covenants.diy

An interactive research and development environment for designing, analyzing, and evaluating Bitcoin covenant constructions and covenant-based protocols. Wire nodes into a graph and it builds the taproot output, assembles the tapscript, computes the sighash, and steps through script execution, entirely in the browser. Signet and regtest only.

Covenant opcodes

CTV · CSFS · CAT · APO · TEMPLATEHASH · INTERNALKEY · PAIRCOMMIT · TXHASH · CCV · VAULT

Worked examples

• Hot and coldTwo leaves, one spendable now and one after a delaytaproot
• Vault, with CTVA delay to notice a theft, and a cold path to stop itBIP-119
• Congestion controlOne transaction commits to a tree of payoutsBIP-119
• Vault, with OP_VAULTRewrite one leaf to withdraw, and keep a way to stop itBIP-345
• ArkMany balances in one coin, any owner can exit aloneBIP-119
• DelegationHand someone one spend without handing them your keyBIP-348
• Oracle payoutAn attestation decides whether, never whereBIP-348 + 119
• Rebindable stateThree opcodes, and the update leaf is three bytesBIP-448
• Rebindable state, the older wayThe same channel, using an ANYPREVOUT key typeBIP-118
• Merkle proofA script folds a leaf back into a root it commits toBIP-347
• CAT-only covenantA covenant with no CSFS, using a signature the script builds itselfBIP-347
• Recursive covenantA coin that can only be spent back into itselfBIP-347 + 348

Loading the editor…