePinMismatchException ex)
         {
             IsConnected = false;
             ConnectionStatus = Loc.Tr("conn.none");
+            ConnectionStatusShort = Loc.Tr("conn.none");
             StatusMessage = ex.Message;
         }
         catch (Exception ex)
         {
             IsConnected = _client?.IsConnected == true;
             ConnectionStatus = IsConnected ? ConnectionStatus : Loc.Tr("conn.none");
+            ConnectionStatusShort = IsConnected ? Loc.Tr("conn.connectedto") : Loc.Tr("conn.none");
             StatusMessage = $"Errore: {ex.Message}";
             if (_account is not null)
             {
                 _syncFailed = true;
-                // Salva le tx già scaricate: al retry il synchronizer riparte
+                // Persist already-downloaded transactions: on retry the synchronizer
-                // da qui invece di ricominciare da zero (es. dopo -101).
+                // resumes from here instead of starting from scratch (e.g. after -101).
                 PersistPartialTxCache();
             }
         }
@@ -276,19 +339,63 @@ public partial class MainWindowViewModel
         {
             IsSyncing = false;
         }
+
+        // If cancelled due to a server change, restart immediately with the new server.
+        if (cancelled)
+            _ = ConnectAndSync();
     }
 
+    /// <summary>
+    /// Peer discovery. Always clickable: if the wallet is already connected, it reuses
+    /// that connection; otherwise it opens a short-lived connection to a candidate server
+    /// just to query its peer list, without touching the wallet's connection state.
+    /// </summary>
     [RelayCommand]
     private async Task DiscoverServers()
     {
-        if (_client is null || !_client.IsConnected)
+        if (_client is { IsConnected: true } connected)
         {
-            StatusMessage = Loc.Tr("conn.none") + ".";
+            await DiscoverServersUsing(connected);
+            return;
+        }
+
+        var (host, port) = ParseServer();
+        ElectrumClient? temp = null;
+        Exception? lastError = null;
+        foreach (var (h, p) in BuildServerCandidates(host, port))
+        {
+            try
+            {
+                var pins = new CertificatePinStore(AppPaths.CertificatePinsPath(Net));
+                temp = await ElectrumClient.ConnectAsync(h, p, UseSsl, pins);
+                lastError = null;
+                break;
+            }
+            catch (Exception ex)
+            {
+                lastError = ex;
+            }
+        }
+        if (temp is null)
+        {
+            StatusMessage = $"Errore nella scoperta peer: {lastError?.Message ?? Loc.Tr("conn.none")}";
             return;
         }
         try
         {
-            var added = await Registry.DiscoverAsync(_client);
+            await DiscoverServersUsing(temp);
+        }
+        finally
+        {
+            await temp.DisposeAsync();
+        }
+    }
+
+    private async Task DiscoverServersUsing(ElectrumClient client)
+    {
+        try
+        {
+            var added = await Registry.DiscoverAsync(client);
             var selected = SelectedKnownServer;
             RefreshServers();
             SelectedKnownServer = KnownServers.FirstOrDefault(s => s.Host == selected?.Host)
@@ -323,9 +430,9 @@ public partial class MainWindowViewModel
     }
 
     /// <summary>
-    /// Salva nel SyncCache le tx e le prove di Merkle già accumulate dal synchronizer,
+    /// Persists the transactions and Merkle proofs already accumulated by the synchronizer
-    /// anche se la sync non è ancora completa. Consente al retry successivo
+    /// into SyncCache, even if sync is not yet complete. Allows the next retry
-    /// (o al riavvio dell'app) di riprendere senza riscaricale da zero.
+    /// (or app restart) to resume without re-downloading from scratch.
     /// </summary>
     private void PersistPartialTxCache()
     {
@@ -334,14 +441,15 @@ public partial class MainWindowViewModel
         try
         {
             var net = PalladiumNetworks.For(_account.Profile.Kind);
-            var (rawHex, verifiedAt) = _synchronizer.ExportCaches(net);
+            var (rawHex, verifiedAt, blockHeaders) = _synchronizer.ExportCaches(net);
             if (rawHex.Count == 0 && verifiedAt.Count == 0)
                 return;
             (_doc.Cache ??= new SyncCache()).RawTxHex = rawHex;
             _doc.Cache.VerifiedAt = verifiedAt;
+            _doc.Cache.BlockHeaders = blockHeaders;
             WalletStore.Save(_doc, _walletPath, _password);
         }
-        catch { /* non fatale: il prossimo salvataggio completo recupererà */ }
+        catch { /* non-fatal: the next full save will recover */ }
     }
 
     private async Task DisconnectAsync()

src/App/ViewModels/MainWindowViewModel.Update.cs

@@ -0,0 +1,36 @@
+using System.Threading.Tasks;
+using CommunityToolkit.Mvvm.ComponentModel;
+using CommunityToolkit.Mvvm.Input;
+using PalladiumWallet.Core.Net;
+
+namespace PalladiumWallet.App.ViewModels;
+
+public partial class MainWindowViewModel
+{
+    // ---- update-available overlay ----
+
+    [ObservableProperty]
+    private bool isUpdateAvailableOpen;
+
+    [ObservableProperty]
+    private string updateAvailableTag = "";
+
+    public string UpdateReleaseUrl { get; private set; } = "";
+
+    [RelayCommand]
+    private void CloseUpdateAvailable() => IsUpdateAvailableOpen = false;
+
+    /// <summary>
+    /// Fire-and-forget check run once at startup. Best-effort: any failure or an
+    /// up-to-date app silently does nothing (see <see cref="UpdateChecker"/>).
+    /// </summary>
+    private async Task CheckForUpdatesAsync()
+    {
+        var latest = await UpdateChecker.CheckAsync(AppVersion);
+        if (latest is null) return;
+
+        UpdateReleaseUrl = latest.HtmlUrl;
+        UpdateAvailableTag = latest.Tag;
+        IsUpdateAvailableOpen = true;
+    }
+}

src/App/ViewModels/MainWindowViewModel.WalletInfo.cs

@@ -0,0 +1,114 @@
+using System.IO;
+using CommunityToolkit.Mvvm.ComponentModel;
+using CommunityToolkit.Mvvm.Input;
+using PalladiumWallet.App.Localization;
+
+namespace PalladiumWallet.App.ViewModels;
+
+public partial class MainWindowViewModel
+{
+    [ObservableProperty]
+    private bool isWalletInfoOpen;
+
+    [ObservableProperty]
+    private string walletInfoSeedPasswordInput = "";
+
+    [ObservableProperty]
+    private bool isWalletInfoSeedRevealed;
+
+    [ObservableProperty]
+    private string walletInfoSeedError = "";
+
+    // ---- computed wallet info (populated when overlay opens) ----
+
+    public string WalletInfoFileName =>
+        _walletPath is null ? "" :
+        Path.GetFileNameWithoutExtension(Path.GetFileNameWithoutExtension(_walletPath));
+
+    public string WalletInfoNetwork => _doc?.Network ?? "";
+
+    public string WalletInfoType
+    {
+        get
+        {
+            if (_doc is null) return "";
+            if (_doc.Mnemonic is not null) return Loc.Tr("walletinfo.type.seed");
+            if (_doc.AccountXprv is not null) return Loc.Tr("walletinfo.type.xprv");
+            if (_doc.WifKeys is { Count: > 0 }) return Loc.Tr("walletinfo.type.wif");
+            return Loc.Tr("walletinfo.type.watchonly");
+        }
+    }
+
+    public string WalletInfoScriptKind => _doc?.ScriptKind ?? "";
+
+    public string WalletInfoDerivPath => _doc?.AccountPath ?? "";
+
+    public string WalletInfoXpub => _doc?.AccountXpub ?? "";
+
+    public string WalletInfoFingerprint => _doc?.MasterFingerprint ?? "";
+
+    public bool WalletInfoHasSeed => _doc?.Mnemonic is not null;
+
+    public bool WalletInfoSeedNeedsPassword => !string.IsNullOrEmpty(_password);
+
+    public string WalletInfoSeedText => IsWalletInfoSeedRevealed ? (_doc?.Mnemonic ?? "") : "";
+
+    public bool WalletInfoHasPassphrase => !string.IsNullOrEmpty(_doc?.Passphrase);
+
+    [RelayCommand]
+    private void OpenWalletInfo()
+    {
+        WalletInfoSeedPasswordInput = "";
+        IsWalletInfoSeedRevealed = false;
+        WalletInfoSeedError = "";
+        OnPropertyChanged(nameof(WalletInfoFileName));
+        OnPropertyChanged(nameof(WalletInfoNetwork));
+        OnPropertyChanged(nameof(WalletInfoType));
+        OnPropertyChanged(nameof(WalletInfoScriptKind));
+        OnPropertyChanged(nameof(WalletInfoDerivPath));
+        OnPropertyChanged(nameof(WalletInfoXpub));
+        OnPropertyChanged(nameof(WalletInfoFingerprint));
+        OnPropertyChanged(nameof(WalletInfoHasSeed));
+        OnPropertyChanged(nameof(WalletInfoSeedNeedsPassword));
+        OnPropertyChanged(nameof(WalletInfoHasPassphrase));
+        IsWalletInfoOpen = true;
+    }
+
+    [RelayCommand]
+    private void CloseWalletInfo()
+    {
+        IsWalletInfoOpen = false;
+        WalletInfoSeedPasswordInput = "";
+        IsWalletInfoSeedRevealed = false;
+        WalletInfoSeedError = "";
+        OnPropertyChanged(nameof(WalletInfoSeedText));
+    }
+
+    [RelayCommand]
+    private void RevealSeed()
+    {
+        if (_doc?.Mnemonic is null) return;
+
+        if (WalletInfoSeedNeedsPassword)
+        {
+            if (WalletInfoSeedPasswordInput != _password)
+            {
+                WalletInfoSeedError = Loc.Tr("msg.wrongpassword");
+                return;
+            }
+        }
+
+        WalletInfoSeedError = "";
+        IsWalletInfoSeedRevealed = true;
+        OnPropertyChanged(nameof(WalletInfoSeedText));
+    }
+
+    [RelayCommand]
+    private void HideSeed()
+    {
+        IsWalletInfoSeedRevealed = false;
+        WalletInfoSeedPasswordInput = "";
+        WalletInfoSeedError = "";
+        OnPropertyChanged(nameof(WalletInfoSeedText));
+    }
+}

src/App/ViewModels/MainWindowViewModel.Wizard.cs

@@ -14,7 +14,7 @@ namespace PalladiumWallet.App.ViewModels;
 
 public partial class MainWindowViewModel
 {
-    // ---- wizard di setup
+    // ---- setup wizard
 
     public const string StepDataLocation = "data-location";
     public const string StepStart = "start";
@@ -85,7 +85,7 @@ public partial class MainWindowViewModel
     [ObservableProperty]
     private string importWifInput = "";
 
-    // Tipo di script rilevato durante la decodifica dell'xkey (per mostrarlo all'utente)
+    // Script type detected during xkey decoding (to display to the user)
     [ObservableProperty]
     private string importXkeyDetectedKind = "";
 
@@ -268,7 +268,7 @@ public partial class MainWindowViewModel
             StatusMessage = Loc.Tr("msg.xkey.required");
             return;
         }
-        // Valida e rileva il tipo: prova prima come xpub, poi come xprv.
+        // Validate and detect the type: try as xpub first, then as xprv.
         if (Slip132.TryDecodePublic(ImportXkeyInput.Trim(), Profile, out _, out var pubKind))
         {
             SelectedScriptKind = pubKind;
@@ -298,7 +298,7 @@ public partial class MainWindowViewModel
             StatusMessage = Loc.Tr("msg.wif.required");
             return;
         }
-        // Valida il WIF con un parsing anticipato.
+        // Validate the WIF with an early parse.
         try
         {
             _ = new NBitcoin.BitcoinSecret(ImportWifInput.Trim(), PalladiumNetworks.For(Net));
@@ -421,9 +421,9 @@ public partial class MainWindowViewModel
     }
 
     /// <summary>
-    /// Costruisce il percorso file dal nome inserito dall'utente.
+    /// Builds the file path from the name entered by the user.
-    /// Se il nome è vuoto genera un nome automatico (default, wallet-2, …).
+    /// If the name is empty, generates an automatic name (default, wallet-2, …).
-    /// Rimuove i caratteri non validi per il filesystem.
+    /// Removes characters that are invalid for the filesystem.
     /// </summary>
     private string WalletPathFromName(string name)
     {
@@ -435,7 +435,7 @@ public partial class MainWindowViewModel
 
         if (string.IsNullOrEmpty(clean))
         {
-            // Nessun nome → nome automatico
+            // No name provided → auto-generated name
             var def = AppPaths.DefaultWalletPath(Net);
             for (var n = 2; WalletStore.Exists(def); n++)
                 def = Path.Combine(AppPaths.WalletsDir(Net), $"wallet-{n}.wallet.json");
@@ -477,41 +477,6 @@ public partial class MainWindowViewModel
         }
     }
 
-    public void OpenFromPath(string path)
-    {
-        var newLock = WalletLock.TryAcquire(path);
-        if (newLock is null) { StatusMessage = Loc.Tr("msg.wallet.locked"); return; }
-
-        try
-        {
-            var doc = WalletStore.Load(path);
-            if (IsWalletOpen)
-                CloseWallet();
-            OpenLoaded(doc, WalletLoader.ToAccount(doc), path, password: null, newLock);
-        }
-        catch (WrongPasswordException)
-        {
-            newLock.Dispose();
-            if (IsWalletOpen)
-                CloseWallet();
-            _pendingOpenPath = path;
-            WalletFileExists = true;
-            PasswordInput = "";
-            SetupStep = StepOpen;
-            StatusMessage = "";
-        }
-        catch (UnauthorizedAccessException)
-        {
-            newLock.Dispose();
-            StatusMessage = Loc.Tr("msg.wallet.noaccess");
-        }
-        catch (Exception ex)
-        {
-            newLock.Dispose();
-            StatusMessage = $"Errore: {ex.Message}";
-        }
-    }
-
     [RelayCommand]
     private void NewWallet()
     {
@@ -547,8 +512,8 @@ public partial class MainWindowViewModel
         ApplyCache(doc.Cache);
         IsWalletOpen = true;
         StatusMessage = Loc.Tr("msg.opened");
-        _autoReconnect = true;  // keepalive riprova la connessione anche se il primo tentativo fallisce
+        _autoReconnect = true;  // keepalive retries the connection even if the first attempt fails
-        _syncFailed = true;     // forza la prima sync automatica
+        _syncFailed = true;     // force the first automatic sync
         _ = ConnectAndSync();
     }
 }

src/App/ViewModels/MainWindowViewModel.cs

@@ -16,10 +16,10 @@ using PalladiumWallet.Core.Wallet;
 
 namespace PalladiumWallet.App.ViewModels;
 
-/// <summary>Riga dello storico transazioni per la vista.</summary>
+/// <summary>Transaction history row for the view.</summary>
-public sealed record HistoryRow(string Conferma, string Importo, string Txid, string Verificata);
+public sealed record HistoryRow(string Conferma, string Importo, string Txid);
 
-/// <summary>Riga della vista indirizzi con chiavi e derivation path pre-calcolati.</summary>
+/// <summary>Address view row with pre-computed keys and derivation path.</summary>
 public sealed record AddressRow(
     string Tipo, int Indice, string Indirizzo, string Saldo, string NumTx,
     bool IsChange = false, string PubKey = "", string PrivKey = "", string DerivPath = "")
@@ -27,7 +27,7 @@ public sealed record AddressRow(
     public bool HasPrivKey => !string.IsNullOrEmpty(PrivKey);
 }
 
-/// <summary>Dati completi di un indirizzo passati alla finestra di dettaglio.</summary>
+/// <summary>Full address data passed to the address detail overlay.</summary>
 public sealed record AddressInfo(
     Loc Loc,
     string Address, string DerivPath, string PubKey, string PrivKey)
@@ -35,38 +35,38 @@ public sealed record AddressInfo(
     public bool HasPrivKey => !string.IsNullOrEmpty(PrivKey);
 }
 
-/// <summary>Contatto in rubrica: nome + indirizzo blockchain.</summary>
+/// <summary>Address book contact: name + blockchain address.</summary>
 public sealed record ContactEntry(string Name, string Address);
 
-/// <summary>Voce della lista di scelta wallet: nome file + percorso completo.</summary>
+/// <summary>Wallet list entry: display name + full file path.</summary>
 public sealed record WalletFileEntry(string Name, string Path);
 
 /// <summary>
-/// ViewModel unico dell'applicazione (wizard + dashboard). Suddiviso in file
+/// Single application ViewModel (wizard + dashboard). Split into partial files
-/// partial per area: Wizard, Settings, Sync, Send, Contacts, Receive.
+/// by area: Wizard, Settings, Sync, Send, Contacts, Receive.
 /// </summary>
 public partial class MainWindowViewModel : ViewModelBase
 {
-    // ---- stato sessione wallet ----
+    // ---- wallet session state ----
     private WalletDocument? _doc;
     private IWalletAccount? _account;
     private string? _walletPath;
     private string? _password;
     private WalletLock? _walletLock;
 
-    // ---- rete ----
+    // ---- network ----
     private ElectrumClient? _client;
     private WalletSynchronizer? _synchronizer;
     private IReadOnlyDictionary<string, Transaction>? _lastTransactions;
     private bool _resyncRequested;
 
-    // ---- invio ----
+    // ---- send ----
     private BuiltTransaction? _pendingSend;
 
-    // ---- dettaglio transazione ----
+    // ---- transaction detail ----
     private CancellationTokenSource? _txDetailsCts;
 
-    // ---- configurazione e localizzazione ----
+    // ---- configuration and localisation ----
     private AppConfig _config = AppConfig.Load();
     private Loc _loc = Loc.Instance;
     public Loc Loc => _loc;
@@ -82,7 +82,7 @@ public partial class MainWindowViewModel : ViewModelBase
     // ---- server UI sync ----
     private bool _syncingServerFields;
 
-    // ---- proprietà di app ----
+    // ---- app properties ----
 
     public static string AppVersion =>
         typeof(MainWindowViewModel).Assembly.GetName().Version is { } v
@@ -91,15 +91,20 @@ public partial class MainWindowViewModel : ViewModelBase
 
     public string WindowTitle => $"Palladium Wallet {AppVersion}";
 
-    /// <summary>true su desktop; false su Android/iOS — nasconde le funzioni legate al filesystem libero.</summary>
+    /// <summary>True on desktop; false on Android/iOS — hides filesystem-dependent features.</summary>
     public bool IsDesktop => !OperatingSystem.IsAndroid() && !OperatingSystem.IsIOS();
 
     public bool IsMobile => !IsDesktop;
 
+    // Tab bar sizing: compact on mobile so all 5 tabs fit in one row.
+    public double TabIconSize  => IsMobile ? 20 : 24;
+    public double TabFontSize  => IsMobile ? 10 : 13;
+    public double TabSpacing   => IsMobile ? 4  : 4;
+
     public string UnitLabel => _config.Unit;
     public AppConfig CurrentConfig => _config;
 
-    // ---- stato pannelli ----
+    // ---- panel state ----
 
     [ObservableProperty]
     [NotifyPropertyChangedFor(nameof(IsSetupVisible))]
@@ -116,7 +121,7 @@ public partial class MainWindowViewModel : ViewModelBase
     [RelayCommand]
     private void SelectTab(string index) => SelectedTabIndex = int.Parse(index);
 
-    // ---- collections per la dashboard ----
+    // ---- dashboard collections ----
 
     public ObservableCollection<HistoryRow> History { get; } = [];
     public ObservableCollection<AddressRow> Addresses { get; } = [];
@@ -141,7 +146,7 @@ public partial class MainWindowViewModel : ViewModelBase
         catch { return ""; }
     }
 
-    // ---- costruttore ----
+    // ---- constructor ----
 
     public MainWindowViewModel()
     {
@@ -153,6 +158,7 @@ public partial class MainWindowViewModel : ViewModelBase
         _keepAliveTimer = new DispatcherTimer { Interval = System.TimeSpan.FromSeconds(20) };
         _keepAliveTimer.Tick += async (_, _) => await KeepAliveTickAsync();
         _keepAliveTimer.Start();
+        _ = CheckForUpdatesAsync();
     }
 
     private async System.Threading.Tasks.Task KeepAliveTickAsync()
@@ -161,7 +167,7 @@ public partial class MainWindowViewModel : ViewModelBase
             return;
         if (_client is { IsConnected: true })
         {
-            // Se il wallet è aperto e l'ultima sync è fallita, riprova automaticamente.
+            // If the wallet is open and the last sync failed, retry automatically.
             if (_syncFailed && _account is not null)
             {
                 await ConnectAndSync();
@@ -177,7 +183,7 @@ public partial class MainWindowViewModel : ViewModelBase
         }
     }
 
-    // ---- ciclo di vita wallet ----
+    // ---- wallet lifecycle ----
 
     [RelayCommand]
     private void CloseWallet()

src/App/ViewModels/MineColorConverter.cs

@@ -7,8 +7,8 @@ using Avalonia.Media;
 namespace PalladiumWallet.App.ViewModels;
 
 /// <summary>
-/// bool → pennello: gli indirizzi del wallet (input/output "nostri") sono
+/// bool → brush: the wallet's own addresses ("our" inputs/outputs) are
-/// evidenziati in verde, gli altri usano il colore di testo predefinito.
+/// highlighted in green, the others use the default text color.
 /// </summary>
 public sealed class MineColorConverter : IValueConverter
 {

src/App/ViewModels/TransactionDetailsViewModel.cs

@@ -7,13 +7,13 @@ using PalladiumWallet.Core.Wallet;
 
 namespace PalladiumWallet.App.ViewModels;
 
-/// <summary>Riga input/output per le tabelle della finestra di dettaglio.</summary>
+/// <summary>Input/output row for the transaction detail tables.</summary>
 public sealed record TxIoRow(string Position, string Address, string Amount, bool IsMine);
 
 /// <summary>
-/// ViewModel della finestra di dettaglio transazione: prende un
+/// ViewModel for the transaction detail view: takes a
-/// <see cref="TransactionDetails"/> (assemblato dal server) e ne ricava tutte
+/// <see cref="TransactionDetails"/> (assembled from server data) and produces
-/// le stringhe già formattate e localizzate per la vista. È di sola lettura.
+/// all strings already formatted and localised for the view. Read-only.
 /// </summary>
 public sealed class TransactionDetailsViewModel
 {
@@ -27,6 +27,7 @@ public sealed class TransactionDetailsViewModel
         _unit = unit;
 
         Txid = d.Txid;
+        IsCoinbase = d.IsCoinbase;
         StatusText = BuildStatus(d, loc);
         DateText = d.BlockTime is { } t
             ? t.ToLocalTime().ToString("dd/MM/yyyy HH:mm")
@@ -34,11 +35,14 @@ public sealed class TransactionDetailsViewModel
 
         var counterparties = d.CounterpartyAddresses;
         CounterpartyHeader = d.IsIncoming ? loc["tx.from"] : loc["tx.to"];
-        CounterpartyText = counterparties.Count > 0
+        // Coinbase has no sender: coins are newly generated by mining.
+        CounterpartyText = d.IsCoinbase
+            ? loc["tx.coinbase.newcoins"]
+            : counterparties.Count > 0
                 ? string.Join(Environment.NewLine, counterparties)
                 : "—";
 
-        // Debito (uscita verso terzi) o Credito (entrata netta sui nostri output).
+        // Debit (outflow to third parties) or Credit (net inflow on our outputs).
         AmountHeader = d.IsIncoming ? loc["tx.credit"] : loc["tx.debit"];
         AmountText = d.IsIncoming
             ? Signed(d.ReceivedSats)
@@ -58,11 +62,9 @@ public sealed class TransactionDetailsViewModel
         VersionText = d.Version.ToString();
         LockTimeText = d.LockTime.ToString();
         RbfText = loc[d.RbfSignaled ? "tx.yes" : "tx.no"];
-        VerifiedText = d.Verified ? "✓ SPV" : "—";
-
         Inputs = new ObservableCollection<TxIoRow>(d.Inputs.Select((i, n) => new TxIoRow(
-            i.IsCoinbase ? "coinbase" : $"{Shorten(i.PrevTxid)}:{i.PrevIndex}",
+            i.IsCoinbase ? loc["tx.coinbase"] : $"{i.PrevTxid}:{i.PrevIndex}",
-            i.Address ?? "—",
+            i.IsCoinbase ? loc["tx.coinbase.newcoins"] : i.Address ?? "—",
             i.AmountSats is { } a ? CoinAmount.FormatIn(a, unit) : "—",
             i.IsMine)));
 
@@ -74,6 +76,7 @@ public sealed class TransactionDetailsViewModel
     }
 
     public string Txid { get; }
+    public bool IsCoinbase { get; }
     public string StatusText { get; }
     public string DateText { get; }
     public string CounterpartyHeader { get; }
@@ -88,7 +91,6 @@ public sealed class TransactionDetailsViewModel
     public string VersionText { get; }
     public string LockTimeText { get; }
     public string RbfText { get; }
-    public string VerifiedText { get; }
     public ObservableCollection<TxIoRow> Inputs { get; }
     public ObservableCollection<TxIoRow> Outputs { get; }
 
@@ -106,7 +108,4 @@ public sealed class TransactionDetailsViewModel
     }
 
     private string Abs(long sats) => CoinAmount.FormatIn(Math.Abs(sats), _unit);
-
-    private static string Shorten(string txid) =>
-        txid.Length > 16 ? $"{txid[..8]}…{txid[^4..]}" : txid;
 }

src/App/Views/MainView.axaml.cs

@@ -1,3 +1,4 @@
+using System;
 using System.Linq;
 using Avalonia;
 using Avalonia.Controls;
@@ -11,10 +12,10 @@ using PalladiumWallet.App.ViewModels;
 namespace PalladiumWallet.App.Views;
 
 /// <summary>
-/// Vista radice dell'app, condivisa tra desktop (ospitata in <see cref="MainWindow"/>)
+/// App root view, shared between desktop (hosted in <see cref="MainWindow"/>)
-/// e mobile (root single-view). Tutti gli overlay sono in-app, quindi non servono
+/// and mobile (single-view root). All overlays are in-app so no separate windows
-/// finestre separate. Le API legate al top-level (file picker, clipboard) si
+/// are needed. Top-level APIs (file picker, clipboard) are reached via
-/// raggiungono via <see cref="TopLevel.GetTopLevel"/> perché un UserControl non le espone.
+/// <see cref="TopLevel.GetTopLevel"/> because a UserControl does not expose them.
 /// </summary>
 public partial class MainView : UserControl
 {
@@ -23,32 +24,13 @@ public partial class MainView : UserControl
         InitializeComponent();
     }
 
-    private async void OnOpenWalletFileClick(object? sender, RoutedEventArgs e)
-    {
-        if (DataContext is not MainWindowViewModel vm) return;
-        if (TopLevel.GetTopLevel(this)?.StorageProvider is not { } storage) return;
-
-        var files = await storage.OpenFilePickerAsync(new FilePickerOpenOptions
-        {
-            Title = "Apri file wallet",
-            AllowMultiple = false,
-            FileTypeFilter =
-            [
-                new FilePickerFileType("Wallet Palladium") { Patterns = ["*.wallet.json", "*.json"] },
-            ],
-        });
-
-        if (files.FirstOrDefault()?.TryGetLocalPath() is { } path)
-            vm.OpenFromPath(path);
-    }
-
     private void OnHistoryRowDoubleTapped(object? sender, TappedEventArgs e)
     {
         if (sender is not ListBox lb || DataContext is not MainWindowViewModel vm) return;
         if (lb.SelectedItem is not HistoryRow row) return;
 
-        // Overlay in-app: appare subito con lo spinner, i dati arrivano dal
+        // In-app overlay: appears immediately with a spinner; data arrives from
-        // server in background. Niente top-level window (lenta da aprire/chiudere).
+        // the server in the background. No top-level window (slow to open/close).
         _ = vm.ShowTransactionDetailsAsync(row.Txid);
     }
 
@@ -78,8 +60,8 @@ public partial class MainView : UserControl
         vm.ShowAddressInfo(row);
     }
 
-    // Chiusura dell'overlay dettaglio indirizzo: click sullo sfondo scuro
+    // Close the address-detail overlay: click on the dark backdrop
-    // (solo sullo sfondo, non sulla scheda) o tasto Esc.
+    // (backdrop only, not the card itself) or press Esc.
     private void OnAddressOverlayBackdropTapped(object? sender, TappedEventArgs e)
     {
         if (!ReferenceEquals(e.Source, sender)) return;
@@ -126,6 +108,13 @@ public partial class MainView : UserControl
             vm.IsServerSettingsOpen = true;
     }
 
+    private void OnWalletInfoOverlayBackdropTapped(object? sender, TappedEventArgs e)
+    {
+        if (!ReferenceEquals(e.Source, sender)) return;
+        if (DataContext is MainWindowViewModel vm)
+            vm.CloseWalletInfoCommand.Execute(null);
+    }
+
     private void OnSettingsOverlayBackdropTapped(object? sender, TappedEventArgs e)
     {
         if (!ReferenceEquals(e.Source, sender)) return;
@@ -140,16 +129,43 @@ public partial class MainView : UserControl
             vm.IsHelpOpen = false;
     }
 
-    // Esc (desktop) o tasto Back (Android) chiudono l'overlay in primo piano.
+    private void OnUpdateAvailableOverlayBackdropTapped(object? sender, TappedEventArgs e)
+    {
+        if (!ReferenceEquals(e.Source, sender)) return;
+        if (DataContext is MainWindowViewModel vm)
+            vm.IsUpdateAvailableOpen = false;
+    }
+
+    private async void OnOpenBugReportClick(object? sender, RoutedEventArgs e)
+    {
+        const string issueUrl = "https://github.com/davide3011/PalladiumWallet/issues/new?template=bug_report.yml";
+        var launcher = TopLevel.GetTopLevel(this)?.Launcher;
+        if (launcher is not null)
+            await launcher.LaunchUriAsync(new Uri(issueUrl));
+    }
+
+    private async void OnOpenReleasePageClick(object? sender, RoutedEventArgs e)
+    {
+        if (DataContext is not MainWindowViewModel vm || string.IsNullOrEmpty(vm.UpdateReleaseUrl)) return;
+        var launcher = TopLevel.GetTopLevel(this)?.Launcher;
+        if (launcher is not null)
+            await launcher.LaunchUriAsync(new Uri(vm.UpdateReleaseUrl));
+        vm.IsUpdateAvailableOpen = false;
+    }
+
+    // Esc (desktop) or Back (Android) closes the topmost open overlay.
     protected override void OnKeyDown(KeyEventArgs e)
     {
         if ((e.Key == Key.Escape || e.Key == Key.Back) && DataContext is MainWindowViewModel vm)
         {
             if (vm.IsTxDetailsOpen) { vm.CloseTransactionDetailsCommand.Execute(null); e.Handled = true; return; }
-            if (vm.AddressInfo is not null) { vm.AddressInfo = null; e.Handled = true; return; }
+            if (vm.IsPrivKeyPromptOpen) { vm.CancelPrivKeyPromptCommand.Execute(null); e.Handled = true; return; }
+            if (vm.AddressInfo is not null) { vm.CloseAddressInfoCommand.Execute(null); e.Handled = true; return; }
             if (vm.IsServerSettingsOpen) { vm.IsServerSettingsOpen = false; e.Handled = true; return; }
+            if (vm.IsWalletInfoOpen) { vm.CloseWalletInfoCommand.Execute(null); e.Handled = true; return; }
             if (vm.IsSettingsOpen) { vm.IsSettingsOpen = false; e.Handled = true; return; }
             if (vm.IsHelpOpen) { vm.IsHelpOpen = false; e.Handled = true; return; }
+            if (vm.IsUpdateAvailableOpen) { vm.IsUpdateAvailableOpen = false; e.Handled = true; return; }
         }
         base.OnKeyDown(e);
     }

src/App/Views/MainWindow.axaml

@@ -4,11 +4,14 @@
         xmlns:views="using:PalladiumWallet.App.Views"
         xmlns:d="http://schemas.microsoft.com/expression/blend/2008"
         xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006"
-        mc:Ignorable="d" d:DesignWidth="900" d:DesignHeight="620"
+        mc:Ignorable="d" d:DesignWidth="1020" d:DesignHeight="680"
         x:Class="PalladiumWallet.App.Views.MainWindow"
         x:DataType="vm:MainWindowViewModel"
         Icon="/Assets/logo.ico"
-        Width="900" Height="620"
+        Width="1020" Height="680"
+        MinWidth="1020" MinHeight="680"
+        MaxWidth="1020" MaxHeight="680"
+        CanResize="False"
         Title="{Binding WindowTitle}">
 
     <Design.DataContext>

src/Cli/Program.cs

@@ -104,8 +104,9 @@ static int Info(string[] o)
     Console.WriteLine($"xpub:     {doc.AccountXpub}");
     if (doc.Cache is { } cache)
     {
-        Console.WriteLine($"saldo:    {CoinAmount.Format(cache.ConfirmedSats, account.Profile.CoinUnit)} confermato"
+        Console.WriteLine($"saldo:    {CoinAmount.Format(cache.ConfirmedSats - cache.ImmatureSats, account.Profile.CoinUnit)} spendibile"
-            + (cache.UnconfirmedSats != 0 ? $" + {CoinAmount.Format(cache.UnconfirmedSats)} in attesa (non spendibile)." : ""));
+            + (cache.ImmatureSats != 0 ? $" + {CoinAmount.Format(cache.ImmatureSats)} in maturazione (non spendibile)" : "")
+            + (cache.UnconfirmedSats != 0 ? $" + {CoinAmount.Format(cache.UnconfirmedSats)} in attesa di conferma (non spendibile)." : ""));
         Console.WriteLine($"sync:     altezza {cache.TipHeight}, {cache.History.Count} transazioni");
         Console.WriteLine($"ricezione: {account.GetReceiveAddress(cache.NextReceiveIndex)}");
     }
@@ -131,22 +132,36 @@ static async Task<int> Sync(string[] o)
 
     var sync = new WalletSynchronizer(account, client, doc.GapLimit);
     sync.Progress += msg => Console.WriteLine($"  {msg}");
+    var net = PalladiumNetworks.For(account.Profile.Kind);
+    sync.PreloadCaches(
+        doc.Cache?.RawTxHex ?? [],
+        doc.Cache?.VerifiedAt ?? [],
+        doc.Cache?.BlockHeaders,
+        doc.Cache?.NextReceiveIndex ?? 0,
+        doc.Cache?.NextChangeIndex ?? 0,
+        net);
     var result = await sync.SyncOnceAsync();
 
+    var (rawHex, verifiedAt, blockHeaders) = sync.ExportCaches(net);
     doc.Cache = new SyncCache
     {
         TipHeight = result.TipHeight,
         ConfirmedSats = result.ConfirmedSats,
         UnconfirmedSats = result.UnconfirmedSats,
+        ImmatureSats = result.ImmatureSats,
         NextReceiveIndex = result.NextReceiveIndex,
         NextChangeIndex = result.NextChangeIndex,
         History = [.. result.History],
         Utxos = [.. result.Utxos],
         Addresses = [.. result.AddressRows],
+        RawTxHex = rawHex,
+        VerifiedAt = verifiedAt,
+        BlockHeaders = blockHeaders,
     };
     WalletStore.Save(doc, path, Opt(o, "--password"));
 
-    Console.WriteLine($"Saldo: {CoinAmount.Format(result.ConfirmedSats, account.Profile.CoinUnit)} confermato"
+    Console.WriteLine($"Saldo: {CoinAmount.Format(result.ConfirmedSats - result.ImmatureSats, account.Profile.CoinUnit)} spendibile"
+        + (result.ImmatureSats != 0 ? $" + {CoinAmount.Format(result.ImmatureSats)} in maturazione (non spendibile)" : "")
         + (result.UnconfirmedSats != 0 ? $" + {CoinAmount.Format(result.UnconfirmedSats)} in attesa di conferma (non spendibile)" : ""));
     Console.WriteLine($"Storico ({result.History.Count}):");
     foreach (var tx in result.History)
@@ -181,7 +196,7 @@ static async Task<int> Send(string[] o)
 
     var built = new TransactionFactory(account).Build(
         doc.Cache.Utxos, transactions, destination, amount, feeRate,
-        doc.Cache.NextChangeIndex, sendAll);
+        doc.Cache.NextChangeIndex, doc.Cache.TipHeight, sendAll);
 
     Console.WriteLine($"txid:  {built.Txid}");
     Console.WriteLine($"fee:   {CoinAmount.Format(built.Fee.Satoshi, account.Profile.CoinUnit)} " +

src/Core/Chain/ChainProfile.cs

@@ -1,7 +1,7 @@
 namespace PalladiumWallet.Core.Chain;
 
 /// <summary>
-/// Tipo di rete supportato (selettore unico per tutto il wallet, blueprint §3).
+/// Supported network type (single selector for the whole wallet, blueprint §3).
 /// </summary>
 public enum NetKind
 {
@@ -11,7 +11,7 @@ public enum NetKind
 }
 
 /// <summary>
-/// Tipo di script/indirizzo supportato (blueprint §4.3).
+/// Supported script/address type (blueprint §4.3).
 /// </summary>
 public enum ScriptKind
 {
@@ -21,7 +21,7 @@ public enum ScriptKind
     /// <summary>P2SH-P2WPKH (segwit wrapped).</summary>
     WrappedSegwit,
 
-    /// <summary>P2WPKH (native segwit) — default consigliato.</summary>
+    /// <summary>P2WPKH (native segwit) — recommended default.</summary>
     NativeSegwit,
 
     /// <summary>P2SH-P2WSH (multisig wrapped).</summary>
@@ -35,15 +35,15 @@ public enum ScriptKind
 }
 
 /// <summary>
-/// Coppia di header di versione BIP32 (4 byte big-endian) per serializzare
+/// Pair of BIP32 version headers (4-byte big-endian) to serialize
-/// xprv/xpub e varianti SLIP-132 (y/z/Y/Z) — blueprint §3.
+/// xprv/xpub and SLIP-132 variants (y/z/Y/Z) — blueprint §3.
 /// </summary>
 public readonly record struct ExtKeyHeaders(uint Private, uint Public)
 {
-    /// <summary>Header privato come 4 byte big-endian (da anteporre al payload BIP32).</summary>
+    /// <summary>Private header as 4 big-endian bytes (to prepend to the BIP32 payload).</summary>
     public byte[] PrivateBytes() => ToBytes(Private);
 
-    /// <summary>Header pubblico come 4 byte big-endian.</summary>
+    /// <summary>Public header as 4 big-endian bytes.</summary>
     public byte[] PublicBytes() => ToBytes(Public);
 
     internal static byte[] ToBytes(uint header) =>
@@ -56,82 +56,88 @@ public readonly record struct ExtKeyHeaders(uint Private, uint Public)
 }
 
 /// <summary>
-/// Server di indicizzazione di bootstrap: host + porta TCP + porta SSL (blueprint §3/§9).
+/// Bootstrap indexing server: host + TCP port + SSL port (blueprint §3/§9).
 /// </summary>
 public readonly record struct ServerEndpoint(string Host, int TcpPort, int SslPort);
 
 /// <summary>
-/// Checkpoint di catena: ancora la fiducia quando la verifica PoW è disattivata
+/// Chain checkpoint: anchors trust when PoW validation is disabled
-/// (blueprint §7.3). Target serializzato come "bits" compatti.
+/// (blueprint §7.3). Target serialized as compact "bits".
 /// </summary>
 public readonly record struct Checkpoint(int Height, string BlockHash, uint Bits);
 
 /// <summary>
-/// Profilo di rete/catena (blueprint §3): tutte le costanti specifiche della catena,
+/// Network/chain profile (blueprint §3): all chain-specific constants,
-/// centralizzate in un solo punto. Nessun magic number altrove nel codice.
+/// centralized in one place. No magic numbers elsewhere in the code.
 /// </summary>
 public sealed record ChainProfile
 {
     public required NetKind Kind { get; init; }
 
-    /// <summary>Nome rete, usato anche come sottocartella dati.</summary>
+    /// <summary>Network name, also used as the data subfolder.</summary>
     public required string NetName { get; init; }
 
-    /// <summary>Simbolo dell'unità (es. PLM).</summary>
+    /// <summary>Unit symbol (e.g. PLM).</summary>
     public required string CoinUnit { get; init; }
 
-    /// <summary>Prefisso WIF delle chiavi private.</summary>
+    /// <summary>WIF prefix for private keys.</summary>
     public required byte WifPrefix { get; init; }
 
-    /// <summary>Byte di versione indirizzi P2PKH.</summary>
+    /// <summary>Version byte for P2PKH addresses.</summary>
     public required byte AddrP2pkh { get; init; }
 
-    /// <summary>Byte di versione indirizzi P2SH.</summary>
+    /// <summary>Version byte for P2SH addresses.</summary>
     public required byte AddrP2sh { get; init; }
 
     /// <summary>Human-readable part bech32/bech32m.</summary>
     public required string SegwitHrp { get; init; }
 
-    /// <summary>HRP fatture BOLT11 (Lightning, fase successiva — §11).</summary>
+    /// <summary>HRP for BOLT11 invoices (Lightning, later phase — §11).</summary>
     public required string Bolt11Hrp { get; init; }
 
-    /// <summary>Hash del blocco genesi (hex, byte order da explorer).</summary>
+    /// <summary>Genesis block hash (hex, explorer byte order).</summary>
     public required string GenesisHash { get; init; }
 
-    /// <summary>Porta TCP del server di indicizzazione (non è la porta P2P del nodo).</summary>
+    /// <summary>TCP port of the indexing server (not the node's P2P port).</summary>
     public required int DefaultTcpPort { get; init; }
 
-    /// <summary>Porta SSL del server di indicizzazione.</summary>
+    /// <summary>SSL port of the indexing server.</summary>
     public required int DefaultSslPort { get; init; }
 
-    /// <summary>Porta P2P del nodo — solo informativa: il wallet SPV non la usa.</summary>
+    /// <summary>Node's P2P port — informational only: the SPV wallet does not use it.</summary>
     public required int NodeP2pPort { get; init; }
 
-    /// <summary>Coin type SLIP-0044 nei derivation path (convenzione wallet).</summary>
+    /// <summary>SLIP-0044 coin type in derivation paths (wallet convention).</summary>
     public required int Bip44CoinType { get; init; }
 
-    /// <summary>Schema URI pagamenti BIP21 (senza i due punti).</summary>
+    /// <summary>BIP21 payment URI scheme (without the colon).</summary>
     public required string UriScheme { get; init; }
 
-    /// <summary>Block explorer di default.</summary>
+    /// <summary>Default block explorer.</summary>
     public required string ExplorerUrl { get; init; }
 
     /// <summary>
-    /// La catena usa LWMA (retargeting per-blocco, 2 minuti): un client SPV non può
+    /// The chain uses LWMA (per-block retargeting, 2 minutes): an SPV client cannot
-    /// ricalcolarla, quindi la verifica bits/target va saltata e la fiducia ancorata
+    /// recompute it, so bits/target validation must be skipped and trust anchored
-    /// ai checkpoint (§3/§7). Per la catena di riferimento è sempre true.
+    /// to checkpoints (§3/§7). For the reference chain it is always true.
     /// </summary>
     public required bool SkipPowValidation { get; init; }
 
-    /// <summary>Tempo di blocco target in secondi (LWMA v2: 120s).</summary>
+    /// <summary>Target block time in seconds (LWMA v2: 120s).</summary>
     public required int BlockTimeSeconds { get; init; }
 
-    /// <summary>Header BIP32/SLIP-132 per ciascun tipo di script.</summary>
+    /// <summary>Blocks a coinbase output must wait before it can be spent.</summary>
+    public required int CoinbaseMaturity { get; init; }
+
+    /// <summary>Minimum confirmations required for a regular UTXO to be spendable.</summary>
+    public required int MinConfirmations { get; init; }
+
+    /// <summary>BIP32/SLIP-132 headers for each script type.</summary>
     public required IReadOnlyDictionary<ScriptKind, ExtKeyHeaders> ExtKeyHeaders { get; init; }
 
-    /// <summary>Server di indicizzazione per il primo contatto (bootstrap).</summary>
+    /// <summary>Indexing servers for first contact (bootstrap).</summary>
     public required IReadOnlyList<ServerEndpoint> BootstrapServers { get; init; }
 
-    /// <summary>Checkpoint hardcoded, aggiornati a ogni release (§7.3).</summary>
+    /// <summary>Hardcoded checkpoints, updated at every release (§7.3).</summary>
     public required IReadOnlyList<Checkpoint> Checkpoints { get; init; }
 }

src/Core/Chain/ChainProfiles.cs

@@ -1,8 +1,8 @@
 namespace PalladiumWallet.Core.Chain;
 
 /// <summary>
-/// I tre profili di rete del wallet (blueprint §3). Valori mainnet verificati
+/// The wallet's three network profiles (blueprint §3). Mainnet values verified
-/// contro il sorgente del nodo (chainparams.cpp / pow.cpp) secondo il blueprint.
+/// against the node source (chainparams.cpp / pow.cpp) per the blueprint.
 /// </summary>
 public static class ChainProfiles
 {
@@ -12,11 +12,11 @@ public static class ChainProfiles
         NetName = "mainnet",
         CoinUnit = "PLM",
         WifPrefix = 0x80,
-        AddrP2pkh = 55,   // indirizzi che iniziano con 'P'
+        AddrP2pkh = 55,   // addresses starting with 'P'
-        AddrP2sh = 5,     // indirizzi che iniziano con '3'
+        AddrP2sh = 5,     // addresses starting with '3'
         SegwitHrp = "plm",
         Bolt11Hrp = "plm",
-        // La mainnet riusa la genesi di Bitcoin (blueprint §3).
+        // Mainnet reuses Bitcoin's genesis (blueprint §3).
         GenesisHash = "000000000019d6689c085ae165831e934ff763ae46a2a6c172b3f1b60a8ce26f",
         DefaultTcpPort = 50001,
         DefaultSslPort = 50002,
@@ -26,6 +26,8 @@ public static class ChainProfiles
         ExplorerUrl = "https://explorer.palladium-coin.com/",
         SkipPowValidation = true,
         BlockTimeSeconds = 120,
+        CoinbaseMaturity = 120,
+        MinConfirmations = 6,
         ExtKeyHeaders = new Dictionary<ScriptKind, ExtKeyHeaders>
         {
             [ScriptKind.Legacy] = new(0x0488ade4, 0x0488b21e),                // xprv / xpub
@@ -33,11 +35,11 @@ public static class ChainProfiles
             [ScriptKind.WrappedSegwitMultisig] = new(0x0295b005, 0x0295b43f), // Yprv / Ypub
             [ScriptKind.NativeSegwit] = new(0x04b2430c, 0x04b24746),          // zprv / zpub
             [ScriptKind.NativeSegwitMultisig] = new(0x02aa7a99, 0x02aa7ed3),  // Zprv / Zpub
-            // Nessun SLIP-132 per P2TR: il contesto è dato dal path m/86'/…
+            // No SLIP-132 for P2TR: the context is given by the m/86'/… path
             [ScriptKind.Taproot] = new(0x0488ade4, 0x0488b21e),               // xprv / xpub (BIP32 standard)
         },
-        // Server di indicizzazione noti per il primo contatto (§3/§9); altri
+        // Known indexing servers for first contact (§3/§9); other
-        // peer vengono scoperti via server.peers.subscribe.
+        // peers are discovered via server.peers.subscribe.
         BootstrapServers =
         [
             new ServerEndpoint("173.212.224.67", 50001, 50002),
@@ -45,7 +47,7 @@ public static class ChainProfiles
             new ServerEndpoint("66.94.115.80", 50001, 50002),
             new ServerEndpoint("89.117.149.130", 50001, 50002),
         ],
-        // TODO: popolare con [hash, bits] reali della catena (§7.3) prima della release.
+        // TODO: populate with the chain's real [hash, bits] (§7.3) before release.
         Checkpoints = [],
     };
 
@@ -53,20 +55,21 @@ public static class ChainProfiles
     {
         Kind = NetKind.Testnet,
         NetName = "testnet",
+        MinConfirmations = 1,
         WifPrefix = 0xff,
         AddrP2pkh = 127,
         AddrP2sh = 115,
         SegwitHrp = "tplm",
         Bolt11Hrp = "tplm",
-        // TODO: verificare contro chainparams.cpp del nodo (il blueprint non la riporta;
+        // TODO: verify against the node's chainparams.cpp (the blueprint does not report it;
-        // qui si assume la genesi di Bitcoin testnet3, da confermare).
+        // here Bitcoin testnet3 genesis is assumed, to be confirmed).
         GenesisHash = "000000000933ea01ad0ee984209779baaec3ced90fa3f408719526f8d77f4943",
         NodeP2pPort = 12333,
         Bip44CoinType = 1,
         ExtKeyHeaders = new Dictionary<ScriptKind, ExtKeyHeaders>
         {
-            // tprv/tpub dal blueprint; le varianti SLIP-132 testnet (u/v/U/V) sono
+            // tprv/tpub from the blueprint; the testnet SLIP-132 variants (u/v/U/V) are
-            // i valori standard Electrum.
+            // the standard Electrum values.
             [ScriptKind.Legacy] = new(0x04358394, 0x043587cf),                // tprv / tpub
             [ScriptKind.WrappedSegwit] = new(0x044a4e28, 0x044a5262),         // uprv / upub
             [ScriptKind.WrappedSegwitMultisig] = new(0x024285b5, 0x024289ef), // Uprv / Upub
@@ -84,7 +87,7 @@ public static class ChainProfiles
         NetName = "regtest",
         SegwitHrp = "rplm",
         Bolt11Hrp = "rplm",
-        // TODO: verificare contro chainparams.cpp del nodo (assunta genesi regtest Bitcoin).
+        // TODO: verify against the node's chainparams.cpp (Bitcoin regtest genesis assumed).
         GenesisHash = "0f9188f13cb7b2c71f2a335e3a4fc328bf5beb436012afca590b1a11466e2206",
         NodeP2pPort = 28444,
         Checkpoints = [],

src/Core/Chain/PalladiumNetworks.cs

@@ -4,13 +4,13 @@ using NBitcoin.DataEncoders;
 namespace PalladiumWallet.Core.Chain;
 
 /// <summary>
-/// Costruisce e registra le <see cref="Network"/> NBitcoin di Palladium a partire dai
+/// Builds and registers the Palladium NBitcoin <see cref="Network"/> instances from the
-/// <see cref="ChainProfiles"/> (blueprint §19.3). Tutto il resto del codice ottiene la
+/// <see cref="ChainProfiles"/> (blueprint §19.3). All other code obtains the network
-/// rete da qui, mai da costanti sparse.
+/// from here — never from scattered constants.
 /// </summary>
 /// <summary>
-/// Identità della moneta per NBitcoin: raggruppa le tre reti sotto il codice PLM.
+/// Coin identity for NBitcoin: groups the three networks under the PLM code.
-/// I getter sono lazy, quindi nessuna ricorsione durante la costruzione.
+/// Getters are lazy, so no recursion occurs during construction.
 /// </summary>
 public sealed class PalladiumNetworkSet : INetworkSet
 {
@@ -34,13 +34,13 @@ public sealed class PalladiumNetworkSet : INetworkSet
 
 public static class PalladiumNetworks
 {
-    // Blocco genesi di Bitcoin (la mainnet Palladium lo riusa, blueprint §3).
+    // Bitcoin genesis block (Palladium mainnet reuses it, blueprint §3).
     private const string MainGenesisHex =
         "0100000000000000000000000000000000000000000000000000000000000000000000003ba3edfd7a7b12b27ac72c3e67768f617fc81bc3888a51323a9fb8aa4b1e5e4a29ab5f49ffff001d1dac2b7c" +
         Coinbase;
 
-    // Genesi testnet3/regtest di Bitcoin: stessa coinbase, cambiano time/bits/nonce.
+    // Bitcoin testnet3/regtest genesis: same coinbase, different time/bits/nonce.
-    // TODO: confermare contro chainparams.cpp del nodo (vedi ChainProfiles).
+    // TODO: confirm against the node's chainparams.cpp (see ChainProfiles).
     private const string TestGenesisHex =
         "0100000000000000000000000000000000000000000000000000000000000000000000003ba3edfd7a7b12b27ac72c3e67768f617fc81bc3888a51323a9fb8aa4b1e5e4adae5494dffff001d1aa4ae18" +
         Coinbase;
@@ -81,9 +81,9 @@ public static class PalladiumNetworks
                 NetKind.Testnet => ChainName.Testnet,
                 _ => ChainName.Regtest,
             })
-            // Magic P2P solo segnaposto: il wallet SPV non apre mai connessioni P2P
+            // P2P magic is a placeholder only: the SPV wallet never opens P2P connections
-            // (parla solo col server di indicizzazione, §3). Serve a NBitcoin per
+            // (it only talks to the indexing server, §3). Required by NBitcoin to
-            // distinguere le reti registrate.
+            // distinguish registered networks.
             .SetMagic(magic)
             .SetPort(p.NodeP2pPort)
             .SetRPCPort(p.NodeP2pPort + 1)
@@ -91,9 +91,9 @@ public static class PalladiumNetworks
             .SetBase58Bytes(Base58Type.PUBKEY_ADDRESS, [p.AddrP2pkh])
             .SetBase58Bytes(Base58Type.SCRIPT_ADDRESS, [p.AddrP2sh])
             .SetBase58Bytes(Base58Type.SECRET_KEY, [p.WifPrefix])
-            // NBitcoin gestisce una sola coppia di header BIP32 per rete: quella
+            // NBitcoin handles only one BIP32 header pair per network: the standard
-            // standard xprv/xpub. Le varianti SLIP-132 (y/z/Y/Z) si serializzano
+            // xprv/xpub. SLIP-132 variants (y/z/Y/Z) are serialised manually via
-            // a mano con ChainProfile.ExtKeyHeaders quando servono.
+            // ChainProfile.ExtKeyHeaders when needed.
             .SetBase58Bytes(Base58Type.EXT_SECRET_KEY, legacy.PrivateBytes())
             .SetBase58Bytes(Base58Type.EXT_PUBLIC_KEY, legacy.PublicBytes())
             .SetBech32(Bech32Type.WITNESS_PUBKEY_ADDRESS, Encoders.Bech32(p.SegwitHrp))
@@ -102,8 +102,8 @@ public static class PalladiumNetworks
             .SetUriScheme(p.UriScheme)
             .SetConsensus(new Consensus
             {
-                // Valori usati solo dalle API NBitcoin che li richiedono: la validazione
+                // Values used only by NBitcoin APIs that require them: real header
-                // header reale è custom (Core/Spv) con skip PoW + checkpoint (§7).
+                // validation is custom (Core/Spv) with PoW skip + checkpoints (§7).
                 PowLimit = new Target(new uint256("00000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),
                 PowTargetSpacing = TimeSpan.FromSeconds(p.BlockTimeSeconds),
                 PowTargetTimespan = TimeSpan.FromDays(14),
@@ -114,7 +114,7 @@ public static class PalladiumNetworks
                 MajorityRejectBlockOutdated = 950,
                 MajorityWindow = 1000,
                 MinimumChainWork = uint256.Zero,
-                CoinbaseMaturity = 100,
+                CoinbaseMaturity = 120,
                 SupportSegwit = true,
                 SupportTaproot = true,
                 ConsensusFactory = new ConsensusFactory(),

src/Core/Crypto/Bip39.cs

@@ -3,8 +3,8 @@ using NBitcoin;
 namespace PalladiumWallet.Core.Crypto;
 
 /// <summary>
-/// Lingue wordlist BIP39 supportate (blueprint §4.1). Le liste sono incorporate
+/// Supported BIP39 wordlist languages (blueprint §4.1). The lists are embedded
-/// in NBitcoin: nessun accesso a rete o filesystem.
+/// in NBitcoin: no network or filesystem access required.
 /// </summary>
 public enum MnemonicLanguage
 {
@@ -18,7 +18,7 @@ public enum MnemonicLanguage
     Czech,
 }
 
-/// <summary>Numero di parole supportato in creazione (blueprint §4.1: 12 o 24).</summary>
+/// <summary>Supported word counts for mnemonic creation (blueprint §4.1: 12 or 24).</summary>
 public enum MnemonicLength
 {
     Twelve = 12,
@@ -26,16 +26,16 @@ public enum MnemonicLength
 }
 
 /// <summary>
-/// Facciata BIP39 su NBitcoin.Mnemonic (blueprint §4.1). NBitcoin copre già
+/// BIP39 facade over NBitcoin.Mnemonic (blueprint §4.1). NBitcoin already handles
-/// entropia→parole, checksum, normalizzazione NFKD e PBKDF2-HMAC-SHA512 a 2048
+/// entropy→words, checksum, NFKD normalisation, and PBKDF2-HMAC-SHA512 with 2048
-/// round con salt "mnemonic"+passphrase: qui si restringe l'API ai casi del
+/// rounds using salt "mnemonic"+passphrase. This class narrows the API to the
-/// blueprint e si centralizza la mappa delle lingue. Quando arriverà il seed
+/// blueprint use-cases and centralises the language map. When the native versioned
-/// nativo versionato (§4.1 punto 1), il riconoscimento multi-schema sarà una
+/// seed arrives (§4.1 point 1), multi-scheme recognition will be a chain of
-/// catena di TryParse per schema.
+/// TryParse calls per scheme.
 /// </summary>
 public static class Bip39
 {
-    /// <summary>Genera una nuova mnemonica con entropia dal CSPRNG di sistema.</summary>
+    /// <summary>Generates a new mnemonic using entropy from the system CSPRNG.</summary>
     public static Mnemonic Generate(MnemonicLength length, MnemonicLanguage language = MnemonicLanguage.English)
     {
         var wordCount = length == MnemonicLength.Twelve ? WordCount.Twelve : WordCount.TwentyFour;
@@ -43,10 +43,10 @@ public static class Bip39
     }
 
     /// <summary>
-    /// Riconosce e valida una mnemonica BIP39: numero di parole, appartenenza alla
+    /// Recognises and validates a BIP39 mnemonic: word count, wordlist membership,
-    /// wordlist e checksum. Se <paramref name="language"/> è indicata viene provata
+    /// and checksum. If <paramref name="language"/> is specified it is tried first;
-    /// per prima; altrimenti la lingua è auto-rilevata (parole condivise tra liste
+    /// otherwise the language is auto-detected (words shared between lists can make
-    /// possono rendere ambiguo l'autodetect: in import l'utente può forzarla).
+    /// autodetect ambiguous — the user can override it on import).
     /// </summary>
     public static bool TryParse(string text, out Mnemonic? mnemonic, MnemonicLanguage? language = null)
     {
@@ -54,8 +54,8 @@ public static class Bip39
         if (string.IsNullOrWhiteSpace(text))
             return false;
 
-        // Solo trim esterno: la normalizzazione NFKD e lo spazio ideografico
+        // Outer trim only: NBitcoin handles NFKD normalisation and Japanese
-        // giapponese li gestisce NBitcoin, il testo non va alterato (§4.1).
+        // ideographic spaces — the text must not be altered further (§4.1).
         text = text.Trim();
 
         IEnumerable<Wordlist> candidates = language is not null
@@ -67,7 +67,7 @@ public static class Bip39
             try
             {
                 var parsed = new Mnemonic(text, wordlist);
-                // Il costruttore NON verifica il checksum: controllo esplicito obbligatorio.
+                // The constructor does NOT verify the checksum — explicit check is mandatory.
                 if (parsed.IsValidChecksum && parsed.Words.Length is 12 or 15 or 18 or 21 or 24)
                 {
                     mnemonic = parsed;
@@ -76,7 +76,7 @@ public static class Bip39
             }
             catch (FormatException)
             {
-                // Parole fuori wordlist o conteggio non valido: si prova oltre.
+                // Words outside the wordlist or invalid count — try the next candidate.
             }
         }
 
@@ -84,9 +84,9 @@ public static class Bip39
     }
 
     /// <summary>
-    /// Mnemonica → seed di 64 byte (PBKDF2-HMAC-SHA512, 2048 round, salt
+    /// Mnemonic → 64-byte seed (PBKDF2-HMAC-SHA512, 2048 rounds, salt
-    /// "mnemonic"+passphrase). La passphrase cambia completamente il wallet
+    /// "mnemonic"+passphrase). The passphrase completely changes the derived
-    /// derivato: avvisi UI obbligatori (§4.1).
+    /// wallet — mandatory UI warnings required (§4.1).
     /// </summary>
     public static byte[] ToSeed(Mnemonic mnemonic, string? passphrase = null) =>
         mnemonic.DeriveSeed(passphrase);

src/Core/Crypto/DerivationPaths.cs

@@ -4,25 +4,25 @@ using PalladiumWallet.Core.Chain;
 namespace PalladiumWallet.Core.Crypto;
 
 /// <summary>
-/// Costruzione dei derivation path BIP44/49/84 (blueprint §4.2) e mappatura
+/// BIP44/49/84 derivation path construction (blueprint §4.2) and mapping of
-/// ScriptKind → purpose / ScriptPubKeyType. I purpose sono costanti di protocollo
+/// ScriptKind → purpose / ScriptPubKeyType. Purposes are BIP protocol constants
-/// BIP (chain-independent); il coin_type viene sempre dal ChainProfile.
+/// (chain-independent); coin_type always comes from the ChainProfile.
 /// </summary>
 public static class DerivationPaths
 {
-    /// <summary>Purpose BIP44 (P2PKH legacy).</summary>
+    /// <summary>BIP44 purpose (P2PKH legacy).</summary>
     public const int PurposeLegacy = 44;
 
-    /// <summary>Purpose BIP49 (P2SH-P2WPKH).</summary>
+    /// <summary>BIP49 purpose (P2SH-P2WPKH).</summary>
     public const int PurposeWrappedSegwit = 49;
 
-    /// <summary>Purpose BIP84 (P2WPKH nativo).</summary>
+    /// <summary>BIP84 purpose (native P2WPKH).</summary>
     public const int PurposeNativeSegwit = 84;
 
-    /// <summary>Purpose BIP48 (multisig — fase successiva, §16 passo 8).</summary>
+    /// <summary>BIP48 purpose (multisig — next phase, §16 step 8).</summary>
     public const int PurposeMultisig = 48;
 
-    /// <summary>Purpose BIP86 (P2TR key-path, Taproot).</summary>
+    /// <summary>BIP86 purpose (P2TR key-path, Taproot).</summary>
     public const int PurposeTaproot = 86;
 
     public static int PurposeFor(ScriptKind kind) => kind switch
@@ -36,9 +36,9 @@ public static class DerivationPaths
     };
 
     /// <summary>
-    /// Tipo di scriptPubKey NBitcoin per la derivazione da pubkey singola.
+    /// NBitcoin scriptPubKey type for single-pubkey derivation.
-    /// I tipi multisig derivano da redeem script, non da una pubkey: arriveranno
+    /// Multisig types are derived from a redeem script, not a pubkey — they will
-    /// con i wallet M-di-N (§4.5).
+    /// arrive with M-of-N wallet support (§4.5).
     /// </summary>
     public static ScriptPubKeyType ScriptPubKeyTypeFor(ScriptKind kind) => kind switch
     {
@@ -48,13 +48,13 @@ public static class DerivationPaths
         ScriptKind.Taproot => ScriptPubKeyType.TaprootBIP86,
         ScriptKind.WrappedSegwitMultisig or ScriptKind.NativeSegwitMultisig =>
             throw new NotSupportedException(
-                "I tipi multisig derivano da redeem script: supporto previsto con i wallet M-di-N (§4.5)."),
+                "Multisig types are derived from a redeem script: support planned with M-of-N wallets (§4.5)."),
         _ => throw new ArgumentOutOfRangeException(nameof(kind)),
     };
 
     /// <summary>
-    /// Path di account relativo alla root: purpose'/coin'/account' (§4.2).
+    /// Account path relative to the root: purpose'/coin'/account' (§4.2).
-    /// Il coin_type è quello del profilo (746 mainnet, 1 testnet).
+    /// coin_type is taken from the profile (746 mainnet, 1 testnet).
     /// </summary>
     public static KeyPath AccountPath(ScriptKind kind, ChainProfile profile, int account = 0)
     {
@@ -64,7 +64,7 @@ public static class DerivationPaths
             $"{PurposeFor(kind)}'/{profile.Bip44CoinType}'/{account}'");
     }
 
-    /// <summary>Sottopath non-hardened change/index sotto l'account (change=0 receiving, change=1 change).</summary>
+    /// <summary>Non-hardened change/index sub-path under the account (change=0 receiving, change=1 change).</summary>
     public static KeyPath AddressSubPath(bool isChange, int index)
     {
         if (index < 0)
@@ -73,8 +73,8 @@ public static class DerivationPaths
     }
 
     /// <summary>
-    /// Parsing di derivation path personalizzati in import (Sparrow-like, §4.2):
+    /// Parsing of custom derivation paths on import (Sparrow-like, §4.2):
-    /// accetta il prefisso "m/" opzionale e gli hardened marker ' oppure h.
+    /// accepts the optional "m/" prefix and hardened markers ' or h.
     /// </summary>
     public static bool TryParse(string path, out KeyPath? keyPath)
     {

src/Core/Crypto/HdAccount.cs

@@ -4,12 +4,12 @@ using PalladiumWallet.Core.Chain;
 namespace PalladiumWallet.Core.Crypto;
 
 /// <summary>
-/// Account HD single-sig (blueprint §4.2/§4.4): chiave estesa di account (xprv,
+/// Single-sig HD account (blueprint §4.2/§4.4): extended account key (xprv,
-/// oppure solo xpub = watch-only) + tipo di script + profilo di rete. Deriva
+/// or xpub-only = watch-only) + script type + network profile. Derives receiving
-/// indirizzi receiving (change=0) e change (change=1) on-demand per indice.
+/// (change=0) and change (change=1) addresses on-demand by index.
-/// Gli indirizzi si derivano sempre dall'xpub di account (sottopath non-hardened),
+/// Addresses are always derived from the account xpub (non-hardened sub-path),
-/// quindi il watch-only funziona per costruzione. Il keystore completo
+/// so watch-only works by construction. The full keystore
-/// (cifratura, factory dal file wallet, §4.5) arriva con la persistenza (§8).
+/// (encryption, factory from wallet file, §4.5) arrives with persistence (§8).
 /// </summary>
 public sealed class HdAccount : IWalletAccount
 {
@@ -18,25 +18,25 @@ public sealed class HdAccount : IWalletAccount
     public ScriptKind Kind { get; }
     public ChainProfile Profile { get; }
 
-    /// <summary>Path dell'account relativo alla root (es. 84'/746'/0', o personalizzato).</summary>
+    /// <summary>Account path relative to the root (e.g. 84'/746'/0', or custom).</summary>
     public KeyPath AccountPath { get; }
 
     /// <summary>
-    /// Fingerprint della chiave master: con <see cref="AccountPath"/> forma le
+    /// Master key fingerprint: together with <see cref="AccountPath"/> forms the
-    /// origin info richieste dalle PSBT (§6.5). Zero se ignota (xpub importata
+    /// origin info required by PSBTs (§6.5). Zero if unknown (imported xpub
-    /// senza metadati).
+    /// without metadata).
     /// </summary>
     public HDFingerprint MasterFingerprint { get; }
 
     public ExtPubKey AccountXpub { get; }
 
-    /// <summary>True se l'account conosce solo la xpub: costruisce ma non firma (§4.5).</summary>
+    /// <summary>True if the account only knows the xpub: can build but not sign (§4.5).</summary>
     public bool IsWatchOnly => _accountXprv is null;
 
     private HdAccount(ExtKey? accountXprv, ExtPubKey accountXpub, ScriptKind kind,
         ChainProfile profile, KeyPath accountPath, HDFingerprint masterFingerprint)
     {
-        // Valida subito la mappatura (i tipi multisig non sono supportati qui).
+        // Validate the mapping immediately (multisig types are not supported here).
         DerivationPaths.ScriptPubKeyTypeFor(kind);
         _accountXprv = accountXprv;
         AccountXpub = accountXpub;
@@ -46,7 +46,7 @@ public sealed class HdAccount : IWalletAccount
         MasterFingerprint = masterFingerprint;
     }
 
-    /// <summary>Caso principale: mnemonica BIP39 (+ passphrase opzionale) → account standard.</summary>
+    /// <summary>Main case: BIP39 mnemonic (+ optional passphrase) → standard account.</summary>
     public static HdAccount FromMnemonic(Mnemonic mnemonic, string? passphrase,
         ScriptKind kind, ChainProfile profile, int account = 0) =>
         FromSeed(Bip39.ToSeed(mnemonic, passphrase), kind, profile, account);
@@ -55,22 +55,22 @@ public sealed class HdAccount : IWalletAccount
         FromSeed(seed, kind, profile, DerivationPaths.AccountPath(kind, profile, account));
 
     /// <summary>
-    /// Import con derivation path personalizzato (§4.2, Sparrow-like):
+    /// Import with a custom derivation path (§4.2, Sparrow-like):
-    /// <paramref name="kind"/> determina solo il tipo di indirizzo generato.
+    /// <paramref name="kind"/> only determines the generated address type.
     /// </summary>
     public static HdAccount FromSeed(byte[] seed, ScriptKind kind, ChainProfile profile, KeyPath accountPath)
     {
         var root = ExtKey.CreateFromSeed(seed);
-        // L'account si deriva sempre dalla xprv: i livelli hardened del path
+        // The account is always derived from the xprv: hardened path levels
-        // non sono derivabili da una xpub.
+        // cannot be derived from an xpub alone.
         var accountXprv = root.Derive(accountPath);
         return new HdAccount(accountXprv, accountXprv.Neuter(), kind, profile,
             accountPath, root.Neuter().PubKey.GetHDFingerPrint());
     }
 
     /// <summary>
-    /// Watch-only da xpub di account (§4.4): fingerprint e path sono noti solo
+    /// Watch-only from account xpub (§4.4): fingerprint and path are known only
-    /// se forniti da chi importa (servono per le origin info PSBT).
+    /// if supplied by the importer (required for PSBT origin info).
     /// </summary>
     public static HdAccount FromAccountXpub(ExtPubKey accountXpub, ScriptKind kind,
         ChainProfile profile, KeyPath? accountPath = null, HDFingerprint? masterFingerprint = null) =>
@@ -78,7 +78,7 @@ public sealed class HdAccount : IWalletAccount
             accountPath ?? DerivationPaths.AccountPath(kind, profile),
             masterFingerprint ?? default);
 
-    /// <summary>Import spendibile da xprv di account.</summary>
+    /// <summary>Spendable import from account xprv.</summary>
     public static HdAccount FromAccountXprv(ExtKey accountXprv, ScriptKind kind,
         ChainProfile profile, KeyPath? accountPath = null, HDFingerprint? masterFingerprint = null) =>
         new(accountXprv, accountXprv.Neuter(), kind, profile,
@@ -97,27 +97,27 @@ public sealed class HdAccount : IWalletAccount
     public PubKey? GetPublicKey(bool isChange, int index) =>
         AccountXpub.Derive(DerivationPaths.AddressSubPath(isChange, index)).PubKey;
 
-    /// <summary>Chiave privata di un indirizzo; null se watch-only (§17).</summary>
+    /// <summary>Private key for an address; null if watch-only (§17).</summary>
     public Key? GetPrivateKey(bool isChange, int index) =>
         IsWatchOnly ? null : GetExtPrivateKey(isChange, index).PrivateKey;
 
-    /// <summary>Gli account HD usano il gap limit: nessuna lista fissa di indirizzi.</summary>
+    /// <summary>HD accounts use the gap limit: no fixed address list.</summary>
     public IReadOnlyList<(BitcoinAddress Address, bool IsChange, int Index)>? FixedAddresses => null;
 
     /// <summary>
-    /// Chiave privata estesa di un indirizzo. Lancia se watch-only: nessuna
+    /// Extended private key for an address. Throws if watch-only: no private key
-    /// chiave privata è derivabile dalle sole pubbliche (§17).
+    /// can be derived from public keys alone (§17).
     /// </summary>
     public ExtKey GetExtPrivateKey(bool isChange, int index) =>
-        (_accountXprv ?? throw new InvalidOperationException("Account watch-only: non può firmare."))
+        (_accountXprv ?? throw new InvalidOperationException("Watch-only account: cannot sign."))
             .Derive(DerivationPaths.AddressSubPath(isChange, index));
 
-    /// <summary>Xpub di account in formato SLIP-132 (xpub/ypub/zpub secondo Kind).</summary>
+    /// <summary>Account xpub in SLIP-132 format (xpub/ypub/zpub according to Kind).</summary>
     public string ToSlip132() => Slip132.Encode(AccountXpub, Kind, Profile);
 
-    /// <summary>Xprv di account in formato SLIP-132. Lancia se watch-only.</summary>
+    /// <summary>Account xprv in SLIP-132 format. Throws if watch-only.</summary>
     public string ToSlip132Private() =>
         Slip132.Encode(
-            _accountXprv ?? throw new InvalidOperationException("Account watch-only: nessuna chiave privata."),
+            _accountXprv ?? throw new InvalidOperationException("Watch-only account: no private key."),
             Kind, Profile);
 }

src/Core/Crypto/IWalletAccount.cs

@@ -4,31 +4,31 @@ using PalladiumWallet.Core.Chain;
 namespace PalladiumWallet.Core.Crypto;
 
 /// <summary>
-/// Astrazione su tutti i tipi di account wallet (HD da seed, HD da xpub/xprv importata,
+/// Abstraction over all wallet account types (HD from seed, HD from imported xpub/xprv,
-/// chiavi WIF importate). Consente a WalletSynchronizer e TransactionFactory di operare
+/// imported WIF keys). Allows WalletSynchronizer and TransactionFactory to operate
-/// indipendentemente dal tipo di keystore sottostante (blueprint §4.4–§4.5).
+/// independently of the underlying keystore type (blueprint §4.4–§4.5).
 /// </summary>
 public interface IWalletAccount
 {
     ScriptKind Kind { get; }
     ChainProfile Profile { get; }
 
-    /// <summary>True se l'account non può firmare (assenza di chiavi private).</summary>
+    /// <summary>True if the account cannot sign (no private keys present).</summary>
     bool IsWatchOnly { get; }
 
     BitcoinAddress GetAddress(bool isChange, int index);
     BitcoinAddress GetReceiveAddress(int index);
     BitcoinAddress GetChangeAddress(int index);
 
-    /// <summary>Null se la chiave pubblica non è ricavabile dall'account (indirizzi puri watch-only).</summary>
+    /// <summary>Null if the public key cannot be derived from the account (pure watch-only addresses).</summary>
     PubKey? GetPublicKey(bool isChange, int index);
 
-    /// <summary>Null se l'account è watch-only o l'indice è fuori range.</summary>
+    /// <summary>Null if the account is watch-only or the index is out of range.</summary>
     Key? GetPrivateKey(bool isChange, int index);
 
     /// <summary>
-    /// Per gli account con indirizzi fissi (WIF importati) restituisce la lista
+    /// For accounts with fixed addresses (imported WIF keys) returns the full list
-    /// completa da scansionare; null per gli account HD che usano il gap limit.
+    /// to scan; null for HD accounts that use the gap limit.
     /// </summary>
     IReadOnlyList<(BitcoinAddress Address, bool IsChange, int Index)>? FixedAddresses { get; }
 }

src/Core/Crypto/ImportedKeyAccount.cs

@@ -4,9 +4,9 @@ using PalladiumWallet.Core.Chain;
 namespace PalladiumWallet.Core.Crypto;
 
 /// <summary>
-/// Account da chiavi WIF singole importate (blueprint §4.4 — "Imported"):
+/// Account built from individually imported WIF keys (blueprint §4.4 — "Imported"):
-/// lista fissa di indirizzi, nessuna derivazione HD, nessuna catena di change.
+/// fixed list of addresses, no HD derivation, no change chain.
-/// Il change va sempre al primo indirizzo importato.
+/// Change always goes back to the first imported address.
 /// </summary>
 public sealed class ImportedKeyAccount : IWalletAccount
 {
@@ -24,7 +24,7 @@ public sealed class ImportedKeyAccount : IWalletAccount
         ScriptKind kind, ChainProfile profile)
     {
         if (entries.Count == 0)
-            throw new ArgumentException("Almeno un indirizzo richiesto.", nameof(entries));
+            throw new ArgumentException("At least one address is required.", nameof(entries));
         _entries = [.. entries];
         Kind = kind;
         Profile = profile;
@@ -39,7 +39,7 @@ public sealed class ImportedKeyAccount : IWalletAccount
 
     public BitcoinAddress GetReceiveAddress(int index) => GetAddress(false, index);
 
-    /// <summary>Il change torna sempre al primo indirizzo importato.</summary>
+    /// <summary>Change always returns to the first imported address.</summary>
     public BitcoinAddress GetChangeAddress(int index) => _entries[0].Address;
 
     public PubKey? GetPublicKey(bool isChange, int index)

src/Core/Crypto/Slip132.cs

@@ -20,8 +20,8 @@ public static class Slip132
         Encoders.Base58Check.EncodeData([.. profile.ExtKeyHeaders[kind].PrivateBytes(), .. key.ToBytes()]);
 
     /// <summary>
-    /// Riconosce l'header (→ ScriptKind) e decodifica una chiave pubblica estesa:
+    /// Recognises the header (→ ScriptKind) and decodes an extended public key:
-    /// è la via dell'import watch-only (§4.4).
+    /// this is the watch-only import path (§4.4).
     /// </summary>
     public static bool TryDecodePublic(string encoded, ChainProfile profile,
         out ExtPubKey? key, out ScriptKind kind)

src/Core/Net/CertificatePinStore.cs

@@ -5,10 +5,10 @@ using System.Text.Json;
 namespace PalladiumWallet.Core.Net;
 
 /// <summary>
-/// Pinning TLS "trust on first use" (blueprint §9): al primo contatto la
+/// TLS "trust on first use" pinning (blueprint §9): on the first contact the
-/// fingerprint SHA-256 del certificato del server viene salvata; ai successivi
+/// server certificate's SHA-256 fingerprint is saved; on subsequent ones it is
-/// viene confrontata. Se cambia, la connessione va rifiutata e l'utente può
+/// compared. If it changes, the connection must be rejected and the user can
-/// sbloccare con un reset esplicito (caso tipico: server self-signed rinnovato).
+/// unlock with an explicit reset (typical case: renewed self-signed server).
 /// </summary>
 public sealed class CertificatePinStore(string filePath)
 {
@@ -18,8 +18,8 @@ public sealed class CertificatePinStore(string filePath)
         Convert.ToHexString(SHA256.HashData(certificate.GetRawCertData())).ToLowerInvariant();
 
     /// <summary>
-    /// Verifica TOFU: true se il certificato è quello già visto (o se è il primo
+    /// TOFU check: true if the certificate is the one already seen (or if it is the
-    /// contatto, nel qual caso viene salvato). False = certificato cambiato.
+    /// first contact, in which case it is saved). False = certificate changed.
     /// </summary>
     public bool VerifyOrPin(string host, int port, X509Certificate certificate)
     {
@@ -36,7 +36,7 @@ public sealed class CertificatePinStore(string filePath)
         }
     }
 
-    /// <summary>Reset del certificato salvato per un server ("reset certificati SSL", §9).</summary>
+    /// <summary>Reset the saved certificate for a server ("reset SSL certificates", §9).</summary>
     public bool Reset(string host, int port)
     {
         lock (_lock)

src/Core/Net/ElectrumApi.cs

@@ -2,24 +2,24 @@ using System.Text.Json;
 
 namespace PalladiumWallet.Core.Net;
 
-/// <summary>Voce di storico di uno scripthash (blockchain.scripthash.get_history).</summary>
+/// <summary>History entry for a scripthash (blockchain.scripthash.get_history).</summary>
 public readonly record struct HistoryItem(string TxHash, int Height, long FeeSats);
 
-/// <summary>UTXO riportato dal server (blockchain.scripthash.listunspent).</summary>
+/// <summary>UTXO reported by the server (blockchain.scripthash.listunspent).</summary>
 public readonly record struct UnspentItem(string TxHash, int TxPos, long ValueSats, int Height);
 
-/// <summary>Prova di Merkle (blockchain.transaction.get_merkle).</summary>
+/// <summary>Merkle proof (blockchain.transaction.get_merkle).</summary>
 public sealed record MerkleProofResponse(int BlockHeight, int Pos, IReadOnlyList<string> Merkle);
 
-/// <summary>Tip della catena notificato da blockchain.headers.subscribe.</summary>
+/// <summary>Chain tip notified by blockchain.headers.subscribe.</summary>
 public readonly record struct ChainTip(int Height, string HeaderHex);
 
-/// <summary>Peer annunciato da server.peers.subscribe (porte null = non offerte).</summary>
+/// <summary>Peer announced by server.peers.subscribe (null ports = not offered).</summary>
 public sealed record PeerInfo(string Host, int? TcpPort, int? SslPort, string? Version);
 
 /// <summary>
-/// Helper tipizzati sui metodi del protocollo (blueprint §10), sopra il
+/// Typed helpers over the protocol methods (blueprint §10), on top of the
-/// trasporto JSON-RPC generico di <see cref="ElectrumClient"/>.
+/// generic JSON-RPC transport of <see cref="ElectrumClient"/>.
 /// </summary>
 public static class ElectrumApi
 {
@@ -29,7 +29,7 @@ public static class ElectrumApi
         return new ChainTip(r.GetProperty("height").GetInt32(), r.GetProperty("hex").GetString()!);
     }
 
-    /// <summary>Status corrente dello scripthash (null = mai usato).</summary>
+    /// <summary>Current status of the scripthash (null = never used).</summary>
     public static async Task<string?> SubscribeScripthashAsync(this ElectrumClient c, string scripthash,
         CancellationToken ct = default)
     {
@@ -89,7 +89,7 @@ public static class ElectrumApi
         return r.GetString()!;
     }
 
-    /// <summary>Fee stimata in coin/kB per il target dato; -1 se il server non sa stimare.</summary>
+    /// <summary>Estimated fee in coin/kB for the given target; -1 if the server cannot estimate.</summary>
     public static async Task<decimal> EstimateFeeAsync(this ElectrumClient c, int targetBlocks,
         CancellationToken ct = default)
     {
@@ -112,7 +112,7 @@ public static class ElectrumApi
     public static Task PingAsync(this ElectrumClient c, CancellationToken ct = default) =>
         c.RequestAsync("server.ping", ct);
 
-    /// <summary>Peer annunciati dal server (scoperta di altri server, §9).</summary>
+    /// <summary>Peers announced by the server (discovery of other servers, §9).</summary>
     public static async Task<IReadOnlyList<PeerInfo>> GetPeersAsync(this ElectrumClient c,
         CancellationToken ct = default)
     {
@@ -121,9 +121,9 @@ public static class ElectrumApi
     }
 
     /// <summary>
-    /// Parsa la risposta di server.peers.subscribe: lista di
+    /// Parses the server.peers.subscribe response: a list of
-    /// [ip, hostname, ["v1.4.2", "pN", "tPORTA", "sPORTA", ...]];
+    /// [ip, hostname, ["v1.4.2", "pN", "tPORT", "sPORT", ...]];
-    /// "t"/"s" senza numero = porta di default della rete (risolta dal chiamante).
+    /// "t"/"s" without a number = network default port (resolved by the caller).
     /// </summary>
     public static IReadOnlyList<PeerInfo> ParsePeers(JsonElement response)
     {

src/Core/Net/ElectrumClient.cs

@@ -1,15 +1,17 @@
+using System.Buffers;
 using System.Collections.Concurrent;
+using System.IO.Pipelines;
 using System.Net.Security;
 using System.Net.Sockets;
-using System.Text;
 using System.Text.Json;
+using System.Threading.Channels;
 
 namespace PalladiumWallet.Core.Net;
 
 /// <summary>
-/// Client del protocollo del server di indicizzazione (blueprint §10):
+/// Client for the indexing server protocol (blueprint §10):
-/// JSON-RPC 2.0 newline-delimited su TCP, opzionalmente TLS con pinning TOFU.
+/// newline-delimited JSON-RPC 2.0 over TCP, optionally TLS with TOFU pinning.
-/// Le notifiche (subscription) arrivano sull'evento <see cref="NotificationReceived"/>.
+/// Notifications (subscriptions) arrive on the <see cref="NotificationReceived"/> event.
 /// </summary>
 public sealed class ElectrumClient : IAsyncDisposable
 {
@@ -18,10 +20,25 @@ public sealed class ElectrumClient : IAsyncDisposable
 
     private readonly TcpClient _tcp;
     private readonly Stream _stream;
-    private readonly SemaphoreSlim _writeLock = new(1, 1);
     private readonly ConcurrentDictionary<long, TaskCompletionSource<JsonElement>> _pending = new();
     private readonly CancellationTokenSource _cts = new();
     private readonly Task _readLoop;
+    private readonly Task _writeLoop;
+
+    // Single-reader channel: tasks write the payloads without a lock;
+    // the write loop drains everything in a single WriteAsync+FlushAsync —
+    // identical to Electrum's asyncio buffered writer.
+    private readonly Channel<byte[]> _outgoing = Channel.CreateUnbounded<byte[]>(
+        new UnboundedChannelOptions { SingleReader = true, AllowSynchronousContinuations = false });
+
+    // Cap on in-flight requests (not in the write queue, but awaiting a
+    // response from the server). The write loop already batches the send into a
+    // single segment; this gate avoids flooding the server with thousands of
+    // simultaneous requests on large wallets → no bursts of -101/-102 nor
+    // connection drops. Writes still stay pipelined up to this degree.
+    private const int MaxInFlight = 32;
+    private readonly SemaphoreSlim _inFlight = new(MaxInFlight, MaxInFlight);
+
     private long _nextId;
 
     public string Host { get; }
@@ -29,10 +46,7 @@ public sealed class ElectrumClient : IAsyncDisposable
     public bool UseSsl { get; }
     public bool IsConnected => _tcp.Connected && !_cts.IsCancellationRequested;
 
-    /// <summary>(metodo, parametri) per le notifiche di subscription.</summary>
     public event Action<string, JsonElement>? NotificationReceived;
-
-    /// <summary>Scatta quando la connessione cade (errore di lettura o chiusura remota).</summary>
     public event Action<Exception?>? Disconnected;
 
     private ElectrumClient(TcpClient tcp, Stream stream, string host, int port, bool useSsl)
@@ -43,17 +57,13 @@ public sealed class ElectrumClient : IAsyncDisposable
         Port = port;
         UseSsl = useSsl;
         _readLoop  = Task.Run(ReadLoopAsync);
+        _writeLoop = Task.Run(WriteLoopAsync);
     }
 
-    /// <summary>
-    /// Connette al server. Con <paramref name="useSsl"/> la validazione del
-    /// certificato è TOFU tramite <paramref name="pins"/> (§9): primo contatto
-    /// salva, contatti successivi confrontano; mismatch ⇒ <see cref="CertificatePinMismatchException"/>.
-    /// </summary>
     public static async Task<ElectrumClient> ConnectAsync(string host, int port, bool useSsl,
         CertificatePinStore? pins = null, CancellationToken ct = default)
     {
-        var tcp = new TcpClient();
+        var tcp = new TcpClient { NoDelay = true };
         try
         {
             await tcp.ConnectAsync(host, port, ct);
@@ -64,10 +74,7 @@ public sealed class ElectrumClient : IAsyncDisposable
                 var ssl = new SslStream(stream, leaveInnerStreamOpen: false,
                     (_, cert, _, _) =>
                     {
-                        // I server Electrum sono tipicamente self-signed: la
+                        if (cert is null) return false;
-                        // fiducia è il pin TOFU, non la catena CA (§9).
-                        if (cert is null)
-                            return false;
                         pinOk = pins is null || pins.VerifyOrPin(host, port, cert);
                         return pinOk;
                     });
@@ -84,7 +91,6 @@ public sealed class ElectrumClient : IAsyncDisposable
             }
 
             var client = new ElectrumClient(tcp, stream, host, port, useSsl);
-            // Negoziazione obbligatoria prima di ogni altra richiesta.
             await client.RequestAsync("server.version", ct, ClientName, ProtocolVersion);
             return client;
         }
@@ -97,6 +103,11 @@ public sealed class ElectrumClient : IAsyncDisposable
 
     public async Task<JsonElement> RequestAsync(string method, CancellationToken ct = default,
         params object?[] parameters)
+    {
+        // Gate before going in-flight: beyond MaxInFlight pending requests
+        // we wait for a response to free a slot, instead of flooding the server.
+        await _inFlight.WaitAsync(ct);
+        try
         {
             var id = Interlocked.Increment(ref _nextId);
             var tcs = new TaskCompletionSource<JsonElement>(TaskCreationOptions.RunContinuationsAsynchronously);
@@ -110,45 +121,138 @@ public sealed class ElectrumClient : IAsyncDisposable
                 @params = parameters,
             });
 
-        await _writeLock.WaitAsync(ct);
+            _outgoing.Writer.TryWrite(payload);
-        try
+
+            await using var registration = ct.Register(() =>
             {
-            await _stream.WriteAsync(payload, ct);
+                _pending.TryRemove(id, out _);
-            await _stream.WriteAsync("\n"u8.ToArray(), ct);
+                tcs.TrySetCanceled(ct);
-            await _stream.FlushAsync(ct);
+            });
+            return await tcs.Task;
         }
         finally
         {
-            _writeLock.Release();
+            _inFlight.Release();
+        }
     }
 
-        await using var registration = ct.Register(() => tcs.TrySetCanceled(ct));
+    /// <summary>
-        return await tcs.Task;
+    /// Drain loop: empties the channel into a single buffer → one WriteAsync+FlushAsync
+    /// for all queued messages. When N requests are queued, they are
+    /// transmitted in a single TCP segment instead of N serial flushes.
+    /// </summary>
+    private async Task WriteLoopAsync()
+    {
+        try
+        {
+            while (await _outgoing.Reader.WaitToReadAsync(_cts.Token))
+            {
+                using var ms = new MemoryStream(512);
+                while (_outgoing.Reader.TryRead(out var data))
+                {
+                    ms.Write(data);
+                    ms.WriteByte((byte)'\n');
+                }
+                await _stream.WriteAsync(ms.GetBuffer().AsMemory(0, (int)ms.Length), _cts.Token);
+                await _stream.FlushAsync(_cts.Token);
+            }
+        }
+        catch (OperationCanceledException) { }
+        catch (Exception ex)
+        {
+            foreach (var (_, pending) in _pending)
+                pending.TrySetException(ex);
+        }
     }
 
+    /// <summary>
+    /// Read loop with PipeReader: pooled buffers, zero per-response allocations
+    /// (no intermediate string), JSON parsing directly from a byte span.
+    /// </summary>
     private async Task ReadLoopAsync()
     {
         Exception? failure = null;
+        var pipe = PipeReader.Create(_stream, new StreamPipeReaderOptions(leaveOpen: true));
         try
         {
-            using var reader = new StreamReader(_stream, Encoding.UTF8, leaveOpen: true);
+            while (true)
-            while (!_cts.IsCancellationRequested)
             {
-                var line = await reader.ReadLineAsync(_cts.Token);
+                ReadResult result;
-                if (line is null)
+                try { result = await pipe.ReadAsync(_cts.Token); }
-                    break; // chiusura remota
+                catch (OperationCanceledException) { break; }
-                if (string.IsNullOrWhiteSpace(line))
-                    continue;
 
-                using var doc = JsonDocument.Parse(line);
+                var buffer = result.Buffer;
+                try
+                {
+                    while (TrySliceLine(ref buffer, out var line))
+                        if (!line.IsEmpty)
+                            DispatchLine(line);
+                }
+                finally
+                {
+                    // consumed = everything we have consumed (up to the last \n)
+                    // examined = everything we have looked at (up to the end of the buffer)
+                    pipe.AdvanceTo(buffer.Start, buffer.End);
+                }
+
+                if (result.IsCompleted) break;
+            }
+        }
+        catch (Exception ex)
+        {
+            failure = ex;
+        }
+        finally
+        {
+            await pipe.CompleteAsync();
+            foreach (var (_, tcs) in _pending)
+                tcs.TrySetException(failure ?? new IOException("Connection to the server closed."));
+            _pending.Clear();
+            Disconnected?.Invoke(failure);
+        }
+    }
+
+    private static bool TrySliceLine(ref ReadOnlySequence<byte> buffer,
+        out ReadOnlySequence<byte> line)
+    {
+        var pos = buffer.PositionOf((byte)'\n');
+        if (pos is null) { line = default; return false; }
+        line   = buffer.Slice(0, pos.Value);
+        buffer = buffer.Slice(buffer.GetPosition(1, pos.Value));
+        return true;
+    }
+
+    private void DispatchLine(ReadOnlySequence<byte> line)
+    {
+        if (line.IsSingleSegment)
+        {
+            DispatchSpan(line.FirstSpan);
+            return;
+        }
+        // Multi-segment (very long response): copy to ArrayPool then parse.
+        var len = (int)line.Length;
+        var buf = ArrayPool<byte>.Shared.Rent(len);
+        try
+        {
+            line.CopyTo(buf);
+            DispatchSpan(buf.AsSpan(0, len));
+        }
+        finally { ArrayPool<byte>.Shared.Return(buf); }
+    }
+
+    private void DispatchSpan(ReadOnlySpan<byte> utf8)
+    {
+        // JsonDocument.Parse via Utf8JsonReader: no intermediate string,
+        // parsing directly from the pooled span.
+        var reader = new Utf8JsonReader(utf8);
+        using var doc = JsonDocument.ParseValue(ref reader);
         var root = doc.RootElement;
 
         if (root.TryGetProperty("id", out var idEl) && idEl.ValueKind == JsonValueKind.Number)
         {
-                    if (!_pending.TryRemove(idEl.GetInt64(), out var tcs))
+            if (!_pending.TryRemove(idEl.GetInt64(), out var tcs)) return;
-                        continue;
+            if (root.TryGetProperty("error", out var err) && err.ValueKind != JsonValueKind.Null)
-                    if (root.TryGetProperty("error", out var error) && error.ValueKind != JsonValueKind.Null)
+                tcs.TrySetException(new ElectrumServerException(err.ToString()));
-                        tcs.TrySetException(new ElectrumServerException(error.ToString()));
             else
                 tcs.TrySetResult(root.GetProperty("result").Clone());
         }
@@ -159,37 +263,25 @@ public sealed class ElectrumClient : IAsyncDisposable
                 root.GetProperty("params").Clone());
         }
     }
-        }
-        catch (OperationCanceledException) { }
-        catch (Exception ex)
-        {
-            failure = ex;
-        }
-        finally
-        {
-            foreach (var (_, tcs) in _pending)
-                tcs.TrySetException(failure ?? new IOException("Connessione al server chiusa."));
-            _pending.Clear();
-            Disconnected?.Invoke(failure);
-        }
-    }
 
     public async ValueTask DisposeAsync()
     {
         await _cts.CancelAsync();
+        _outgoing.Writer.Complete();
         _tcp.Close();
-        try { await _readLoop; } catch { /* in chiusura */ }
+        try { await _readLoop;  } catch { }
+        try { await _writeLoop; } catch { }
         _cts.Dispose();
-        _writeLock.Dispose();
+        _inFlight.Dispose();
     }
 }
 
-/// <summary>Errore restituito dal server (campo "error" della risposta JSON-RPC).</summary>
+/// <summary>Error returned by the server ("error" field of the JSON-RPC response).</summary>
 public sealed class ElectrumServerException(string error) : Exception(error);
 
 /// <summary>
-/// Il certificato del server è cambiato rispetto a quello salvato (TOFU, §9).
+/// The server certificate changed with respect to the saved one (TOFU, §9).
-/// Si sblocca con il reset esplicito dei certificati.
+/// It is unlocked with an explicit reset of the certificates.
 /// </summary>
 public sealed class CertificatePinMismatchException(string host, int port) : Exception(
     $"Il certificato TLS di {host}:{port} è cambiato rispetto a quello salvato. " +

src/Core/Net/ServerRegistry.cs

@@ -3,7 +3,7 @@ using PalladiumWallet.Core.Chain;
 
 namespace PalladiumWallet.Core.Net;
 
-/// <summary>Server di indicizzazione noto (bootstrap o scoperto dai peer).</summary>
+/// <summary>Known indexing server (bootstrap or discovered from peers).</summary>
 public sealed record KnownServer(string Host, int TcpPort, int SslPort, string? Version = null)
 {
     public int PortFor(bool useSsl) => useSsl ? SslPort : TcpPort;
@@ -13,9 +13,9 @@ public sealed record KnownServer(string Host, int TcpPort, int SslPort, string?
 }
 
 /// <summary>
-/// Registro dei server (blueprint §9): parte dai bootstrap del profilo (§3),
+/// Server registry (blueprint §9): starts from the profile bootstrap list (§3),
-/// si arricchisce con i peer annunciati via server.peers.subscribe e persiste
+/// is enriched with peers announced via server.peers.subscribe, and persists
-/// le scoperte su file per le sessioni successive.
+/// discovered servers to file for subsequent sessions.
 /// </summary>
 public sealed class ServerRegistry
 {
@@ -42,7 +42,7 @@ public sealed class ServerRegistry
             }
             catch (JsonException)
             {
-                // File corrotto: si riparte dai soli bootstrap.
+                // Corrupted file: fall back to bootstrap servers only.
             }
         }
     }
@@ -52,15 +52,15 @@ public sealed class ServerRegistry
         get { lock (_lock) return [.. _servers]; }
     }
 
-    /// <summary>Primo server noto: default quando l'utente non ne indica uno.</summary>
+    /// <summary>First known server: default when the user does not specify one.</summary>
     public KnownServer? Default
     {
         get { lock (_lock) return _servers.FirstOrDefault(); }
     }
 
     /// <summary>
-    /// Chiede al server connesso i peer che annuncia e integra i nuovi nel
+    /// Queries the connected server for its announced peers and adds new ones to the
-    /// registro (porte mancanti → default del profilo). Ritorna quanti sono nuovi.
+    /// registry (missing ports fall back to the profile defaults). Returns the count of new entries.
     /// </summary>
     public async Task<int> DiscoverAsync(ElectrumClient client, CancellationToken ct = default)
     {
@@ -95,7 +95,7 @@ public sealed class ServerRegistry
     private void Save()
     {
         Directory.CreateDirectory(Path.GetDirectoryName(_filePath)!);
-        // Si salvano solo gli scoperti: i bootstrap vengono dal profilo.
+        // Only discovered servers are saved; bootstrap servers come from the profile.
         var discovered = _servers
             .Where(s => !_profile.BootstrapServers.Any(b =>
                 string.Equals(b.Host, s.Host, StringComparison.OrdinalIgnoreCase)))

src/Core/Net/UpdateChecker.cs

@@ -0,0 +1,66 @@
+using System;
+using System.Net.Http;
+using System.Net.Http.Json;
+using System.Text.Json.Serialization;
+using System.Threading;
+using System.Threading.Tasks;
+
+namespace PalladiumWallet.Core.Net;
+
+/// <summary>A GitHub release newer than the running app.</summary>
+public sealed record LatestRelease(string Tag, string HtmlUrl);
+
+/// <summary>
+/// Checks the latest GitHub release for the project against the running app version.
+/// Best-effort only: any network/parse failure or an up-to-date app both resolve to null,
+/// so callers never need to distinguish "no update" from "couldn't check".
+/// </summary>
+public static class UpdateChecker
+{
+    private const string ReleasesApiUrl = "https://api.github.com/repos/davide3011/PalladiumWallet/releases/latest";
+
+    private sealed class GitHubReleaseResponse
+    {
+        [JsonPropertyName("tag_name")]
+        public string? TagName { get; set; }
+
+        [JsonPropertyName("html_url")]
+        public string? HtmlUrl { get; set; }
+    }
+
+    public static async Task<LatestRelease?> CheckAsync(string currentVersion, CancellationToken ct = default)
+    {
+        try
+        {
+            using var http = new HttpClient { Timeout = TimeSpan.FromSeconds(10) };
+            http.DefaultRequestHeaders.UserAgent.ParseAdd("PalladiumWallet");
+            using var response = await http.GetAsync(ReleasesApiUrl, ct).ConfigureAwait(false);
+            if (!response.IsSuccessStatusCode) return null;
+
+            var release = await response.Content
+                .ReadFromJsonAsync<GitHubReleaseResponse>(ct)
+                .ConfigureAwait(false);
+            if (release?.TagName is not { Length: > 0 } tag) return null;
+
+            if (!TryParse(tag, out var remote) || !TryParse(currentVersion, out var local))
+                return null;
+            if (remote <= local) return null;
+
+            return new LatestRelease(tag, release.HtmlUrl ?? $"https://github.com/davide3011/PalladiumWallet/releases/tag/{tag}");
+        }
+        catch
+        {
+            return null;
+        }
+    }
+
+    /// <summary>Parses "v1.2.3" / "1.2.3-beta" style tags into a comparable <see cref="Version"/>.</summary>
+    private static bool TryParse(string raw, out Version version)
+    {
+        var s = raw.Trim();
+        if (s.StartsWith('v') || s.StartsWith('V')) s = s[1..];
+        var dash = s.IndexOf('-');
+        if (dash >= 0) s = s[..dash];
+        return Version.TryParse(s, out version!);
+    }
+}

src/Core/Spv/BlockHeaderInfo.cs

@@ -5,8 +5,8 @@ using PalladiumWallet.Core.Chain;
 namespace PalladiumWallet.Core.Spv;
 
 /// <summary>
-/// Header di blocco parsato dagli 80 byte canonici (blueprint §7.2):
+/// Block header parsed from the canonical 80 bytes (blueprint §7.2):
-/// versione, prev_hash, merkle_root, timestamp, bits, nonce.
+/// version, prev_hash, merkle_root, timestamp, bits, nonce.
 /// </summary>
 public sealed record BlockHeaderInfo(
     int Version, uint256 PrevHash, uint256 MerkleRoot, uint Timestamp, uint Bits, uint Nonce, uint256 Hash)
@@ -18,7 +18,7 @@ public sealed record BlockHeaderInfo(
     public static BlockHeaderInfo Parse(byte[] raw)
     {
         if (raw.Length != Size)
-            throw new ArgumentException($"Header di {raw.Length} byte (attesi {Size}).", nameof(raw));
+            throw new ArgumentException($"Header is {raw.Length} bytes (expected {Size}).", nameof(raw));
 
         return new BlockHeaderInfo(
             Version: BitConverter.ToInt32(raw, 0),
@@ -31,11 +31,10 @@ public sealed record BlockHeaderInfo(
     }
 
     /// <summary>
-    /// Validazione SPV dell'header (§7.2): collegamento al precedente e,
+    /// SPV header validation (§7.2): linkage to the previous header and,
-    /// se il profilo non impone lo skip (catena LWMA), verifica PoW
+    /// if the profile does not mandate skip (LWMA chain), PoW verification
-    /// hash &lt;= target dai bits. Il controllo di coerenza dei bits col
+    /// hash &lt;= target from bits. Full bits/retargeting consistency requires
-    /// retargeting completo richiede la storia: per la catena di riferimento
+    /// history — for this chain it is replaced by checkpoints (§7.3).
-    /// è sostituito dai checkpoint (§7.3).
     /// </summary>
     public bool IsValidChild(uint256 expectedPrevHash, ChainProfile profile)
     {
@@ -47,7 +46,7 @@ public sealed record BlockHeaderInfo(
         return Hash <= target;
     }
 
-    /// <summary>Confronto con un checkpoint hardcoded (§7.3).</summary>
+    /// <summary>Comparison against a hardcoded checkpoint (§7.3).</summary>
     public bool MatchesCheckpoint(Checkpoint checkpoint) =>
         Hash == uint256.Parse(checkpoint.BlockHash);
 }

src/Core/Spv/Scripthash.cs

@@ -4,8 +4,8 @@ using NBitcoin;
 namespace PalladiumWallet.Core.Spv;
 
 /// <summary>
-/// Scripthash del protocollo di indicizzazione (blueprint §0/§10): SHA-256
+/// Script hash for the indexing protocol (blueprint §0/§10): SHA-256 of the
-/// dello scriptPubKey con i byte in ordine inverso, esadecimale.
+/// scriptPubKey with bytes reversed, encoded as lowercase hex.
 /// </summary>
 public static class Scripthash
 {

src/Core/Spv/WalletSynchronizer.cs

@@ -5,22 +5,30 @@ using PalladiumWallet.Core.Chain;
 using PalladiumWallet.Core.Crypto;
 using PalladiumWallet.Core.Net;
 using PalladiumWallet.Core.Storage;
+using PalladiumWallet.Core.Wallet;
 
 namespace PalladiumWallet.Core.Spv;
 
-/// <summary>Indirizzo derivato e tracciato durante la sincronizzazione.</summary>
+/// <summary>Address derived and tracked during synchronisation.</summary>
 public sealed record TrackedAddress(
     BitcoinAddress Address, string ScriptHash, bool IsChange, int Index)
 {
     public Script ScriptPubKey => Address.ScriptPubKey;
 }
 
-/// <summary>Esito di una passata di sincronizzazione.</summary>
+/// <summary>Result of a synchronisation pass.</summary>
 public sealed class SyncResult
 {
     public required int TipHeight { get; init; }
     public required long ConfirmedSats { get; init; }
     public required long UnconfirmedSats { get; init; }
+
+    /// <summary>
+    /// Confirmed but not yet spendable: coinbase outputs below maturity or regular
+    /// outputs below <see cref="Chain.ChainProfile.MinConfirmations"/>. Subset of
+    /// <see cref="ConfirmedSats"/>.
+    /// </summary>
+    public required long ImmatureSats { get; init; }
     public required int NextReceiveIndex { get; init; }
     public required int NextChangeIndex { get; init; }
     public required IReadOnlyList<CachedTx> History { get; init; }
@@ -31,158 +39,151 @@ public sealed class SyncResult
 }
 
 /// <summary>
-/// Sincronizzazione del wallet (blueprint §7.4): per ogni indirizzo calcola lo
+/// Wallet synchronisation (blueprint §7.4).
-/// scripthash e si sottoscrive; scarica storico e transazioni; verifica ogni tx
-/// confermata con la prova di Merkle contro l'header del suo blocco (le risposte
-/// del server non sono fidate, §17); ricostruisce localmente UTXO e saldo;
-/// estende la scansione fino al gap limit (§5).
 /// </summary>
 public sealed class WalletSynchronizer(IWalletAccount account, ElectrumClient client, int gapLimit = 20)
 {
-    /// <summary>Avanzamento leggibile (per CLI e barra di stato GUI).</summary>
+    /// <summary>Human-readable progress (for CLI and GUI status bar).</summary>
     public event Action<string>? Progress;
 
-    // Richieste contemporanee verso il server. Troppo alte → -102 "server busy";
+    private readonly ConcurrentDictionary<string, Transaction> _txCache = new();
-    // troppo basse → throughput scarso su storie grandi.
-    private const int MaxConcurrent = 20;
-
-    // Cache tra le passate (stesso synchronizer per tutta la vita della
-    // connessione): le tx già scaricate e le prove di Merkle già verificate a
-    // una data altezza non si rifanno — le risincronizzazioni da notifica
-    // costano solo ciò che è cambiato (modello Electrum).
-    private readonly Dictionary<string, Transaction> _txCache = [];
     private readonly Dictionary<string, int> _verifiedAtHeight = [];
-
-    // Header grezzi per altezza: una Task<string> per altezza, condivisa tra
-    // tutte le tx dello stesso blocco → ogni blocco viene scaricato una sola
-    // volta anche con centinaia di tx confermate nello stesso blocco.
     private readonly ConcurrentDictionary<int, Task<string>> _headerFetches = new();
 
+    // Indices known from the previous sync: used by ScanChainAsync for incremental
+    // discovery — already-used addresses are fetched in a single burst instead of
+    // sequential batches, reducing round-trips from O(used/gapLimit) to O(1).
+    private int _knownReceiveIndex;
+    private int _knownChangeIndex;
+
     /// <summary>
-    /// Pre-popola le cache interne da dati salvati su disco (SyncCache).
+    /// Pre-populates internal caches from data saved on disk.
-    /// Chiamare prima di SyncOnceAsync per evitare di riscaricale le tx già note.
+    /// Call before SyncOnceAsync to avoid re-downloading already known transactions.
     /// </summary>
-    public void PreloadCaches(Dictionary<string, string> rawTxHex,
+    public void PreloadCaches(
-        Dictionary<string, int> verifiedAt, Network network)
+        Dictionary<string, string> rawTxHex,
+        Dictionary<string, int> verifiedAt,
+        Dictionary<int, string>? blockHeaders,
+        int knownReceiveIndex,
+        int knownChangeIndex,
+        Network network)
     {
         foreach (var (txid, hex) in rawTxHex)
-            if (!_txCache.ContainsKey(txid))
+            _txCache.TryAdd(txid, Transaction.Parse(hex, network));
-                _txCache[txid] = Transaction.Parse(hex, network);
         foreach (var (txid, height) in verifiedAt)
             if (!_verifiedAtHeight.ContainsKey(txid))
                 _verifiedAtHeight[txid] = height;
+        if (blockHeaders is not null)
+            foreach (var (height, hex) in blockHeaders)
+                _headerFetches.TryAdd(height, Task.FromResult(hex));
+        _knownReceiveIndex = knownReceiveIndex;
+        _knownChangeIndex  = knownChangeIndex;
     }
 
     /// <summary>
-    /// Esporta le cache correnti in forma serializzabile su disco.
+    /// Exports the current caches in a serialisable form for disk storage.
-    /// Solo le tx confermate (height > 0) vengono incluse: le non confermate
+    /// Only confirmed transactions (height > 0) are included: unconfirmed ones
-    /// possono cambiare (RBF) e vanno sempre riscaricate.
+    /// may change (RBF) and must always be re-downloaded.
     /// </summary>
-    public (Dictionary<string, string> RawTxHex, Dictionary<string, int> VerifiedAt)
+    public (Dictionary<string, string> RawTxHex,
+            Dictionary<string, int> VerifiedAt,
+            Dictionary<int, string> BlockHeaders)
         ExportCaches(Network network)
     {
-        // Includi solo le tx associate a una prova di Merkle verificata
-        // (cioè confermate e verificate): sono le uniche immutabili.
         var rawHex = _verifiedAtHeight.Keys
             .Where(_txCache.ContainsKey)
             .ToDictionary(txid => txid, txid => _txCache[txid].ToHex());
-        return (rawHex, new Dictionary<string, int>(_verifiedAtHeight));
+
+        // Only already-completed headers: in-progress Task<string> instances
+        // are not persisted (they will be re-fetched on the next sync if needed).
+        var headers = new Dictionary<int, string>();
+        foreach (var (height, task) in _headerFetches)
+            if (task.IsCompletedSuccessfully)
+                headers[height] = task.Result;
+
+        return (rawHex, new Dictionary<string, int>(_verifiedAtHeight), headers);
     }
 
     public async Task<SyncResult> SyncOnceAsync(CancellationToken ct = default)
     {
         var tip = await client.SubscribeHeadersAsync(ct);
-        Progress?.Invoke($"tip della catena: {tip.Height}");
+        Progress?.Invoke($"chain tip: {tip.Height}");
 
-        // 1-2. Scansione indirizzi.
+        // 1-2. Address scanning.
         var tracked = new List<TrackedAddress>();
         var historyByAddress = new Dictionary<string, IReadOnlyList<HistoryItem>>();
         int nextReceive, nextChange;
 
         if (account.FixedAddresses is { } fixedAddresses)
         {
-            // Importati WIF: lista fissa, nessun gap limit.
-            // Pochi indirizzi → subscribe diretto per notifiche push.
             foreach (var (addr, isChange, idx) in fixedAddresses)
                 tracked.Add(new TrackedAddress(addr, Scripthash.FromAddress(addr), isChange, idx));
             nextReceive = tracked.Count(t => !t.IsChange);
             nextChange  = 0;
 
-            var histories = await Task.WhenAll(
+            await Task.WhenAll(tracked.Select(t => RetryOnBusyAsync(async () =>
-                tracked.Select(t => client.GetHistoryAsync(t.ScriptHash, ct)));
-            for (var i = 0; i < tracked.Count; i++)
             {
-                if (histories[i].Count > 0)
+                var h = await client.GetHistoryAsync(t.ScriptHash, ct);
-                    historyByAddress[tracked[i].ScriptHash] = histories[i];
+                if (h.Count > 0) historyByAddress[t.ScriptHash] = h;
-            }
+            }, ct)).Concat(tracked.Select(t =>
-            // Subscribe a tutti (pochi): notifiche push per ogni indirizzo importato.
+                RetryOnBusyAsync(() => client.SubscribeScripthashAsync(t.ScriptHash, ct), ct))));
-            await Task.WhenAll(tracked.Select(t => client.SubscribeScripthashAsync(t.ScriptHash, ct)));
         }
         else
         {
-            // HD: discovery con GetHistoryAsync (senza subscription → no -101 su wallet grandi);
+            // Receive and change chains in parallel (independent by definition).
-            // subscribe solo al gap window per ricevere notifiche push di nuove tx.
+            // ScanChainAsync uses _knownReceiveIndex/_knownChangeIndex for incremental
-            nextReceive = await ScanChainAsync(isChange: false, tracked, historyByAddress, ct);
+            // discovery: already-used addresses are fetched in a single burst.
-            nextChange  = await ScanChainAsync(isChange: true,  tracked, historyByAddress, ct);
+            var receiveTask = ScanChainAsync(isChange: false, _knownReceiveIndex, ct);
+            var changeTask  = ScanChainAsync(isChange: true,  _knownChangeIndex,  ct);
+            var rxScan = await receiveTask;
+            var chScan = await changeTask;
+
+            tracked.AddRange(rxScan.Tracked);
+            tracked.AddRange(chScan.Tracked);
+            foreach (var (k, v) in rxScan.History) historyByAddress[k] = v;
+            foreach (var (k, v) in chScan.History) historyByAddress[k] = v;
+            nextReceive = rxScan.NextIndex;
+            nextChange  = chScan.NextIndex;
 
-            // Iscriviti al gap window (prossimi indirizzi attesi) per notifiche push.
-            // In questo modo il numero di subscription è sempre ≤ 2×gapLimit, indipendentemente
-            // dalla dimensione dello storico — nessun rischio di -101.
             var gapAddresses = tracked.Where(t =>
                 (!t.IsChange && t.Index >= nextReceive && t.Index < nextReceive + gapLimit) ||
                 ( t.IsChange && t.Index >= nextChange  && t.Index < nextChange  + gapLimit)).ToList();
             if (gapAddresses.Count > 0)
-                await Task.WhenAll(gapAddresses.Select(t => client.SubscribeScripthashAsync(t.ScriptHash, ct)));
+                await Task.WhenAll(gapAddresses.Select(t =>
+                    RetryOnBusyAsync(() => client.SubscribeScripthashAsync(t.ScriptHash, ct), ct)));
         }
 
-        // 3. Storico unico (txid → altezza massima riportata).
+        // 3. Merged history (txid → highest reported height).
         var txHeights = new Dictionary<string, int>();
         foreach (var item in historyByAddress.Values.SelectMany(h => h))
             txHeights[item.TxHash] = item.Height;
 
-        // 4. Scarica le transazioni nuove: semaforo MaxConcurrent per non saturare
+        // 4+5. Download missing transactions and verify Merkle proofs in parallel.
-        //    il server, con aggiornamento progresso in tempo reale.
         var network  = PalladiumNetworks.For(account.Profile.Kind);
         var missing  = txHeights.Keys.Where(txid => !_txCache.ContainsKey(txid)).ToList();
-        if (missing.Count > 0)
-        {
-            var dlSem = new SemaphoreSlim(MaxConcurrent, MaxConcurrent);
-            var dlDone = 0;
-            Progress?.Invoke($"scarico 0/{missing.Count} transazioni…");
-            await Task.WhenAll(missing.Select(async txid =>
-            {
-                await dlSem.WaitAsync(ct);
-                try
-                {
-                    var raw = await client.GetTransactionAsync(txid, ct);
-                    _txCache[txid] = Transaction.Parse(raw, network);
-                    var n = Interlocked.Increment(ref dlDone);
-                    Progress?.Invoke($"scarico {n}/{missing.Count} transazioni…");
-                }
-                finally { dlSem.Release(); }
-            }));
-        }
-        var transactions = txHeights.Keys.ToDictionary(txid => txid, txid => _txCache[txid]);
-
-        // 5. Verifica Merkle delle confermate (§7.4 punto 4).
-        //    Gli header per altezza sono condivisi via _headerFetches: se 500 tx
-        //    stanno nello stesso blocco, l'header viene scaricato una sola volta.
         var toVerify = txHeights
             .Where(kv => kv.Value > 0
                 && (!_verifiedAtHeight.TryGetValue(kv.Key, out var h) || h != kv.Value))
             .ToList();
-        if (toVerify.Count > 0)
+
+        if (missing.Count > 0 || toVerify.Count > 0)
         {
-            var merkSem = new SemaphoreSlim(MaxConcurrent, MaxConcurrent);
+            Progress?.Invoke($"downloading {missing.Count} txs, verifying {toVerify.Count} proofs…");
+            var dlDone   = 0;
             var merkDone = 0;
-            Progress?.Invoke($"verifico 0/{toVerify.Count} prove di Merkle…");
+
-            await Task.WhenAll(toVerify.Select(async kv =>
+            var dlTasks = missing.Select(txid => RetryOnBusyAsync(async () =>
             {
-                await merkSem.WaitAsync(ct);
+                var raw = await client.GetTransactionAsync(txid, ct);
-                try
+                _txCache[txid] = Transaction.Parse(raw, network);
+                var n = Interlocked.Increment(ref dlDone);
+                if (n % 50 == 0 || n == missing.Count)
+                    Progress?.Invoke($"tx {n}/{missing.Count}, proofs {merkDone}/{toVerify.Count}…");
+            }, ct));
+
+            var merkTasks = toVerify.Select(kv => RetryOnBusyAsync(async () =>
             {
                 var (txid, height) = kv;
-                    // Proof e header in parallelo; l'header è condiviso per altezza.
                 var proofTask  = client.GetMerkleAsync(txid, height, ct);
                 var headerTask = _headerFetches.GetOrAdd(height,
                     h => client.GetBlockHeaderAsync(h, ct));
@@ -192,19 +193,21 @@ public sealed class WalletSynchronizer(IWalletAccount account, ElectrumClient cl
                         uint256.Parse(txid), proof.Pos,
                         proof.Merkle.Select(uint256.Parse), header.MerkleRoot))
                     throw new SpvVerificationException(
-                            $"Prova di Merkle non valida per {txid} (blocco {height}): server non affidabile.");
+                        $"Invalid Merkle proof for {txid} (block {height}): server is not trustworthy.");
                 var n = Interlocked.Increment(ref merkDone);
-                    Progress?.Invoke($"verifico {n}/{toVerify.Count} prove di Merkle…");
+                if (n % 50 == 0 || n == toVerify.Count)
-                }
+                    Progress?.Invoke($"tx {dlDone}/{missing.Count}, proofs {n}/{toVerify.Count}…");
-                finally { merkSem.Release(); }
+            }, ct));
-            }));
+
+            await Task.WhenAll(dlTasks.Concat(merkTasks));
             foreach (var (txid, height) in toVerify)
                 _verifiedAtHeight[txid] = height;
         }
+
+        var transactions = txHeights.Keys.ToDictionary(txid => txid, txid => _txCache[txid]);
         var verified     = txHeights.ToDictionary(kv => kv.Key, kv => kv.Value > 0);
 
-        // 6. Ricostruzione locale degli UTXO: accrediti = output verso nostri
+        // 6. Local UTXO reconstruction.
-        //    script; spesi = outpoint consumati da una qualunque tx del wallet.
         var byScript = tracked.ToDictionary(t => t.ScriptPubKey, t => t);
         var spent = transactions.Values
             .SelectMany(tx => tx.Inputs)
@@ -230,11 +233,12 @@ public sealed class WalletSynchronizer(IWalletAccount account, ElectrumClient cl
                     IsChange      = addr.IsChange,
                     AddressIndex  = addr.Index,
                     Height        = txHeights[txid],
+                    IsCoinbase    = tx.IsCoinBase,
                 });
             }
         }
 
-        // 7. Delta per voce di storico (entrate - uscite del wallet).
+        // 7. Delta per history entry.
         var history = new List<CachedTx>();
         foreach (var (txid, tx) in transactions)
         {
@@ -255,13 +259,11 @@ public sealed class WalletSynchronizer(IWalletAccount account, ElectrumClient cl
         }
         history.Sort((a, b) =>
         {
-            // Non confermate (height<=0) in cima, poi per altezza decrescente.
             var ha = a.Height <= 0 ? int.MaxValue : a.Height;
             var hb = b.Height <= 0 ? int.MaxValue : b.Height;
             return hb.CompareTo(ha);
         });
 
-        // Saldo e numero di transazioni per singolo indirizzo (vista indirizzi).
         var balanceByAddress = utxos
             .GroupBy(u => u.Address)
             .ToDictionary(g => g.Key, g => g.Sum(u => u.ValueSats));
@@ -282,6 +284,9 @@ public sealed class WalletSynchronizer(IWalletAccount account, ElectrumClient cl
             TipHeight        = tip.Height,
             ConfirmedSats    = utxos.Where(u => u.Height > 0).Sum(u => u.ValueSats),
             UnconfirmedSats  = utxos.Where(u => u.Height <= 0).Sum(u => u.ValueSats),
+            ImmatureSats     = utxos.Where(u =>
+                u.Height > 0 && u.Confirmations(tip.Height) < u.RequiredConfirmations(account.Profile))
+                .Sum(u => u.ValueSats),
             NextReceiveIndex = nextReceive,
             NextChangeIndex  = nextChange,
             History          = history,
@@ -293,38 +298,63 @@ public sealed class WalletSynchronizer(IWalletAccount account, ElectrumClient cl
     }
 
     /// <summary>
-    /// Scansiona una catena (receiving o change) finché trova gapLimit indirizzi
+    /// Scans one chain (receiving or change).
-    /// vuoti consecutivi (§5), procedendo a batch paralleli di gapLimit per volta.
+    ///
-    /// Usa GetHistoryAsync per la discovery — senza subscription → nessun rischio di
+    /// Phase 1 — known addresses (0..fromIndex-1): all GetHistoryAsync calls are
-    /// -101 "excessive resource usage" su wallet con molti indirizzi storici.
+    /// fired in a single parallel burst, with no sequential batching. A wallet
-    /// Le subscription per notifiche push vengono gestite dal chiamante (solo gap window).
+    /// with 100 used addresses costs 1 RTT instead of 5 sequential gap-limit rounds.
-    /// Ritorna il primo indice non usato.
+    ///
+    /// Phase 2 — discovery from fromIndex onwards: gap-limit batching as before,
+    /// required to know when to stop.
     /// </summary>
-    private async Task<int> ScanChainAsync(bool isChange, List<TrackedAddress> tracked,
+    private async Task<(int NextIndex,
-        Dictionary<string, IReadOnlyList<HistoryItem>> historyByAddress, CancellationToken ct)
+                         List<TrackedAddress> Tracked,
+                         Dictionary<string, IReadOnlyList<HistoryItem>> History)>
+        ScanChainAsync(bool isChange, int fromIndex, CancellationToken ct)
     {
+        var tracked = new List<TrackedAddress>();
+        var history = new Dictionary<string, IReadOnlyList<HistoryItem>>();
+
+        // Phase 1: single burst for all already-known addresses.
+        if (fromIndex > 0)
+        {
+            var known = Enumerable.Range(0, fromIndex).Select(i =>
+            {
+                var addr = account.GetAddress(isChange, i);
+                return new TrackedAddress(addr, Scripthash.FromAddress(addr), isChange, i);
+            }).ToList();
+            tracked.AddRange(known);
+
+            var knownHistories = await Task.WhenAll(
+                known.Select(t => RetryOnBusyAsync(
+                    () => client.GetHistoryAsync(t.ScriptHash, ct), ct)));
+            for (var i = 0; i < known.Count; i++)
+                if (knownHistories[i].Count > 0)
+                    history[known[i].ScriptHash] = knownHistories[i];
+        }
+
+        // Phase 2: gap-limit discovery from fromIndex onwards.
         var consecutiveEmpty = 0;
-        var index = 0;
+        var index      = fromIndex;
-        var firstUnused = 0;
+        var firstUnused = fromIndex;
+
         while (consecutiveEmpty < gapLimit)
         {
             var batch = Enumerable.Range(index, gapLimit).Select(i =>
             {
-                var address = account.GetAddress(isChange, i);
+                var addr = account.GetAddress(isChange, i);
-                return new TrackedAddress(address, Scripthash.FromAddress(address), isChange, i);
+                return new TrackedAddress(addr, Scripthash.FromAddress(addr), isChange, i);
             }).ToList();
             index += batch.Count;
             tracked.AddRange(batch);
 
-            // GetHistoryAsync per discovery: risposta vuota [] se inutilizzato,
-            // lista di tx se usato — un solo round-trip per indirizzo.
             var histories = await Task.WhenAll(
-                batch.Select(t => client.GetHistoryAsync(t.ScriptHash, ct)));
+                batch.Select(t => RetryOnBusyAsync(
+                    () => client.GetHistoryAsync(t.ScriptHash, ct), ct)));
 
             for (var i = 0; i < batch.Count && consecutiveEmpty < gapLimit; i++)
             {
-                var history = histories[i];
+                if (histories[i].Count == 0)
-                if (history.Count == 0)
                 {
                     consecutiveEmpty++;
                 }
@@ -332,13 +362,50 @@ public sealed class WalletSynchronizer(IWalletAccount account, ElectrumClient cl
                 {
                     consecutiveEmpty = 0;
                     firstUnused = batch[i].Index + 1;
-                    historyByAddress[batch[i].ScriptHash] = history;
+                    history[batch[i].ScriptHash] = histories[i];
                 }
             }
         }
-        return firstUnused;
-    }
-}
 
-/// <summary>La verifica SPV è fallita: i dati del server contraddicono le prove (§17).</summary>
+        return (firstUnused, tracked, history);
+    }
+
+    private static async Task RetryOnBusyAsync(Func<Task> op, CancellationToken ct)
+    {
+        var delay = 200;
+        for (var attempt = 0; ; attempt++)
+        {
+            try   { await op(); return; }
+            catch (ElectrumServerException ex)
+                when (IsBusy(ex) && attempt < 7)
+            {
+                await Task.Delay(delay, ct);
+                delay = Math.Min(delay * 2, 5_000);
+            }
+        }
+    }
+
+    private static async Task<T> RetryOnBusyAsync<T>(Func<Task<T>> op, CancellationToken ct)
+    {
+        var delay = 200;
+        for (var attempt = 0; ; attempt++)
+        {
+            try   { return await op(); }
+            catch (ElectrumServerException ex)
+                when (IsBusy(ex) && attempt < 7)
+            {
+                await Task.Delay(delay, ct);
+                delay = Math.Min(delay * 2, 5_000);
+            }
+        }
+    }
+
+    private static bool IsBusy(ElectrumServerException ex) =>
+        ex.Message.Contains("-102") ||
+        ex.Message.Contains("-101") ||
+        ex.Message.Contains("server busy", StringComparison.OrdinalIgnoreCase) ||
+        ex.Message.Contains("excessive resource usage", StringComparison.OrdinalIgnoreCase);
+}
+
+/// <summary>SPV verification failed: server data contradicts the proofs (§17).</summary>
 public sealed class SpvVerificationException(string message) : Exception(message);

src/Core/Storage/AppConfig.cs

@@ -3,18 +3,23 @@ using System.Text.Json;
 namespace PalladiumWallet.Core.Storage;
 
 /// <summary>
-/// Configurazione globale dell'applicazione (blueprint §8), separata dai file
+/// Global application configuration (blueprint §8), separate from wallet
-/// wallet: lingua, unità di visualizzazione, ecc. Persistita in config.json
+/// files: language, display unit, etc. Persisted in config.json
-/// nella radice dei dati (vale per tutte le reti).
+/// in the data root (applies to all networks).
 /// </summary>
 public sealed class AppConfig
 {
-    /// <summary>Codice lingua UI.</summary>
+    /// <summary>UI language code.</summary>
     public string Language { get; set; } = "en";
 
-    /// <summary>Unità di visualizzazione degli importi (vedi <see cref="Wallet.CoinAmount.Units"/>).</summary>
+    /// <summary>Display unit for amounts (see <see cref="Wallet.CoinAmount.Units"/>).</summary>
     public string Unit { get; set; } = "PLM";
 
+    /// <summary>Last successfully connected server, persisted across sessions.</summary>
+    public string? LastServerHost { get; set; }
+    public int? LastServerPort { get; set; }
+    public bool LastServerUseSsl { get; set; } = true;
+
     private static readonly JsonSerializerOptions JsonOptions = new() { WriteIndented = true };
 
     public static AppConfig Load(string? path = null)
@@ -28,7 +33,7 @@ public sealed class AppConfig
         }
         catch (JsonException)
         {
-            // Config corrotta: si riparte dai default senza bloccare l'avvio.
+            // Corrupted config: fall back to defaults without blocking startup.
             return new AppConfig();
         }
     }

src/Core/Storage/AppPaths.cs

@@ -3,29 +3,29 @@ using PalladiumWallet.Core.Chain;
 namespace PalladiumWallet.Core.Storage;
 
 /// <summary>
-/// Percorsi dati per piattaforma (blueprint §8). La radice dati può essere:
+/// Per-platform data paths (blueprint §8). The data root can be:
-/// 1. <b>portable</b>: cartella "palladium-data" accanto all'eseguibile;
+/// 1. <b>portable</b>: "palladium-data" folder next to the executable;
-/// 2. <b>personalizzata</b>: scelta dall'utente al primo avvio e memorizzata in
+/// 2. <b>custom</b>: chosen by the user at first launch and stored in
-///    un piccolo file "puntatore" in una posizione di bootstrap fissa;
+///    a small "pointer" file at a fixed bootstrap location;
-/// 3. <b>legacy</b>: vecchia posizione (%APPDATA%/PalladiumWallet) se contiene già dati;
+/// 3. <b>legacy</b>: old location (%APPDATA%/PalladiumWallet) if it already holds data;
-/// 4. <b>default</b>: ~/.PalladiumWallet (Linux/macOS) o %ProgramFiles%\PalladiumWallet (Windows).
+/// 4. <b>default</b>: ~/.PalladiumWallet (Linux/macOS) or %ProgramFiles%\PalladiumWallet (Windows).
-/// Sotto la radice c'è una sottocartella per rete (config, wallet, header, certificati).
+/// Under the root there is a per-network subfolder (config, wallet, header, certificates).
 /// </summary>
 public static class AppPaths
 {
     public const string PortableDirName = "palladium-data";
 
-    /// <summary>Nome cartella applicazione, usato nei vari percorsi.</summary>
+    /// <summary>Application folder name, used in the various paths.</summary>
     public const string AppDirName = "PalladiumWallet";
 
-    /// <summary>Override esplicito della radice dati (es. CLI --data-dir). Ha priorità su tutto.</summary>
+    /// <summary>Explicit override of the data root (e.g. CLI --data-dir). Takes priority over everything.</summary>
     public static string? OverrideDataRoot { get; set; }
 
     /// <summary>
-    /// Radice dati predefinita, secondo la convenzione di ogni piattaforma:
+    /// Default data root, following each platform's convention:
-    /// Windows → %APPDATA%\PalladiumWallet (PascalCase, come Electrum/Bitcoin);
+    /// Windows → %APPDATA%\PalladiumWallet (PascalCase, like Electrum/Bitcoin);
-    /// Linux/macOS → ~/.palladium-wallet (dotfolder minuscolo, come ~/.bitcoin).
+    /// Linux/macOS → ~/.palladium-wallet (lowercase dotfolder, like ~/.bitcoin).
-    /// Per-utente e sempre scrivibile, senza privilegi di amministratore.
+    /// Per-user and always writable, without administrator privileges.
     /// </summary>
     public static string DefaultDataRoot()
     {
@@ -37,8 +37,8 @@ public static class AppPaths
         return Path.Combine(home, ".palladium-wallet");
     }
 
-    /// <summary>File puntatore alla radice dati scelta dall'utente. Vive in una
+    /// <summary>Pointer file to the user-chosen data root. Lives at a
-    /// posizione di bootstrap sempre scrivibile e indipendente dalla radice dati.</summary>
+    /// bootstrap location that is always writable and independent of the data root.</summary>
     private static string LocationPointerPath() =>
         Path.Combine(
             Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData),
@@ -50,7 +50,7 @@ public static class AppPaths
     private static bool HasData(string root) =>
         Directory.Exists(root) && Directory.EnumerateFileSystemEntries(root).Any();
 
-    /// <summary>Radice dati effettiva, secondo l'ordine di precedenza documentato in classe.</summary>
+    /// <summary>Effective data root, following the precedence order documented on the class.</summary>
     public static string DataRoot()
     {
         if (!string.IsNullOrEmpty(OverrideDataRoot))
@@ -67,9 +67,9 @@ public static class AppPaths
     }
 
     /// <summary>
-    /// true se la posizione dei dati è già determinata e non serve chiederla
+    /// true if the data location is already determined and need not be asked
-    /// all'utente: modalità portable, override, puntatore già scritto, oppure
+    /// of the user: portable mode, override, pointer already written, or
-    /// dati già presenti nella posizione predefinita.
+    /// data already present at the default location.
     /// </summary>
     public static bool IsDataLocationConfigured() =>
         !string.IsNullOrEmpty(OverrideDataRoot)
@@ -77,7 +77,7 @@ public static class AppPaths
         || ReadPointer() is not null
         || HasData(DefaultDataRoot());
 
-    /// <summary>Memorizza la radice dati scelta dall'utente e la crea su disco.</summary>
+    /// <summary>Stores the user-chosen data root and creates it on disk.</summary>
     public static void ConfigureDataLocation(string root)
     {
         root = Path.GetFullPath(root.Trim());
@@ -96,7 +96,7 @@ public static class AppPaths
         return string.IsNullOrEmpty(path) ? null : path;
     }
 
-    /// <summary>Cartella dati della rete (config, wallet, header, certificati).</summary>
+    /// <summary>Network data folder (config, wallet, header, certificates).</summary>
     public static string ForNetwork(NetKind net)
     {
         var dir = Path.Combine(DataRoot(), ChainProfiles.For(net).NetName);
@@ -114,7 +114,7 @@ public static class AppPaths
     public static string DefaultWalletPath(NetKind net) =>
         Path.Combine(WalletsDir(net), "default.wallet.json");
 
-    /// <summary>Tutti i file wallet della rete, ordinati per nome (multi-wallet §8).</summary>
+    /// <summary>All wallet files for the network, ordered by name (multi-wallet §8).</summary>
     public static IReadOnlyList<string> WalletFiles(NetKind net)
     {
         var dir = WalletsDir(net);

src/Core/Storage/EncryptedFile.cs

@@ -5,9 +5,9 @@ using System.Text.Json;
 namespace PalladiumWallet.Core.Storage;
 
 /// <summary>
-/// Cifratura del file wallet (blueprint §8/§17): AES-256-GCM con chiave derivata
+/// Wallet file encryption (blueprint §8/§17): AES-256-GCM with a key derived
-/// dalla password via PBKDF2-HMAC-SHA512. Il contenitore è JSON autodescrittivo
+/// from the password via PBKDF2-HMAC-SHA512. The container is self-describing JSON
-/// (kdf, parametri, salt, nonce) per consentire upgrade futuri dei parametri.
+/// (kdf, parameters, salt, nonce) to allow future parameter upgrades.
 /// </summary>
 public static class EncryptedFile
 {
@@ -54,7 +54,7 @@ public static class EncryptedFile
             Convert.ToBase64String(tag), Convert.ToBase64String(cipher)));
     }
 
-    /// <summary>Lancia <see cref="WrongPasswordException"/> se la password è errata o il file è manomesso.</summary>
+    /// <summary>Throws <see cref="WrongPasswordException"/> if the password is wrong or the file is tampered with.</summary>
     public static string Decrypt(string fileContent, string password)
     {
         var container = JsonSerializer.Deserialize<Container>(fileContent)
@@ -74,7 +74,7 @@ public static class EncryptedFile
         }
         catch (AuthenticationTagMismatchException)
         {
-            // Il tag GCM autentica: password errata e manomissione sono indistinguibili.
+            // The GCM tag authenticates: a wrong password and tampering are indistinguishable.
             throw new WrongPasswordException();
         }
         finally
@@ -88,7 +88,7 @@ public static class EncryptedFile
         Rfc2898DeriveBytes.Pbkdf2(password, salt, iterations, HashAlgorithmName.SHA512, KeySize);
 }
 
-/// <summary>Password errata (o file wallet manomesso: il tag GCM non distingue i due casi).</summary>
+/// <summary>Wrong password (or tampered wallet file: the GCM tag does not distinguish the two cases).</summary>
 public sealed class WrongPasswordException : Exception
 {
     public WrongPasswordException() : base("Password errata o file wallet danneggiato.") { }

src/Core/Storage/WalletDocument.cs

@@ -4,9 +4,9 @@ using System.Text.Json.Serialization;
 namespace PalladiumWallet.Core.Storage;
 
 /// <summary>
-/// Schema del file wallet (blueprint §8), versionato per consentire migrazioni
+/// Wallet file schema (blueprint §8), versioned to allow automatic
-/// automatiche all'apertura. La cifratura (quando c'è una password) avvolge
+/// migrations on opening. Encryption (when there is a password) wraps
-/// l'intero documento via <see cref="EncryptedFile"/>.
+/// the entire document via <see cref="EncryptedFile"/>.
 /// </summary>
 public sealed class WalletDocument
 {
@@ -14,42 +14,42 @@ public sealed class WalletDocument
 
     public int Version { get; set; } = CurrentVersion;
 
-    /// <summary>Nome rete (mainnet/testnet/regtest), come ChainProfile.NetName.</summary>
+    /// <summary>Network name (mainnet/testnet/regtest), as ChainProfile.NetName.</summary>
     public required string Network { get; set; }
 
-    /// <summary>Tipo di script (nome dell'enum ScriptKind).</summary>
+    /// <summary>Script type (name of the ScriptKind enum).</summary>
     public required string ScriptKind { get; set; }
 
-    /// <summary>Mnemonica BIP39 in chiaro nel documento (il documento va cifrato!); null se watch-only.</summary>
+    /// <summary>BIP39 mnemonic in plaintext in the document (the document must be encrypted!); null if watch-only.</summary>
     public string? Mnemonic { get; set; }
 
-    /// <summary>Extension word BIP39 (§4.1); null se assente.</summary>
+    /// <summary>BIP39 extension word (§4.1); null if absent.</summary>
     public string? Passphrase { get; set; }
 
-    /// <summary>Path di account (es. "84'/746'/0'"); null per importati WIF.</summary>
+    /// <summary>Account path (e.g. "84'/746'/0'"); null for imported WIF.</summary>
     public string? AccountPath { get; set; }
 
-    /// <summary>Xpub di account in SLIP-132 per i wallet HD; null per importati WIF.</summary>
+    /// <summary>Account xpub in SLIP-132 for HD wallets; null for imported WIF.</summary>
     public string? AccountXpub { get; set; }
 
-    /// <summary>Xprv di account in SLIP-132; presente solo per import da xprv senza seed.</summary>
+    /// <summary>Account xprv in SLIP-132; present only for import from xprv without seed.</summary>
     public string? AccountXprv { get; set; }
 
     public string? MasterFingerprint { get; set; }
 
-    /// <summary>Chiavi WIF importate (in chiaro nel documento — va cifrato!).</summary>
+    /// <summary>Imported WIF keys (in plaintext in the document — must be encrypted!).</summary>
     public List<string>? WifKeys { get; set; }
 
-    /// <summary>Gap limit per la scansione indirizzi (§5), configurabile.</summary>
+    /// <summary>Gap limit for address scanning (§5), configurable.</summary>
     public int GapLimit { get; set; } = 20;
 
-    /// <summary>Etichette per indirizzo/txid (§12).</summary>
+    /// <summary>Labels by address/txid (§12).</summary>
     public Dictionary<string, string> Labels { get; set; } = [];
 
-    /// <summary>Rubrica contatti (nome + indirizzo blockchain).</summary>
+    /// <summary>Contact address book (name + blockchain address).</summary>
     public List<StoredContact> Contacts { get; set; } = [];
 
-    /// <summary>Cache dell'ultimo stato sincronizzato (saldo/storico mostrabili offline).</summary>
+    /// <summary>Cache of the last synced state (balance/history viewable offline).</summary>
     public SyncCache? Cache { get; set; }
 
     public bool IsWatchOnly =>
@@ -69,6 +69,7 @@ public sealed class WalletDocument
     {
         var doc = JsonSerializer.Deserialize<WalletDocument>(json, JsonOptions)
             ?? throw new InvalidDataException("File wallet non valido.");
+        // string literal above intentionally left untranslated
         return Migrate(doc);
     }
 
@@ -94,6 +95,9 @@ public sealed class SyncCache
     public int TipHeight { get; set; }
     public long ConfirmedSats { get; set; }
     public long UnconfirmedSats { get; set; }
+
+    /// <summary>Confirmed but not yet spendable (coinbase immature or under min confirmations). Subset of ConfirmedSats.</summary>
+    public long ImmatureSats { get; set; }
     public int NextReceiveIndex { get; set; }
     public int NextChangeIndex { get; set; }
     public List<CachedTx> History { get; set; } = [];
@@ -101,21 +105,28 @@ public sealed class SyncCache
     public List<CachedAddress> Addresses { get; set; } = [];
 
     /// <summary>
-    /// Cache raw delle transazioni confermate (txid → hex). Evita di riscaricale
+    /// Raw transaction cache (txid → hex). Avoids re-downloading confirmed
-    /// ad ogni avvio dell'app: le tx confermate sono immutabili per definizione.
+    /// transactions on every launch: confirmed txs are immutable by definition.
-    /// Popolata anche parzialmente in caso di sync interrotta (es. -101):
+    /// May be partially populated after an interrupted sync (e.g. -101 error);
-    /// il synchronizer riprende dal punto in cui si era fermato.
+    /// the synchronizer resumes from where it left off.
     /// </summary>
     public Dictionary<string, string>? RawTxHex { get; set; }
 
     /// <summary>
-    /// Prove di Merkle già verificate (txid → altezza blocco). Evita di
+    /// Already-verified Merkle proofs (txid → block height). Avoids re-verifying
-    /// riverificare le stesse prove ad ogni avvio: le conferme sono immutabili.
+    /// the same proofs on every launch: confirmations are immutable.
     /// </summary>
     public Dictionary<string, int>? VerifiedAt { get; set; }
+
+    /// <summary>
+    /// Raw headers by height (height → hex). Immutable: never re-fetched once saved.
+    /// Eliminates GetBlockHeader calls for Merkle proofs already verified in
+    /// subsequent syncs.
+    /// </summary>
+    public Dictionary<int, string>? BlockHeaders { get; set; }
 }
 
-/// <summary>Indirizzo scansionato con saldo proprio e numero di transazioni (vista indirizzi).</summary>
+/// <summary>Scanned address with its own balance and transaction count (address view).</summary>
 public sealed class CachedAddress
 {
     public required string Address { get; set; }
@@ -142,5 +153,6 @@ public sealed class CachedUtxo
     public bool IsChange { get; set; }
     public int AddressIndex { get; set; }
     public int Height { get; set; }
+    public bool IsCoinbase { get; set; }
     public bool Frozen { get; set; }
 }

src/Core/Wallet/CoinAmount.cs

@@ -3,17 +3,17 @@ using System.Globalization;
 namespace PalladiumWallet.Core.Wallet;
 
 /// <summary>
-/// Conversione satoshi ↔ unità coin (8 decimali) per visualizzazione e input.
+/// Satoshi ↔ coin unit conversion (8 decimal places) for display and input.
-/// Si lavora sempre in satoshi internamente; la stringa è solo presentazione.
+/// All internal computation uses satoshis; the formatted string is presentation only.
 /// </summary>
 public static class CoinAmount
 {
     public const long SatsPerCoin = 100_000_000;
 
-    /// <summary>Unità di visualizzazione selezionabili (config §8).</summary>
+    /// <summary>Selectable display units (config §8).</summary>
     public static readonly string[] Units = ["PLM", "mPLM", "µPLM", "sat"];
 
-    /// <summary>(satoshi per unità, decimali mostrati) di ciascuna unità.</summary>
+    /// <summary>(satoshis per unit, displayed decimals) for each unit.</summary>
     private static (long Factor, int Decimals) Of(string unit) => unit switch
     {
         "PLM"  => (SatsPerCoin, 8),
@@ -27,7 +27,7 @@ public static class CoinAmount
         (sats / (decimal)SatsPerCoin).ToString("0.00000000", CultureInfo.InvariantCulture)
         + (unit.Length > 0 ? " " + unit : "");
 
-    /// <summary>Formatta nell'unità scelta (es. 150000 sat → "1.50000 mPLM").</summary>
+    /// <summary>Formats in the chosen unit (e.g. 150000 sat → "1.50000 mPLM").</summary>
     public static string FormatIn(long sats, string unit, bool withLabel = true)
     {
         var (factor, decimals) = Of(unit);
@@ -36,7 +36,7 @@ public static class CoinAmount
         return withLabel ? $"{value} {unit}" : value;
     }
 
-    /// <summary>Parsa un importo espresso nell'unità scelta in satoshi.</summary>
+    /// <summary>Parses an amount expressed in the chosen unit into satoshis.</summary>
     public static bool TryParseIn(string text, string unit, out long sats)
     {
         sats = 0;
@@ -59,7 +59,7 @@ public static class CoinAmount
         return true;
     }
 
-    /// <summary>Parsa un importo in coin (punto o virgola decimale) in satoshi.</summary>
+    /// <summary>Parses a coin amount (decimal point or comma) into satoshis.</summary>
     public static bool TryParseCoins(string text, out long sats)
     {
         sats = 0;

src/Core/Wallet/TransactionFactory.cs

@@ -6,7 +6,7 @@ using PalladiumWallet.Core.Storage;
 
 namespace PalladiumWallet.Core.Wallet;
 
-/// <summary>Esito della costruzione di una transazione.</summary>
+/// <summary>Result of a transaction build operation.</summary>
 public sealed class BuiltTransaction
 {
     public required Transaction Transaction { get; init; }
@@ -14,7 +14,7 @@ public sealed class BuiltTransaction
     public required FeeRate FeeRate { get; init; }
     public required bool Signed { get; init; }
 
-    /// <summary>PSBT per i flussi watch-only/air-gapped/multisig (§6.5).</summary>
+    /// <summary>PSBT for watch-only/air-gapped/multisig flows (§6.5).</summary>
     public required PSBT Psbt { get; init; }
 
     public string ToHex() => Transaction.ToHex();
@@ -22,25 +22,26 @@ public sealed class BuiltTransaction
 }
 
 /// <summary>
-/// Costruzione e firma delle transazioni (blueprint §6) sopra le primitive
+/// Transaction construction and signing (blueprint §6) on top of NBitcoin primitives:
-/// NBitcoin: selezione monete (manuale o automatica), fee a rate fisso,
+/// coin selection (manual or automatic), fixed fee rate, send-all with fee subtracted,
-/// invia-tutto con fee sottratta, change sulla catena interna, RBF di default.
+/// change on the internal chain, RBF on by default.
-/// Con un account watch-only produce la PSBT non firmata (§6.5).
+/// With a watch-only account produces an unsigned PSBT (§6.5).
 /// </summary>
 public sealed class TransactionFactory(IWalletAccount account)
 {
     private Network Network => PalladiumNetworks.For(account.Profile.Kind);
 
     /// <summary>
-    /// Costruisce (e se possibile firma) una transazione.
+    /// Builds (and signs if possible) a transaction.
     /// </summary>
-    /// <param name="utxos">UTXO selezionati (coin control §6.2) o tutti quelli spendibili.</param>
+    /// <param name="utxos">Selected UTXOs (coin control §6.2) or all spendable ones.</param>
-    /// <param name="transactions">Tx di provenienza degli UTXO (txid → tx), dalla sincronizzazione.</param>
+    /// <param name="transactions">Source transactions for the UTXOs (txid → tx), from sync.</param>
-    /// <param name="destination">Indirizzo destinatario.</param>
+    /// <param name="destination">Recipient address.</param>
-    /// <param name="amountSats">Importo; ignorato se <paramref name="sendAll"/>.</param>
+    /// <param name="amountSats">Amount; ignored when <paramref name="sendAll"/> is true.</param>
-    /// <param name="feeRateSatPerVByte">Fee rate fisso in sat/vByte (§6.4).</param>
+    /// <param name="feeRateSatPerVByte">Fixed fee rate in sat/vByte (§6.4).</param>
-    /// <param name="changeIndex">Indice del prossimo indirizzo di change (catena interna).</param>
+    /// <param name="changeIndex">Index of the next change address (internal chain).</param>
-    /// <param name="sendAll">Invia tutto: fee sottratta dall'importo (§6.1).</param>
+    /// <param name="tipHeight">Current chain tip height, used to enforce confirmation thresholds.</param>
+    /// <param name="sendAll">Send all: fee subtracted from the amount (§6.1).</param>
     public BuiltTransaction Build(
         IReadOnlyList<CachedUtxo> utxos,
         IReadOnlyDictionary<string, Transaction> transactions,
@@ -48,17 +49,42 @@ public sealed class TransactionFactory(IWalletAccount account)
         long amountSats,
         decimal feeRateSatPerVByte,
         int changeIndex,
+        int tipHeight,
         bool sendAll = false)
     {
-        // Si spendono solo UTXO confermati: i fondi in mempool si vedono nel
+        var profile = account.Profile;
-        // saldo "in attesa" ma non sono spendibili finché non confermano.
+        var spendable = utxos.Where(u => u.IsSpendable(profile, tipHeight)).ToList();
-        var spendable = utxos.Where(u => !u.Frozen && u.Height > 0).ToList();
+
         if (spendable.Count == 0)
         {
-            var pending = utxos.Where(u => !u.Frozen && u.Height <= 0).Sum(u => u.ValueSats);
+            var reasons = new System.Text.StringBuilder();
-            throw new WalletSpendException(pending > 0
+
-                ? $"Nessun fondo confermato: {CoinAmount.Format(pending)} in attesa di conferma (non spendibile)."
+            var mempool = utxos.Where(u => !u.Frozen && u.Height <= 0).ToList();
-                : "Nessun UTXO spendibile selezionato.");
+            if (mempool.Count > 0)
+                reasons.Append($"{mempool.Count} output(s) unconfirmed ({CoinAmount.Format(mempool.Sum(u => u.ValueSats))} in mempool). ");
+
+            var immature = utxos.Where(u =>
+                !u.Frozen && u.Height > 0 && u.IsCoinbase &&
+                u.Confirmations(tipHeight) < u.RequiredConfirmations(profile)).ToList();
+            if (immature.Count > 0)
+            {
+                var best = immature.Max(u => u.Confirmations(tipHeight));
+                var threshold = profile.CoinbaseMaturity + 1;
+                reasons.Append($"{immature.Count} coinbase output(s) not yet mature ({best}/{threshold} confirmations). ");
+            }
+
+            var underConf = utxos.Where(u =>
+                !u.Frozen && u.Height > 0 && !u.IsCoinbase &&
+                u.Confirmations(tipHeight) < u.RequiredConfirmations(profile)).ToList();
+            if (underConf.Count > 0)
+            {
+                var best = underConf.Max(u => u.Confirmations(tipHeight));
+                reasons.Append($"{underConf.Count} output(s) need {profile.MinConfirmations} confirmations ({best} so far). ");
+            }
+
+            throw new WalletSpendException(reasons.Length > 0
+                ? $"No spendable UTXOs: {reasons.ToString().TrimEnd()}"
+                : "No spendable UTXOs selected.");
         }
 
         var coins = spendable.Select(u => new Coin(
@@ -68,7 +94,7 @@ public sealed class TransactionFactory(IWalletAccount account)
         var feeRate = new FeeRate(Money.Satoshis(feeRateSatPerVByte * 1000m), 1000);
         var builder = Network.CreateTransactionBuilder();
         builder.SetVersion(2);
-        // Sequence RBF per consentire il bump della fee (§6.6).
+        // RBF sequence to allow fee bumping (§6.6).
         builder.OptInRBF = true;
         builder.AddCoins(coins);
         builder.SetChange(account.GetChangeAddress(changeIndex));
@@ -94,14 +120,14 @@ public sealed class TransactionFactory(IWalletAccount account)
         }
         catch (NotEnoughFundsException ex)
         {
-            throw new WalletSpendException($"Fondi insufficienti: {ex.Message}");
+            throw new WalletSpendException($"Insufficient funds: {ex.Message}");
         }
 
         if (!account.IsWatchOnly)
         {
             if (!builder.Verify(tx, out TransactionPolicyError[] errors))
                 throw new WalletSpendException(
-                    "Transazione non valida: " + string.Join("; ", errors.Select(e => e.ToString())));
+                    "Invalid transaction: " + string.Join("; ", errors.Select(e => e.ToString())));
         }
 
         return new BuiltTransaction
@@ -123,5 +149,5 @@ public sealed class TransactionFactory(IWalletAccount account)
     }
 }
 
-/// <summary>Errore di costruzione/firma della spesa (fondi, policy, parametri).</summary>
+/// <summary>Error during transaction construction/signing (funds, policy, parameters).</summary>
 public sealed class WalletSpendException(string message) : Exception(message);

src/Core/Wallet/TransactionInspector.cs

@@ -4,36 +4,36 @@ using PalladiumWallet.Core.Spv;
 
 namespace PalladiumWallet.Core.Wallet;
 
-/// <summary>Un input di una transazione, con l'output speso risolto dal server.</summary>
+/// <summary>An input of a transaction, with the spent output resolved from the server.</summary>
 public sealed record TxInputInfo(
     string PrevTxid, uint PrevIndex, long? AmountSats, string? Address, bool IsMine, bool IsCoinbase);
 
-/// <summary>Un output di una transazione.</summary>
+/// <summary>An output of a transaction.</summary>
 public sealed record TxOutputInfo(
     uint Index, long AmountSats, string? Address, string ScriptType, bool IsMine);
 
 /// <summary>
-/// Dati completi di una transazione, assemblati interrogando il server: la tx
+/// Complete transaction data assembled by querying the server: the raw transaction
-/// grezza più gli output spesi dagli input (per ricavare importi, indirizzi e
+/// plus the outputs spent by each input (to derive amounts, addresses, and fees)
-/// fee) e l'header del blocco (per la data). Tutto ciò che il protocollo
+/// and the block header (for the timestamp). Everything the ElectrumX-like protocol
-/// ElectrumX-like (§10) permette di sapere su una transazione.
+/// (§10) can tell us about a transaction.
 /// </summary>
 public sealed class TransactionDetails
 {
     public required string Txid { get; init; }
-    /// <summary>Altezza del blocco; ≤0 = ancora in mempool.</summary>
+    /// <summary>Block height; ≤0 = still in mempool.</summary>
     public required int Height { get; init; }
     public required int Confirmations { get; init; }
-    /// <summary>Effetto netto sul saldo del wallet (delta calcolato in sincronizzazione).</summary>
+    /// <summary>Net effect on the wallet balance (delta computed during sync).</summary>
     public required long NetSats { get; init; }
-    /// <summary>Fee della transazione; null se un input ha importo non risolvibile (es. coinbase).</summary>
+    /// <summary>Transaction fee; null if any input amount cannot be resolved (e.g. coinbase).</summary>
     public required long? FeeSats { get; init; }
     public required int TotalSize { get; init; }
     public required int VirtualSize { get; init; }
     public required uint Version { get; init; }
     public required uint LockTime { get; init; }
     public required bool RbfSignaled { get; init; }
-    /// <summary>Merkle proof verificata in sincronizzazione (§7.4).</summary>
+    /// <summary>Merkle proof verified during sync (§7.4).</summary>
     public required bool Verified { get; init; }
     public required DateTimeOffset? BlockTime { get; init; }
     public required long TotalOutSats { get; init; }
@@ -43,13 +43,13 @@ public sealed class TransactionDetails
 
     public bool IsCoinbase => Inputs.Count > 0 && Inputs[0].IsCoinbase;
     public bool IsIncoming => NetSats >= 0;
-    /// <summary>Importo verso destinatari esterni (output non nostri): l'importo "inviato".</summary>
+    /// <summary>Amount sent to external recipients (outputs not ours): the "sent" amount.</summary>
     public long SentToOthersSats => Outputs.Where(o => !o.IsMine).Sum(o => o.AmountSats);
     public long ReceivedSats => Outputs.Where(o => o.IsMine).Sum(o => o.AmountSats);
     public double? FeeRateSatPerVb => FeeSats is { } f && VirtualSize > 0 ? (double)f / VirtualSize : null;
     /// <summary>
-    /// Indirizzi della controparte: i destinatari esterni per un invio (output non
+    /// Counterparty addresses: external recipients for a send (outputs not ours),
-    /// nostri), i mittenti esterni per una ricezione (input non nostri).
+    /// external senders for a receive (inputs not ours).
     /// </summary>
     public IReadOnlyList<string> CounterpartyAddresses => IsIncoming
         ? [.. Inputs.Where(i => !i.IsMine && i.Address is not null).Select(i => i.Address!).Distinct()]
@@ -57,9 +57,9 @@ public sealed class TransactionDetails
 }
 
 /// <summary>
-/// Recupera dal server tutti i dati di una singola transazione (blueprint §10):
+/// Fetches all data for a single transaction from the server (blueprint §10):
-/// la transazione grezza e gli output spesi dai suoi input, per ricostruire
+/// the raw transaction and the outputs spent by its inputs, to reconstruct
-/// importi, fee e indirizzi che il server non riassume.
+/// amounts, fees, and addresses that the server does not summarise.
 /// </summary>
 public static class TransactionInspector
 {
@@ -112,10 +112,10 @@ public static class TransactionInspector
 
         var rbf = tx.Inputs.Any(i => i.Sequence.IsRBF);
 
-        // Le transazioni degli input servono per importi/indirizzi/fee. Si
+        // Input transactions are needed for amounts/addresses/fees. Fetched in
-        // scaricano in parallelo (id univoci, richieste concorrenti supportate
+        // parallel (unique ids, concurrent requests supported by ElectrumClient):
-        // da ElectrumClient): in sequenza la finestra impiegava un round-trip
+        // sequential fetching costs one round-trip per input. The block header
-        // per input. Anche l'header del blocco è recuperato in parallelo.
+        // is also fetched in parallel.
         var prevTxids = tx.IsCoinBase
             ? []
             : tx.Inputs.Select(i => i.PrevOut.Hash.ToString()).Distinct().ToList();

src/Core/Wallet/UtxoSpendability.cs

@@ -0,0 +1,24 @@
+using PalladiumWallet.Core.Chain;
+using PalladiumWallet.Core.Storage;
+
+namespace PalladiumWallet.Core.Wallet;
+
+/// <summary>
+/// Confirmation-threshold rules shared between coin selection (<see cref="TransactionFactory"/>)
+/// and balance reporting: a coinbase output needs COINBASE_MATURITY + 1 confirmations
+/// (consensus rule nSpendHeight - nHeight >= 120, plus one block of safety margin, matching
+/// the Qt wallet); a regular output needs <see cref="ChainProfile.MinConfirmations"/> (wallet
+/// policy, no consensus rule).
+/// </summary>
+public static class UtxoSpendability
+{
+    public static int RequiredConfirmations(this CachedUtxo utxo, ChainProfile profile) =>
+        utxo.IsCoinbase ? profile.CoinbaseMaturity + 1 : profile.MinConfirmations;
+
+    public static int Confirmations(this CachedUtxo utxo, int tipHeight) =>
+        utxo.Height <= 0 ? 0 : tipHeight - utxo.Height + 1;
+
+    /// <summary>True when the UTXO has met its confirmation threshold and is not frozen.</summary>
+    public static bool IsSpendable(this CachedUtxo utxo, ChainProfile profile, int tipHeight) =>
+        !utxo.Frozen && utxo.Height > 0 && utxo.Confirmations(tipHeight) >= utxo.RequiredConfirmations(profile);
+}

src/Core/Wallet/WalletLoader.cs

@@ -6,8 +6,8 @@ using PalladiumWallet.Core.Storage;
 namespace PalladiumWallet.Core.Wallet;
 
 /// <summary>
-/// Factory dei tipi di wallet (blueprint §4.5): dal documento ricostruisce il tipo
+/// Wallet type factory (blueprint §4.5): reconstructs the correct account type
-/// di account corretto (HD da seed, HD da xprv importata, importato WIF, watch-only).
+/// from a document (HD from seed, HD from imported xprv, imported WIF, watch-only).
 /// </summary>
 public static class WalletLoader
 {
@@ -20,25 +20,25 @@ public static class WalletLoader
         var kind = Enum.Parse<ScriptKind>(doc.ScriptKind);
         var network = PalladiumNetworks.For(profile.Kind);
 
-        // 1. HD da seed (caso più comune)
+        // 1. HD from seed (most common case)
         if (doc.Mnemonic is { } words)
         {
             if (!Bip39.TryParse(words, out var mnemonic))
-                throw new InvalidDataException("Mnemonica del file wallet non valida.");
+                throw new InvalidDataException("Invalid mnemonic in wallet file.");
             var path = KeyPath.Parse(doc.AccountPath ?? DerivationPaths.AccountPath(kind, profile).ToString());
             return HdAccount.FromSeed(Bip39.ToSeed(mnemonic!, doc.Passphrase), kind, profile, path);
         }
 
-        // 2. HD da xprv importata (spendibile, senza seed)
+        // 2. HD from imported xprv (spendable, no seed)
         if (doc.AccountXprv is { } xprvStr)
         {
             if (!Slip132.TryDecodePrivate(xprvStr, profile, out var xprv, out _))
-                throw new InvalidDataException("Xprv del file wallet non valida per questa rete.");
+                throw new InvalidDataException("Xprv in wallet file is invalid for this network.");
             var path = doc.AccountPath is { Length: > 0 } p ? KeyPath.Parse(p) : null;
             return HdAccount.FromAccountXprv(xprv!, kind, profile, path);
         }
 
-        // 3. Chiavi WIF importate
+        // 3. Imported WIF keys
         if (doc.WifKeys is { Count: > 0 } wifKeys)
         {
             var entries = wifKeys.Select(wif =>
@@ -51,21 +51,21 @@ public static class WalletLoader
             return new ImportedKeyAccount(entries, kind, profile);
         }
 
-        // 4. Watch-only da xpub
+        // 4. Watch-only from xpub
         if (doc.AccountXpub is null)
-            throw new InvalidDataException("File wallet senza xpub e senza seed.");
+            throw new InvalidDataException("Wallet file has no xpub and no seed.");
         if (!Slip132.TryDecodePublic(doc.AccountXpub, profile, out var xpub, out _))
-            throw new InvalidDataException("Xpub del file wallet non valida per questa rete.");
+            throw new InvalidDataException("Xpub in wallet file is invalid for this network.");
         var accountPath = doc.AccountPath is { Length: > 0 } ap ? KeyPath.Parse(ap) : null;
         return HdAccount.FromAccountXpub(xpub!, kind, profile, accountPath);
     }
 
-    /// <summary>Crea il documento per un nuovo wallet da seed.</summary>
+    /// <summary>Creates the document for a new seed wallet.</summary>
     public static (WalletDocument Doc, HdAccount Account) NewFromMnemonic(
         string words, string? passphrase, ScriptKind kind, ChainProfile profile, KeyPath? customPath = null)
     {
         if (!Bip39.TryParse(words, out var mnemonic))
-            throw new InvalidDataException("Mnemonica non valida (parole o checksum errati).");
+            throw new InvalidDataException("Invalid mnemonic (wrong words or checksum).");
 
         var account = customPath is null
             ? HdAccount.FromMnemonic(mnemonic!, passphrase, kind, profile)
@@ -85,15 +85,15 @@ public static class WalletLoader
     }
 
     /// <summary>
-    /// Crea il documento da una xpub SLIP-132 importata (watch-only).
+    /// Creates the document from an imported SLIP-132 xpub (watch-only).
-    /// Rileva il ScriptKind dagli header SLIP-132; <paramref name="kindOverride"/> lo sovrascrive
+    /// Detects the ScriptKind from the SLIP-132 header; <paramref name="kindOverride"/> overrides
-    /// per i prefissi ambigui (xpub può essere Legacy o Taproot).
+    /// it for ambiguous prefixes (xpub can be Legacy or Taproot).
     /// </summary>
     public static (WalletDocument Doc, HdAccount Account) NewFromXpub(
         string slip132, ChainProfile profile, ScriptKind? kindOverride = null)
     {
         if (!Slip132.TryDecodePublic(slip132.Trim(), profile, out var xpub, out var detectedKind))
-            throw new InvalidDataException("Chiave pubblica estesa non valida o non riconosciuta per questa rete.");
+            throw new InvalidDataException("Extended public key is invalid or unrecognised for this network.");
         var kind = kindOverride ?? detectedKind;
         var account = HdAccount.FromAccountXpub(xpub!, kind, profile);
 
@@ -108,14 +108,14 @@ public static class WalletLoader
     }
 
     /// <summary>
-    /// Crea il documento da una xprv SLIP-132 importata (spendibile senza seed).
+    /// Creates the document from an imported SLIP-132 xprv (spendable without seed).
-    /// Il documento contiene la xprv in chiaro: deve essere obbligatoriamente cifrato.
+    /// The document contains the xprv in plaintext — it must be encrypted.
     /// </summary>
     public static (WalletDocument Doc, HdAccount Account) NewFromXprv(
         string slip132, ChainProfile profile, ScriptKind? kindOverride = null)
     {
         if (!Slip132.TryDecodePrivate(slip132.Trim(), profile, out var xprv, out var detectedKind))
-            throw new InvalidDataException("Chiave privata estesa non valida o non riconosciuta per questa rete.");
+            throw new InvalidDataException("Extended private key is invalid or unrecognised for this network.");
         var kind = kindOverride ?? detectedKind;
         var account = HdAccount.FromAccountXprv(xprv!, kind, profile);
 
@@ -131,14 +131,14 @@ public static class WalletLoader
     }
 
     /// <summary>
-    /// Crea il documento da una o più chiavi WIF importate.
+    /// Creates the document from one or more imported WIF keys.
-    /// Il documento contiene le chiavi WIF in chiaro: deve essere obbligatoriamente cifrato.
+    /// The document contains the WIF keys in plaintext — it must be encrypted.
     /// </summary>
     public static (WalletDocument Doc, ImportedKeyAccount Account) NewFromWif(
         IReadOnlyList<string> wifKeys, ScriptKind kind, ChainProfile profile)
     {
         if (wifKeys.Count == 0)
-            throw new InvalidDataException("Almeno una chiave WIF richiesta.");
+            throw new InvalidDataException("At least one WIF key is required.");
 
         var network = PalladiumNetworks.For(profile.Kind);
         var entries = new List<(BitcoinAddress, Key?)>();
@@ -153,7 +153,7 @@ public static class WalletLoader
             }
             catch (Exception ex)
             {
-                throw new InvalidDataException($"Chiave WIF non valida: {ex.Message}");
+                throw new InvalidDataException($"Invalid WIF key: {ex.Message}");
             }
             var addr = secret.PrivateKey.PubKey
                 .GetAddress(DerivationPaths.ScriptPubKeyTypeFor(kind), network);

tests/PalladiumWallet.Tests/Chain/ChainProfileTests.cs

@@ -21,7 +21,7 @@ public class ChainProfileTests
         Assert.Equal(50002, p.DefaultSslPort);
         Assert.Equal(746, p.Bip44CoinType);
         Assert.Equal("palladium", p.UriScheme);
-        Assert.True(p.SkipPowValidation); // obbligatorio: la catena usa LWMA (§3)
+        Assert.True(p.SkipPowValidation); // mandatory: the chain uses LWMA (§3)
         Assert.Equal(120, p.BlockTimeSeconds);
     }
 
@@ -105,8 +105,8 @@ public class ChainProfileTests
         Assert.Equal(1, ChainProfiles.Testnet.Bip44CoinType);
     }
 
-    // Serializza header (4 byte BE) + payload BIP32 di 74 byte e codifica Base58Check:
+    // Serialize header (4-byte BE) + 74-byte BIP32 payload and encode Base58Check:
-    // il prefisso testuale risultante dipende solo dall'header.
+    // the resulting textual prefix depends only on the header.
     private static string EncodeWithHeader(uint header)
     {
         var data = new byte[78];

tests/PalladiumWallet.Tests/Chain/PalladiumNetworksTests.cs

@@ -5,7 +5,7 @@ namespace PalladiumWallet.Tests.Chain;
 
 public class PalladiumNetworksTests
 {
-    // Chiave privata fissa per test deterministici (solo test, mai usarla davvero).
+    // Fixed private key for deterministic tests (test-only, never use it for real).
     private static Key TestKey => new(Convert.FromHexString(
         "0000000000000000000000000000000000000000000000000000000000000001"));
 

tests/PalladiumWallet.Tests/Crypto/AddressDerivationTests.cs

@@ -17,7 +17,7 @@ public class AddressDerivationTests
     [Fact]
     public void Il_vettore_bip44_produce_lo_stesso_hash_su_bitcoin_e_plm()
     {
-        // Indirizzo noto di abandon-about su m/44'/0'/0'/0/0 (riferimento pubblico).
+        // Known abandon-about address at m/44'/0'/0'/0/0 (public reference).
         var account = HdAccount.FromSeed(AbandonAboutSeed(), ScriptKind.Legacy,
             ChainProfiles.Mainnet, new KeyPath("44'/0'/0'"));
         var pubKey = account.GetPublicKey(isChange: false, 0);
@@ -27,8 +27,8 @@ public class AddressDerivationTests
 
         var plmAddr = account.GetReceiveAddress(0);
         Assert.StartsWith("P", plmAddr.ToString());
-        // Stesso hash160 sotto i due prefissi: la derivazione è identica,
+        // Same hash160 under the two prefixes: the derivation is identical,
-        // cambia solo la veste di rete.
+        // only the network dress changes.
         Assert.Equal(pubKey.Hash, ((BitcoinPubKeyAddress)plmAddr).Hash);
     }
 

tests/PalladiumWallet.Tests/Crypto/Bip32Tests.cs

@@ -5,9 +5,9 @@ using PalladiumWallet.Core.Crypto;
 namespace PalladiumWallet.Tests.Crypto;
 
 /// <summary>
-/// Vettore di test 1 della specifica BIP32 (seed 000102...0e0f). Gli header
+/// BIP32 specification test vector 1 (seed 000102...0e0f). The Legacy headers
-/// Legacy della mainnet PLM coincidono con quelli Bitcoin, quindi il confronto
+/// of the PLM mainnet coincide with the Bitcoin ones, so the comparison
-/// con le stringhe della specifica è diretto sulla rete PLM.
+/// with the specification strings is direct on the PLM network.
 /// </summary>
 public class Bip32Tests
 {
@@ -40,7 +40,7 @@ public class Bip32Tests
     [Fact]
     public void I_path_hardened_non_sono_derivabili_da_una_xpub()
     {
-        // Garanzia §17: da sole chiavi pubbliche niente derivazione hardened.
+        // §17 guarantee: from public keys alone, no hardened derivation.
         Assert.ThrowsAny<InvalidOperationException>(() =>
             Root.Neuter().Derive(new KeyPath("0'")));
     }

tests/PalladiumWallet.Tests/Crypto/Bip39Tests.cs

@@ -4,7 +4,7 @@ namespace PalladiumWallet.Tests.Crypto;
 
 public class Bip39Tests
 {
-    // Vettori ufficiali Trezor (python-mnemonic/vectors.json), passphrase "TREZOR".
+    // Official Trezor vectors (python-mnemonic/vectors.json), passphrase "TREZOR".
     [Theory]
     [InlineData(
         "abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about",
@@ -30,8 +30,8 @@ public class Bip39Tests
     [Fact]
     public void Il_vettore_giapponese_copre_la_normalizzazione_nfkd()
     {
-        // Vettore ufficiale bip32JP (test_JP_BIP39.json[0]): mnemonica con spazi
+        // Official bip32JP vector (test_JP_BIP39.json[0]): mnemonic with U+3000
-        // ideografici U+3000 e passphrase con caratteri da normalizzare NFKD.
+        // ideographic spaces and a passphrase with characters to normalize NFKD.
         const string words =
             "あいこくしん　あいこくしん　あいこくしん　あいこくしん　あいこくしん　あいこくしん　あいこくしん　あいこくしん　あいこくしん　あいこくしん　あいこくしん　あおぞら";
         const string passphrase = "㍍ガバヴァぱばぐゞちぢ十人十色";
@@ -55,8 +55,8 @@ public class Bip39Tests
     [Fact]
     public void Checksum_invalido_viene_rifiutato()
     {
-        // 12 × "abandon": parole valide ma checksum errato — il caso che il
+        // 12 × "abandon": valid words but wrong checksum — the case that the
-        // costruttore NBitcoin non controlla da solo.
+        // NBitcoin constructor does not check on its own.
         var words = string.Join(' ', Enumerable.Repeat("abandon", 12));
         Assert.False(Bip39.TryParse(words, out _));
     }

tests/PalladiumWallet.Tests/Crypto/Bip84Slip132Tests.cs

@@ -5,12 +5,12 @@ using PalladiumWallet.Core.Crypto;
 namespace PalladiumWallet.Tests.Crypto;
 
 /// <summary>
-/// Vettore di test della specifica BIP84 (mnemonica abandon-about, senza
+/// BIP84 specification test vector (abandon-about mnemonic, without
-/// passphrase). Gli header SLIP-132 della mainnet PLM coincidono con quelli
+/// passphrase). The SLIP-132 headers of the PLM mainnet coincide with the
-/// Bitcoin, quindi zprv/zpub si confrontano direttamente; gli indirizzi si
+/// Bitcoin ones, so zprv/zpub are compared directly; addresses are
-/// confrontano sul witness program (chain-independent) + prefisso PLM.
+/// compared on the witness program (chain-independent) + PLM prefix.
-/// Il path m/84'/0'/0' è volutamente "personalizzato" (coin type 0, non 746):
+/// The path m/84'/0'/0' is deliberately "customized" (coin type 0, not 746):
-/// esercita anche l'import con path custom (§4.2).
+/// it also exercises the import with a custom path (§4.2).
 /// </summary>
 public class Bip84Slip132Tests
 {
@@ -64,12 +64,12 @@ public class Bip84Slip132Tests
     [Fact]
     public void Una_xkey_con_header_sconosciuto_viene_rifiutata()
     {
-        // xpub Bitcoin valida ma con header Legacy: non è una zpub.
+        // Valid Bitcoin xpub but with Legacy header: it is not a zpub.
         var account = Account();
         var asXpub = account.AccountXpub.ToString(Network.Main);
 
         Assert.True(Slip132.TryDecodePublic(asXpub, ChainProfiles.Mainnet, out _, out var kind));
-        Assert.Equal(ScriptKind.Legacy, kind); // header xpub → riconosciuto come Legacy
+        Assert.Equal(ScriptKind.Legacy, kind); // xpub header → recognized as Legacy
         Assert.False(Slip132.TryDecodePublic("non-base58!!!", ChainProfiles.Mainnet, out _, out _));
         Assert.False(Slip132.TryDecodePrivate(asXpub, ChainProfiles.Mainnet, out _, out _)); // pub ≠ priv
     }
@@ -88,8 +88,8 @@ public class Bip84Slip132Tests
         if (expectedPubKeyHex is not null)
             Assert.Equal(expectedPubKeyHex, pubKey.ToHex());
 
-        // Il witness program (hash160 della pubkey) è chain-independent: deve
+        // The witness program (hash160 of the pubkey) is chain-independent: it must
-        // coincidere con quello dell'indirizzo bc1 del vettore ufficiale.
+        // coincide with that of the bc1 address from the official vector.
         var bitcoinExpected = (BitcoinWitPubKeyAddress)BitcoinAddress.Create(bitcoinAddress, Network.Main);
         Assert.Equal(bitcoinExpected.Hash, pubKey.WitHash);
 

tests/PalladiumWallet.Tests/Crypto/Bip86TaprootTests.cs

@@ -5,11 +5,11 @@ using PalladiumWallet.Core.Crypto;
 namespace PalladiumWallet.Tests.Crypto;
 
 /// <summary>
-/// Vettori di test BIP86 (mnemonica abandon-about, senza passphrase).
+/// BIP86 test vectors (abandon-about mnemonic, no passphrase).
-/// La chiave pubblica tweakizzata (output key, 32 byte x-only) è chain-independent:
+/// The tweaked public key (output key, 32-byte x-only) is chain-independent:
-/// viene verificata contro i vettori ufficiali Bitcoin, poi si controlla che
+/// verified against the official Bitcoin vectors, then checked that the PLM
-/// l'indirizzo PLM abbia il prefisso plm1p (witness v1, bech32m).
+/// address starts with plm1p (witness v1, bech32m).
-/// Il path m/86'/0'/0' usa coin_type=0 (non 746) per aderire ai vettori BIP86.
+/// The path m/86'/0'/0' uses coin_type=0 (not 746) to match the BIP86 vectors.
 /// </summary>
 public class Bip86TaprootTests
 {
@@ -46,9 +46,9 @@ public class Bip86TaprootTests
     }
 
     /// <summary>
-    /// L'output key (chiave tweakizzata x-only, 32 byte) è identica al vettore BIP86
+    /// The output key (tweaked x-only pubkey, 32 bytes) matches the BIP86 vector
-    /// indipendentemente dalla rete: la rete cambia solo HRP e checksum, non il programma.
+    /// regardless of network: the network changes only HRP and checksum, not the program.
-    /// Indirizzi Bitcoin da https://github.com/bitcoin/bips/blob/master/bip-0086.mediawiki
+    /// Bitcoin addresses from https://github.com/bitcoin/bips/blob/master/bip-0086.mediawiki
     /// </summary>
     [Theory]
     [InlineData(false, 0, "bc1p5cyxnuxmeuwuvkwfem96lqzszd02n6xdcjrs20cac6yqjjwudpxqkedrcr")]
@@ -60,7 +60,7 @@ public class Bip86TaprootTests
         var account = Account();
         var plmAddr = account.GetAddress(isChange, index);
 
-        // Il witness program (output key tweakizzata) è chain-independent
+        // The witness program (tweaked output key) is chain-independent.
         var btcAddr = (TaprootAddress)BitcoinAddress.Create(bitcoinAddress, Network.Main);
         var plmTaproot = (TaprootAddress)plmAddr;
         Assert.Equal(btcAddr.PubKey, plmTaproot.PubKey);

tests/PalladiumWallet.Tests/Net/ServerRegistryTests.cs

@@ -9,7 +9,7 @@ public class PeerParsingTests
     [Fact]
     public void La_risposta_peers_subscribe_si_parsa_nel_formato_electrumx()
     {
-        // Formato reale: [ip, hostname, ["v...", "pN", "tPORTA", "sPORTA"]].
+        // Real format: [ip, hostname, ["v...", "pN", "tPORT", "sPORT"]].
         const string json = """
             [
               ["173.212.224.67", "173.212.224.67", ["v1.4.2", "p10000", "t50001", "s50002"]],
@@ -20,10 +20,10 @@ public class PeerParsingTests
             """;
         var peers = ElectrumApi.ParsePeers(JsonDocument.Parse(json).RootElement);
 
-        Assert.Equal(3, peers.Count); // l'ultimo non offre porte → scartato
+        Assert.Equal(3, peers.Count); // last entry has no ports → discarded
 
         Assert.Equal(new PeerInfo("173.212.224.67", 50001, 50002, "1.4.2"), peers[0]);
-        // "t" senza numero = porta di default (0 segnala "da risolvere col profilo").
+        // "t" without a number = default port (0 signals "resolve from profile").
         Assert.Equal(new PeerInfo("nodo.esempio.org", 0, null, "1.4"), peers[1]);
         Assert.Equal(new PeerInfo("solo-ssl.esempio.org", null, 50002, "1.4"), peers[2]);
     }
@@ -55,8 +55,8 @@ public class ServerRegistryTests
             var registry = new ServerRegistry(ChainProfiles.Mainnet, path);
             var bootstrapCount = registry.All.Count;
 
-            // Merge diretto via DiscoverAsync richiede un client: si testa la
+            // Direct merge via DiscoverAsync requires a client: test persistence
-            // persistenza simulando il file degli scoperti.
+            // by simulating the discovered servers file.
             var discovered = new[] { new KnownServer("nuovo.esempio.org", 50001, 50002, "1.4.2") };
             File.WriteAllText(path, JsonSerializer.Serialize(discovered));
 
@@ -64,7 +64,7 @@ public class ServerRegistryTests
             Assert.Equal(bootstrapCount + 1, reloaded.All.Count);
             Assert.Contains(reloaded.All, s => s.Host == "nuovo.esempio.org");
 
-            // Un bootstrap duplicato nel file non raddoppia.
+            // A bootstrap duplicate in the file must not double-count.
             File.WriteAllText(path, JsonSerializer.Serialize(new[]
             {
                 new KnownServer("173.212.224.67", 50001, 50002),

tests/PalladiumWallet.Tests/PropertyTests.cs

@@ -9,18 +9,18 @@ using PalladiumWallet.Core.Wallet;
 namespace PalladiumWallet.Tests;
 
 /// <summary>
-/// Property-based tests (CsCheck). Ogni test genera centinaia di input casuali e
+/// Property-based tests (CsCheck). Each test generates hundreds of random inputs and
-/// verifica che le proprietà invarianti reggano — crash, eccezioni non attese, o
+/// verifies that invariant properties hold — crashes, unexpected exceptions, or
-/// violazioni di roundtrip sono failures.
+/// roundtrip violations are failures.
 /// </summary>
 public class PropertyTests
 {
-    // ── generatori riutilizzabili ─────────────────────────────────────────────
+    // ── reusable generators ───────────────────────────────────────────────────
 
     private static readonly Gen<string> GenUnit = Gen.OneOf(
         Gen.Const("PLM"), Gen.Const("mPLM"), Gen.Const("µPLM"), Gen.Const("sat"));
 
-    // uint256 casuale costruito da 4 ulong
+    // random uint256 built from 4 ulongs
     private static readonly Gen<uint256> GenTxid =
         Gen.Select(Gen.ULong, Gen.ULong, Gen.ULong, Gen.ULong, (a, b, c, d) =>
         {
@@ -32,9 +32,9 @@ public class PropertyTests
             return new uint256(bytes);
         });
 
-    // ── CoinAmount ──────────────────────────────────────────────────────────
+    // ── CoinAmount ───────────────────────────────────────────────────────────
 
-    /// TryParseIn non deve mai lanciare eccezioni su input arbitrario con unità valide.
+    /// TryParseIn must never throw on arbitrary input with valid units.
     [Fact]
     public void CoinAmount_TryParseIn_non_lancia_mai_su_input_arbitrario()
     {
@@ -46,17 +46,17 @@ public class PropertyTests
             }
             catch (ArgumentException)
             {
-                // unità sconosciuta: impossibile qui perché usiamo solo unità note
+                // unknown unit: impossible here because we only use known units
                 throw;
             }
             catch (Exception ex)
             {
-                Assert.Fail($"TryParseIn ha lanciato {ex.GetType().Name} per unit={unit}");
+                Assert.Fail($"TryParseIn threw {ex.GetType().Name} for unit={unit}");
             }
         });
     }
 
-    /// FormatIn → TryParseIn: qualsiasi satoshi [0, MaxSupply] deve fare roundtrip esatto.
+    /// FormatIn → TryParseIn: any satoshi value in [0, MaxSupply] must roundtrip exactly.
     [Fact]
     public void CoinAmount_roundtrip_FormatIn_TryParseIn_per_ogni_unita()
     {
@@ -66,12 +66,12 @@ public class PropertyTests
             var formatted = CoinAmount.FormatIn(sats, unit, withLabel: false);
             Assert.True(
                 CoinAmount.TryParseIn(formatted, unit, out var parsed),
-                $"FormatIn={formatted} unit={unit} non si riparsa");
+                $"FormatIn={formatted} unit={unit} failed to re-parse");
             Assert.Equal(sats, parsed);
         });
     }
 
-    /// TryParseCoins non deve mai lanciare su input arbitrario.
+    /// TryParseCoins must never throw on arbitrary input.
     [Fact]
     public void CoinAmount_TryParseCoins_non_lancia_mai_su_input_arbitrario()
     {
@@ -83,25 +83,25 @@ public class PropertyTests
             }
             catch (Exception ex)
             {
-                Assert.Fail($"TryParseCoins ha lanciato {ex.GetType().Name}");
+                Assert.Fail($"TryParseCoins threw {ex.GetType().Name}");
             }
         });
     }
 
-    /// Qualsiasi valore accettato da TryParseCoins deve essere ≥ 0.
+    /// Any value accepted by TryParseCoins must be ≥ 0.
     [Fact]
     public void CoinAmount_TryParseCoins_accetta_solo_valori_non_negativi()
     {
         Gen.String.Sample(text =>
         {
             if (CoinAmount.TryParseCoins(text, out var sats))
-                Assert.True(sats >= 0, $"TryParseCoins ha restituito {sats} per '{text}'");
+                Assert.True(sats >= 0, $"TryParseCoins returned {sats} for '{text}'");
         });
     }
 
-    // ── EncryptedFile ────────────────────────────────────────────────────────
+    // ── EncryptedFile ─────────────────────────────────────────────────────────
 
-    /// Encrypt → Decrypt con la stessa password deve restituire il testo originale.
+    /// Encrypt → Decrypt with the same password must return the original plaintext.
     [Fact]
     public void EncryptedFile_roundtrip_su_contenuto_e_password_arbitrari()
     {
@@ -113,29 +113,29 @@ public class PropertyTests
         });
     }
 
-    /// Decrypt con password sbagliata deve lanciare WrongPasswordException, mai altro.
+    /// Decrypt with the wrong password must throw WrongPasswordException, never anything else.
     [Fact]
     public void EncryptedFile_password_sbagliata_lancia_solo_WrongPasswordException()
     {
         Gen.Select(Gen.String, Gen.String[1, 32], Gen.String[1, 32]).Sample((plaintext, pwd1, pwd2) =>
         {
-            if (pwd1 == pwd2) return; // stessa password: roundtrip valido, salta
+            if (pwd1 == pwd2) return; // same password: valid roundtrip, skip
 
             var cipher = EncryptedFile.Encrypt(plaintext, pwd1);
             try
             {
                 EncryptedFile.Decrypt(cipher, pwd2);
-                Assert.Fail("Decrypt con password sbagliata non ha lanciato");
+                Assert.Fail("Decrypt with wrong password did not throw");
             }
-            catch (WrongPasswordException) { /* atteso */ }
+            catch (WrongPasswordException) { /* expected */ }
             catch (Exception ex)
             {
-                Assert.Fail($"Decrypt ha lanciato {ex.GetType().Name} invece di WrongPasswordException");
+                Assert.Fail($"Decrypt threw {ex.GetType().Name} instead of WrongPasswordException");
             }
         });
     }
 
-    /// IsEncrypted non deve mai lanciare su input arbitrario.
+    /// IsEncrypted must never throw on arbitrary input.
     [Fact]
     public void EncryptedFile_IsEncrypted_non_lancia_mai()
     {
@@ -144,14 +144,14 @@ public class PropertyTests
             try { EncryptedFile.IsEncrypted(s); }
             catch (Exception ex)
             {
-                Assert.Fail($"IsEncrypted ha lanciato {ex.GetType().Name}");
+                Assert.Fail($"IsEncrypted threw {ex.GetType().Name}");
             }
         });
     }
 
-    // ── MerkleProof ──────────────────────────────────────────────────────────
+    // ── MerkleProof ───────────────────────────────────────────────────────────
 
-    /// Ogni foglia di un albero Merkle generato casualmente deve verificare contro la radice.
+    /// Every leaf of a randomly generated Merkle tree must verify against the root.
     [Fact]
     public void MerkleProof_ogni_foglia_verifica_contro_la_sua_radice()
     {
@@ -163,18 +163,18 @@ public class PropertyTests
                 var branch = BuildBranch(txids, pos);
                 Assert.True(
                     MerkleProof.Verify(txids[pos], pos, branch, root),
-                    $"Verify fallita per pos={pos} su {txids.Length} foglie");
+                    $"Verify failed for pos={pos} over {txids.Length} leaves");
             }
         });
     }
 
-    /// Un txid non presente nelle foglie non deve verificare (e non deve crashare).
+    /// A txid not present in the leaves must not verify (and must not crash).
     [Fact]
     public void MerkleProof_txid_estraneo_non_verifica_e_non_crasha()
     {
         Gen.Select(GenTxid.Array[2, 8], GenTxid).Sample((txids, extra) =>
         {
-            if (txids.Contains(extra)) return; // collisione casuale: salta
+            if (txids.Contains(extra)) return; // random collision: skip
 
             var root   = MerkleProof.ComputeRootFromLeaves(txids);
             var branch = BuildBranch(txids, 0);
@@ -182,7 +182,7 @@ public class PropertyTests
         });
     }
 
-    // helper: costruisce il branch per la posizione data
+    // helper: builds the branch for the given position
     private static List<uint256> BuildBranch(IReadOnlyList<uint256> leaves, int position)
     {
         var branch = new List<uint256>();

tests/PalladiumWallet.Tests/Spv/SpvTests.cs

@@ -9,7 +9,7 @@ namespace PalladiumWallet.Tests.Spv;
 
 public class ScripthashTests
 {
-    // Vettori calcolati indipendentemente con Python (hashlib), non con NBitcoin.
+    // Vectors computed independently with Python (hashlib), not with NBitcoin.
     [Theory]
     [InlineData("76a9140102030405060708090a0b0c0d0e0f101112131488ac",
         "5546fc69d399ef99854c132abb060381cc159dbec67c496a6f0e0dbf12e83ae8")]
@@ -39,7 +39,7 @@ public class ScripthashTests
 
 public class MerkleProofTests
 {
-    // Blocco Bitcoin 100000: 4 transazioni (pari), merkle root nota.
+    // Bitcoin block 100000: 4 transactions (even), known merkle root.
     private static readonly uint256[] Block100000Txids =
     [
         uint256.Parse("8c14f0db3df150123e6f3dbbf30f8b955a8249b62ac1d1ff16284aefa3d06d87"),
@@ -51,7 +51,7 @@ public class MerkleProofTests
     private static readonly uint256 Block100000Root =
         uint256.Parse("f3e94742aca4b5ef85488dc37c06c3282295ffec960994b2c0d5ac2a25a95766");
 
-    // ---- numero pari di transazioni (4 tx) ----
+    // ---- even number of transactions (4 tx) ----
 
     [Fact]
     public void La_radice_calcolata_dalle_foglie_coincide_con_quella_del_blocco()
@@ -88,13 +88,13 @@ public class MerkleProofTests
         Assert.True(MerkleProof.Verify(txid, 0, [], root));
     }
 
-    // ---- numero dispari di transazioni (duplicazione dell'ultimo) ----
+    // ---- odd number of transactions (last one duplicated) ----
 
     [Fact]
     public void Tre_tx_dispari_la_terza_viene_duplicata()
     {
-        // Con 3 tx: livello 1 = [SHA256d(tx0||tx1), SHA256d(tx2||tx2)]
+        // With 3 tx: level 1 = [SHA256d(tx0||tx1), SHA256d(tx2||tx2)]
-        // Verifica che la radice sia deterministica e corretta.
+        // Verify the root is deterministic and correct.
         var txids = Block100000Txids.Take(3).ToArray();
         var root = MerkleProof.ComputeRootFromLeaves(txids);
         var branch2 = BuildBranch(txids, 2);
@@ -104,7 +104,7 @@ public class MerkleProofTests
     [Fact]
     public void Cinque_tx_dispari_verifica_tutte_le_posizioni()
     {
-        // 5 tx → livello pari (4) → livello pari (2) → radice
+        // 5 tx → even level (4) → even level (2) → root
         var txids = new uint256[5];
         for (var i = 0; i < 5; i++)
             txids[i] = new uint256(new byte[32].Select((_, j) => (byte)(i * 17 + j)).ToArray());
@@ -118,7 +118,7 @@ public class MerkleProofTests
         }
     }
 
-    // ---- due transazioni (pari minimo) ----
+    // ---- two transactions (minimum even) ----
 
     [Fact]
     public void Due_tx_verifica_entrambe_le_posizioni()
@@ -132,7 +132,7 @@ public class MerkleProofTests
         }
     }
 
-    // ---- proof errate ----
+    // ---- invalid proofs ----
 
     [Fact]
     public void Una_prova_per_la_posizione_sbagliata_fallisce()
@@ -152,7 +152,7 @@ public class MerkleProofTests
     public void Branch_alterato_non_verifica()
     {
         var branch = BuildBranch(Block100000Txids, 0);
-        branch[0] = uint256.One; // corrompe il primo elemento del branch
+        branch[0] = uint256.One; // corrupt the first branch element
         Assert.False(MerkleProof.Verify(Block100000Txids[0], 0, branch, Block100000Root));
     }
 
@@ -171,7 +171,7 @@ public class MerkleProofTests
         Assert.Throws<ArgumentException>(() => MerkleProof.ComputeRootFromLeaves([]));
     }
 
-    /// <summary>Costruisce il branch per una foglia ricostruendo i livelli dell'albero.</summary>
+    /// <summary>Builds the Merkle branch for a leaf by reconstructing the tree levels.</summary>
     private static List<uint256> BuildBranch(IReadOnlyList<uint256> leaves, int position)
     {
         var branch = new List<uint256>();

tests/PalladiumWallet.Tests/Storage/StorageTests.cs

@@ -20,7 +20,7 @@ public class StorageTests
     private static string TempPath() =>
         Path.Combine(Path.GetTempPath(), $"plm-test-{Guid.NewGuid()}.wallet.json");
 
-    // ---- cifratura AES-GCM ----
+    // ---- AES-GCM encryption ----
 
     [Fact]
     public void La_cifratura_fa_roundtrip_con_la_password_giusta()
@@ -257,8 +257,8 @@ public class StorageTests
     [Fact]
     public void WalletLock_file_lock_preesistente_ma_non_bloccato_viene_acquisito()
     {
-        // Un .lock rimasto da un crash precedente (file esiste ma nessuno lo tiene)
+        // A stale .lock left from a previous crash (file exists but nobody holds it)
-        // non deve bloccare l'apertura del wallet.
+        // must not block wallet opening.
         var path = TempPath();
         var lockPath = path + ".lock";
         try

tests/PalladiumWallet.Tests/Wallet/CoinAmountTests.cs

@@ -5,7 +5,7 @@ namespace PalladiumWallet.Tests.Wallet;
 
 public class CoinAmountTests
 {
-    // ---- importi validi: tutte le unità ----
+    // ---- valid amounts: all units ----
 
     [Theory]
     [InlineData("1",          "sat",  1)]
@@ -96,7 +96,7 @@ public class CoinAmountTests
         Assert.False(CoinAmount.TryParseIn("99999999999", "PLM", out _));
     }
 
-    // ---- unità sconosciuta lancia ArgumentException ----
+    // ---- unknown unit throws ArgumentException ----
 
     [Theory]
     [InlineData("banana")]

tests/PalladiumWallet.Tests/Wallet/ImportedKeyAccountTests.cs

@@ -6,15 +6,15 @@ using PalladiumWallet.Core.Wallet;
 namespace PalladiumWallet.Tests.Wallet;
 
 /// <summary>
-/// Test per ImportedKeyAccount e i nuovi percorsi factory in WalletLoader
+/// Tests for ImportedKeyAccount and the new factory paths in WalletLoader
-/// (blueprint §4.4 — importati WIF, xpub, xprv).
+/// (blueprint §4.4 — imported WIF, xpub, xprv).
 /// </summary>
 public class ImportedKeyAccountTests
 {
     private static ChainProfile Profile => ChainProfiles.Mainnet;
     private static Network Network => PalladiumNetworks.For(Profile.Kind);
 
-    // Chiave WIF valida per PLM mainnet (prefix 0x80 = Compressed WIF "K"/"L")
+    // Valid WIF key for PLM mainnet (prefix 0x80 = Compressed WIF "K"/"L")
     private static Key GenerateKey() => new Key();
 
     private static string ToWif(Key key) => key.GetWif(Network).ToString();
@@ -43,7 +43,7 @@ public class ImportedKeyAccountTests
 
         Assert.Equal(addr.ToString(), account.GetAddress(false, 0).ToString());
         Assert.Equal(addr.ToString(), account.GetReceiveAddress(0).ToString());
-        // Change → primo indirizzo
+        // Change → first address
         Assert.Equal(addr.ToString(), account.GetChangeAddress(0).ToString());
     }
 
@@ -147,7 +147,7 @@ public class ImportedKeyAccountTests
     [Fact]
     public void NewFromXpub_produce_account_watch_only()
     {
-        // Crea un HD account, esporta la zpub, reimporta come xpub watch-only.
+        // Create an HD account, export the zpub, re-import as watch-only xpub.
         var (_, hdFull) = WalletLoader.NewFromMnemonic(
             "abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about",
             null, ScriptKind.NativeSegwit, Profile);

tests/PalladiumWallet.Tests/Wallet/TransactionFactoryTests.cs

@@ -19,7 +19,7 @@ public class TransactionFactoryTests
         return HdAccount.FromMnemonic(mnemonic!, null, ScriptKind.NativeSegwit, Profile);
     }
 
-    /// <summary>Tx fittizia che accredita <paramref name="sats"/> sull'indirizzo receiving/0.</summary>
+    /// <summary>Fake transaction that credits <paramref name="sats"/> to the receiving/0 address.</summary>
     private static (List<CachedUtxo>, Dictionary<string, Transaction>) Fund(HdAccount account, long sats)
     {
         var funding = Net.CreateTransaction();
@@ -48,20 +48,20 @@ public class TransactionFactoryTests
 
         var built = new TransactionFactory(account).Build(
             utxos, txs, destination, amountSats: 400_000,
-            feeRateSatPerVByte: 2, changeIndex: 0);
+            feeRateSatPerVByte: 2, changeIndex: 0, tipHeight: 100);
 
         Assert.True(built.Signed);
-        // Output: destinatario + change.
+        // Output: recipient + change.
         Assert.Equal(2, built.Transaction.Outputs.Count);
         Assert.Contains(built.Transaction.Outputs,
             o => o.ScriptPubKey == destination.ScriptPubKey && o.Value.Satoshi == 400_000);
 
-        // Fee coerente col rate richiesto (±20% per gli arrotondamenti di stima).
+        // Fee consistent with the requested rate (±20% for estimation rounding).
         var vsize = built.Transaction.GetVirtualSize();
         var expected = vsize * 2;
         Assert.InRange(built.Fee.Satoshi, expected * 0.8, expected * 1.5);
 
-        // RBF abilitato (§6.6).
+        // RBF enabled (§6.6).
         Assert.All(built.Transaction.Inputs, i => Assert.True(i.Sequence < Sequence.Final));
     }
 
@@ -74,7 +74,7 @@ public class TransactionFactoryTests
 
         var built = new TransactionFactory(account).Build(
             utxos, txs, destination, amountSats: 0,
-            feeRateSatPerVByte: 1, changeIndex: 0, sendAll: true);
+            feeRateSatPerVByte: 1, changeIndex: 0, tipHeight: 100, sendAll: true);
 
         var output = Assert.Single(built.Transaction.Outputs);
         Assert.Equal(500_000, output.Value.Satoshi + built.Fee.Satoshi);
@@ -88,7 +88,7 @@ public class TransactionFactoryTests
 
         Assert.Throws<WalletSpendException>(() => new TransactionFactory(account).Build(
             utxos, txs, account.GetReceiveAddress(1), amountSats: 900_000,
-            feeRateSatPerVByte: 2, changeIndex: 0));
+            feeRateSatPerVByte: 2, changeIndex: 0, tipHeight: 100));
     }
 
     [Fact]
@@ -96,12 +96,12 @@ public class TransactionFactoryTests
     {
         var account = Account();
         var (utxos, txs) = Fund(account, 1_000_000);
-        utxos[0].Height = 0; // in mempool: visibile nel saldo pending, non spendibile
+        utxos[0].Height = 0; // in mempool: visible in pending balance, not spendable
 
         var ex = Assert.Throws<WalletSpendException>(() => new TransactionFactory(account).Build(
             utxos, txs, account.GetReceiveAddress(1), amountSats: 100_000,
-            feeRateSatPerVByte: 2, changeIndex: 0));
+            feeRateSatPerVByte: 2, changeIndex: 0, tipHeight: 100));
-        Assert.Contains("in attesa di conferma", ex.Message);
+        Assert.Contains("unconfirmed", ex.Message);
     }
 
     [Fact]
@@ -109,11 +109,66 @@ public class TransactionFactoryTests
     {
         var account = Account();
         var (utxos, txs) = Fund(account, 1_000_000);
-        utxos[0].Frozen = true; // freeze (§6.2)
+        utxos[0].Frozen = true; // frozen (§6.2)
 
         Assert.Throws<WalletSpendException>(() => new TransactionFactory(account).Build(
             utxos, txs, account.GetReceiveAddress(1), amountSats: 100_000,
-            feeRateSatPerVByte: 2, changeIndex: 0));
+            feeRateSatPerVByte: 2, changeIndex: 0, tipHeight: 100));
+    }
+
+    [Fact]
+    public void Gli_utxo_coinbase_immaturi_non_sono_spendibili()
+    {
+        var account = Account();
+        var (utxos, txs) = Fund(account, 1_000_000);
+        utxos[0].IsCoinbase = true;
+        utxos[0].Height = 100;
+        // Threshold = COINBASE_MATURITY + 1 = 121 (mirrors the Qt wallet: consensus rule is
+        // nSpendHeight - nHeight >= 120, plus one block of safety margin).
+        // At height=100, tip=219 → confs = 219-100+1 = 120 < 121 → immature.
+        var ex = Assert.Throws<WalletSpendException>(() => new TransactionFactory(account).Build(
+            utxos, txs, account.GetReceiveAddress(1), amountSats: 100_000,
+            feeRateSatPerVByte: 2, changeIndex: 0, tipHeight: 219));
+        Assert.Contains("coinbase", ex.Message);
+        Assert.Contains("120/121", ex.Message);
+
+        // tip=220 → confs = 121 ≥ 121 → mature and spendable.
+        var built = new TransactionFactory(account).Build(
+            utxos, txs, account.GetReceiveAddress(1), amountSats: 100_000,
+            feeRateSatPerVByte: 2, changeIndex: 0, tipHeight: 220);
+        Assert.True(built.Signed);
+    }
+
+    [Fact]
+    public void Gli_utxo_con_meno_di_minconf_non_sono_spendibili_su_mainnet()
+    {
+        var mainnetAccount = HdAccount.FromMnemonic(
+            Bip39.TryParse("abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about", out var m) ? m! : throw new Exception(),
+            null, ScriptKind.NativeSegwit, ChainProfiles.Mainnet);
+
+        var funding = PalladiumNetworks.Mainnet.CreateTransaction();
+        funding.Inputs.Add(new TxIn(new OutPoint(uint256.One, 0)));
+        funding.Outputs.Add(Money.Satoshis(1_000_000), mainnetAccount.GetReceiveAddress(0));
+        var txid = funding.GetHash().ToString();
+        var utxos = new List<CachedUtxo>
+        {
+            new() { Txid = txid, Vout = 0, ValueSats = 1_000_000,
+                    Address = mainnetAccount.GetReceiveAddress(0).ToString(),
+                    IsChange = false, AddressIndex = 0, Height = 100, IsCoinbase = false },
+        };
+        var txs = new Dictionary<string, Transaction> { [txid] = funding };
+
+        // 5 confirmations (tipHeight=104): below the mainnet minimum of 6.
+        var ex = Assert.Throws<WalletSpendException>(() => new TransactionFactory(mainnetAccount).Build(
+            utxos, txs, mainnetAccount.GetReceiveAddress(1), amountSats: 100_000,
+            feeRateSatPerVByte: 2, changeIndex: 0, tipHeight: 104));
+        Assert.Contains("5 so far", ex.Message);
+
+        // 6 confirmations (tipHeight=105): exactly at the threshold → spendable.
+        var built = new TransactionFactory(mainnetAccount).Build(
+            utxos, txs, mainnetAccount.GetReceiveAddress(1), amountSats: 100_000,
+            feeRateSatPerVByte: 2, changeIndex: 0, tipHeight: 105);
+        Assert.True(built.Signed);
     }
 
     [Fact]
@@ -127,11 +182,11 @@ public class TransactionFactoryTests
 
         var built = new TransactionFactory(watchOnly).Build(
             utxos, txs, full.GetReceiveAddress(5), amountSats: 400_000,
-            feeRateSatPerVByte: 2, changeIndex: 0);
+            feeRateSatPerVByte: 2, changeIndex: 0, tipHeight: 100);
 
         Assert.False(built.Signed);
-        // Il flusso air-gapped (§6.5): la PSBT della macchina online si firma
+        // Air-gapped flow (§6.5): the online-machine PSBT is signed
-        // offline con le chiavi e si finalizza.
+        // offline with the keys and then finalised.
         var psbt = built.Psbt;
         psbt.SignWithKeys(full.GetExtPrivateKey(false, 0));
         psbt.Finalize();
@@ -157,7 +212,7 @@ public class TransactionFactoryTests
         Assert.False(CoinAmount.TryParseCoins("-1", out _));
     }
 
-    // 1.5 PLM = 150_000_000 sat, espressi in ciascuna unità (§8).
+    // 1.5 PLM = 150_000_000 sat, expressed in each unit (§8).
     [Theory]
     [InlineData("PLM", "1.50000000 PLM", "1.5")]
     [InlineData("mPLM", "1500.00000 mPLM", "1500")]

tests/PalladiumWallet.Tests/Wallet/WalletLoaderTests.cs

@@ -120,7 +120,7 @@ public class WalletLoaderTests
         var (doc, accountSeed) = WalletLoader.NewFromMnemonic(
             ValidMnemonic, null, ScriptKind.NativeSegwit, ChainProfiles.Mainnet);
 
-        // Crea documento watch-only rimuovendo la mnemonica
+        // Build a watch-only document by removing the mnemonic.
         var docWo = new WalletDocument
         {
             Network = doc.Network,