In the Air-Gapped Wallet Review Lab, “firmware diff” means comparing published artifacts and recording who checked them — not claiming deep audit expertise. Module 3 of Offline Signing Desk Review uses a one-page notebook format.
Minimum fields
- Vendor page URL and retrieval timestamp (from an online machine, never the signing host).
- Published hash and the hash you computed.
- Signing key fingerprint if the vendor publishes one.
- Names of people who verified, and whether they did so independently.
What not to invent
Do not invent confidence levels. If you only compared hashes, say so. If nobody checked the vendor’s key ceremony, say that too. Incomplete honesty beats decorative certainty.
Related reading: When air-gap checks fail quietly. Legal baseline: Not Financial Advice.