From dd9db5ba5407b9c30b4f41fc1153db39f0770154 Mon Sep 17 00:00:00 2001
From: Nsable-sh <nsable-sh@noreply.git.bitflash.network>
Date: Fri, 14 Aug 2026 11:08:34 -0300
Subject: wallet: install backups via temporary file

---
 docs/storage.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'docs')

diff --git a/docs/storage.md b/docs/storage.md
index e4a66d2..c1cda45 100644
--- a/docs/storage.md
+++ b/docs/storage.md
@@ -77,7 +77,8 @@ A future wallet backend must keep these properties:
 3. A locked encrypted wallet may expose public keys and balances, but not
    private keys or decrypted HD seed material.
 4. `-backupwallet` must produce a wallet file that opens in a different datadir
-   without copying `database/`.
+   without copying `database/`, and must not leave a half-written final backup
+   path if the copy or install step fails.
 5. `-recoveryaudit` must distinguish:
    - no recovery phrase installed;
    - recovery phrase present;
-- 
cgit v1.2.3