path: root/eb/1ef30e0984f0565c49cfd2489854dff07e808b

Delivery-date: Sat, 14 Jun 2025 09:19:25 -0700
Received: from mail-oa1-f62.google.com ([209.85.160.62])
	by mail.fairlystable.org with esmtps  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.94.2)
	(envelope-from <bitcoindev+bncBCJNLJPWXAIBBA6CW3BAMGQEEE4A3XA@googlegroups.com>)
	id 1uQTbI-0000qv-9v
	for bitcoindev@gnusha.org; Sat, 14 Jun 2025 09:19:25 -0700
Received: by mail-oa1-f62.google.com with SMTP id 586e51a60fabf-2d9e7fbff93sf2370819fac.2
        for <bitcoindev@gnusha.org>; Sat, 14 Jun 2025 09:19:24 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1749917958; cv=pass;
        d=google.com; s=arc-20240605;
        b=SAbt6xPpSaU05usYFxvp4JyjPcGHz49ABD/cdz/f2U3XR5B5UEOCRa2znWO0qCKIbC
         m8Rtz+89Edd8YXWN5wJR9To9WSiGMyAVIJ6tq2HnTUGodyg9w7TFTSFG0GqfJutRyXpe
         oZDKjWgkkClQ6yE8rrg/KvpLxERjKxGgXSwn+ANSACCAf92h6M2p8iSo4MYYmxwu9xE7
         ORIwt/wDnwq5oiF9F9h+jPGoNg1mWCS5LYmm+lrFl1HjXPHKMBUAeMbA0YRlsl6rZyu1
         xYE4SWeryhXYBJsnOU2rTmY0Tyj8UYDAYkxHaVrxZAcNtd3HduxnE0+4DVnnGEuA7imt
         bbXg==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:cc:to:subject:message-id:date:from
         :in-reply-to:references:mime-version:sender:dkim-signature
         :dkim-signature;
        bh=AjqjBFfPZfZS9WW+VpNUNQ8HCyVIRYwOu52LNmPqh3I=;
        fh=CiJfuEVbYGyaye4Q0VHyXJxHDlrdUGYDUOvRCP7lTBQ=;
        b=hRax8/ghm+MKQ/l++TcJdtXo8ccpO5ksKD5OOoZ8Avb0bP4igdy0/BGtJeT7tmgd3B
         l3vuSyBBb9lKc4Z59lBC7XASID/cdQbfFEhoQ551WzqtF1cYo8l6AZAVA/WAVP7Fx3Rl
         6KBfBWRlzQC5UFdEZ9fLKoWo+xm1P/tb9x6Mst1aeqUrpgL4SnY+FqFGFOpwk7/8D5an
         dD9HQbAY5KqZr0KZUc8IaXG8KntZia6y+gI68rN7OgYEYOxmh1Ffqg51u18raUBOvc4T
         tjl5v3SbgGjTm3/Dn/2uKFPtV1h/tv8MjCiWWPI/zRv+6xeKk4SaFiAFpw901teTlZ0v
         WDfQ==;
        darn=gnusha.org
ARC-Authentication-Results: i=2; gmr-mx.google.com;
       dkim=pass header.i=@gmail.com header.s=20230601 header.b="U5O/qHJU";
       spf=pass (google.com: domain of gmaxwell@gmail.com designates 2607:f8b0:4864:20::1032 as permitted sender) smtp.mailfrom=gmaxwell@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;
       dara=pass header.i=@googlegroups.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=googlegroups.com; s=20230601; t=1749917958; x=1750522758; darn=gnusha.org;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:x-original-authentication-results
         :x-original-sender:cc:to:subject:message-id:date:from:in-reply-to
         :references:mime-version:sender:from:to:cc:subject:date:message-id
         :reply-to;
        bh=AjqjBFfPZfZS9WW+VpNUNQ8HCyVIRYwOu52LNmPqh3I=;
        b=EuY5wOb5+X0YdSj0IrEGtK5mg2jVPjAi5h0c0vk/ZYpABoYyz2fZMD9dolcfHaRrOI
         fxE406r+dc36CMUL+RVDHZZRWbxumRLrftyruDRhoKazWxn5gM4e2mNR4hpPxiFIdQi/
         nw9P1073W0paFY2o7jLIq0l48B2WMDcljI1j2YGMz7BQWmFen5tXgSfQmO8pw4C6mNsq
         TKafskbE2wY1uADdC4Z6zVwkgNw0jakQ3UKsUJbpj2wHKLh8op6azvYF9cDHyQPlV1dB
         vYSMvaok2rPg/t2/DVAYPyAy4jU/g5N2uzdImnwf3A5LmNvb6cWiq3I5Z7l8v1gEMvQv
         9vYg==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20230601; t=1749917958; x=1750522758; darn=gnusha.org;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:x-original-authentication-results
         :x-original-sender:cc:to:subject:message-id:date:from:in-reply-to
         :references:mime-version:from:to:cc:subject:date:message-id:reply-to;
        bh=AjqjBFfPZfZS9WW+VpNUNQ8HCyVIRYwOu52LNmPqh3I=;
        b=YBJj08hoQM3lNbPdLiycK68sn2vlf1a6Jp73lflFAyb+OL3ptyurCkHqKZAbjHbrqL
         RFUVRI9c/jqz1Ctnqgo8QMHI7aTyBqSZuL87t0PwTsoELMlHPV0Qpxmp41YoOacXx7k5
         1pwjwvUashV40Kcy9hpQHd7TO3DEo1PAsmB4gIRqvvUgx9sLm0AcIjRcp9oracVRKGCu
         RxAw73TMLAet8UZd9kjZXXEv9e/qlAXcicYSRbdzp7j6Si9Rz/fznYMiumDnHiyJ+f+A
         fJWdoWQoQrz8NesWzc6OtTs1VG8yUJLHZuLtK1Vg1V2pPiKyrsUC+3CiUtfoLKPWIm5G
         AeOQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1749917958; x=1750522758;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:x-original-authentication-results
         :x-original-sender:cc:to:subject:message-id:date:from:in-reply-to
         :references:mime-version:x-beenthere:x-gm-message-state:sender:from
         :to:cc:subject:date:message-id:reply-to;
        bh=AjqjBFfPZfZS9WW+VpNUNQ8HCyVIRYwOu52LNmPqh3I=;
        b=dhzUL6DSniK+3MoH245YoA8z7364lYn0IRItoFGTVx0AiGiIR0G3/dB/LB+yx4Lfk4
         aALglofciN/Jg2bgHOESAKBgq0UcpfQrx4KLLbxpRdw6v4zEwqLuBsMWBb+l5xWighsN
         arXqVnZKNQsaifpNJuzJP8ebyuxcWCFqcSi+tiabgWdKc/nVrrpQtfUad8RW/IwpMjQp
         kYHzx4cfKP3FsTtAQ4Cfkb39cPXxMipo20l6f6GRBCve+RRl5cbwvNrZm+fzrBy7GiSw
         CPdpVeAQwWkO3WInL0lbeSn0cblOVZk0fsABaQDkogpDikngjKXXFQlGbEXudztPE9Bg
         luIQ==
Sender: bitcoindev@googlegroups.com
X-Forwarded-Encrypted: i=2; AJvYcCVmoo7SEA9nd5ZPe2DditrOL2T0I26PgyBLwRiGK+QiAqZPSNZ9jsdx677YRb+9zczIWGpyPqqvFf5i@gnusha.org
X-Gm-Message-State: AOJu0YyZqvBic60U9YKo3dTDfsvmUZ2d0NkZ/FexpuIqqn91LU+hpIOg
	bxF1ZviexBKjuMxUVpk7pn2A6/5TZYENodHCZcqlvhe6AWmQkxr5xAaa
X-Google-Smtp-Source: AGHT+IEEH0w273pU9gUlVJ36jss4ppVBWMEYi+g7coSnspxEi7JBsQOqbzlRsp+JOIuAMsv9ayi1jw==
X-Received: by 2002:a05:6870:568a:b0:2db:b643:80f6 with SMTP id 586e51a60fabf-2eaf098cademr2005141fac.16.1749917958395;
        Sat, 14 Jun 2025 09:19:18 -0700 (PDT)
X-BeenThere: bitcoindev@googlegroups.com; h=AZMbMZend5+ZSQ2k5pKzTP0la4O/IPfDKDqlY4g0j6dREWVRog==
Received: by 2002:a05:6870:d698:b0:2e9:9a5a:7609 with SMTP id
 586e51a60fabf-2eab6f4e79cls2168620fac.1.-pod-prod-01-us; Sat, 14 Jun 2025
 09:19:15 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AJvYcCWUkGqhulWvPLMJrqI6AFevtZZrDpl1heJFqvsHLQFRpO6BZAJKK5cL/zC8HpgHDS3dibjASsgo2oYH@googlegroups.com
X-Received: by 2002:a05:6808:bc3:b0:40a:52e5:37d3 with SMTP id 5614622812f47-40a7c1b1e73mr2015687b6e.3.1749917955585;
        Sat, 14 Jun 2025 09:19:15 -0700 (PDT)
Received: by 2002:a05:6808:6091:b0:3f9:f009:458e with SMTP id 5614622812f47-40a7193ecc8msb6e;
        Sat, 14 Jun 2025 09:06:22 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AJvYcCXyGYGu3EpkvfSYh3P1fbWJz34wTFJpaHvH8s2mgAzxaCf1VlspRc4JPBUNeVviEn+ZUFKV0fMNqcMi@googlegroups.com
X-Received: by 2002:a05:6808:2f12:b0:404:ed0d:79e5 with SMTP id 5614622812f47-40a7c24d0f1mr2319693b6e.30.1749917181948;
        Sat, 14 Jun 2025 09:06:21 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1749917181; cv=none;
        d=google.com; s=arc-20240605;
        b=j/3DtiTIcxKSLhXwo13MGbvNxDsq3Axn7HPXxwKENRiUkDliuqSYCnehDDQCgBope6
         gU8DoIO99tAogwzD2i6PloOC8M8Q+cs1vUDFeqET/FrUDLNiwFSuYOMbEqsYy2eCXGCf
         8wfqVAI6uD4e92vQL3cW3vc5Kcxxiy/BM/Jv1GvpOX9UigyDk3BdnFX8uZ03Bn/QN9Kv
         2oiV55X9hHxhu7T47iauFLqsmEq24DiK7ZEWM5luERwzdMO9Z2DKL16mmJWeSUSmYbaA
         4xNs7+2kadNs77WJXuuSwhXtxwcDIOEabhOyED6sS50V5VzBHI4+1adOcCxcXepZgkkj
         p/Iw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:dkim-signature;
        bh=OdV5mEhTeTif7IizNFONt5xp1gdsoPc8mHE+Ec/T74g=;
        fh=VFM0+1iAGseGYM8ev+h1/5dX2RWAk67myEjt/uuZ42s=;
        b=dhFn6zFti1DJMZ3wctEZOZwEDQpT7onchlWkvI+Gn6NWGvC5gf9wiJjRJCtAK5yPyc
         aM1WRK7z36/xE+sCP0ofxbwLMEgy5uryYtStH5IEQoEnrHxoGfl7nXbN/3uYiGF6t8gm
         0TDbfeFWPKoGW8o3GqMJL1eBtl9cn2IteFy8tPQimpJIgQ6H1vlE43jo7IUd60Oi2UTL
         I1p8uGeZfvU6sLl7zwS5GO6Qv/1qOW+PKEjOTi5/51gECNhDDb3OialJfgrxZpWV1N87
         5fhtqcAT26UsVZpr79VdN57u9XLlhCws4K6tYzZuxccDIniy1G/CG8n1X4e4u2jYrz49
         76mQ==;
        dara=google.com
ARC-Authentication-Results: i=1; gmr-mx.google.com;
       dkim=pass header.i=@gmail.com header.s=20230601 header.b="U5O/qHJU";
       spf=pass (google.com: domain of gmaxwell@gmail.com designates 2607:f8b0:4864:20::1032 as permitted sender) smtp.mailfrom=gmaxwell@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;
       dara=pass header.i=@googlegroups.com
Received: from mail-pj1-x1032.google.com (mail-pj1-x1032.google.com. [2607:f8b0:4864:20::1032])
        by gmr-mx.google.com with ESMTPS id 5614622812f47-40a741a8394si166512b6e.5.2025.06.14.09.06.21
        for <bitcoindev@googlegroups.com>
        (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
        Sat, 14 Jun 2025 09:06:21 -0700 (PDT)
Received-SPF: pass (google.com: domain of gmaxwell@gmail.com designates 2607:f8b0:4864:20::1032 as permitted sender) client-ip=2607:f8b0:4864:20::1032;
Received: by mail-pj1-x1032.google.com with SMTP id 98e67ed59e1d1-3122368d7c4so2844044a91.1
        for <bitcoindev@googlegroups.com>; Sat, 14 Jun 2025 09:06:21 -0700 (PDT)
X-Forwarded-Encrypted: i=1; AJvYcCVNSDuSRpK2J2osR3iYvbvb1plXXnhSdHPWluOv+tGEOMhXPjOyNAvPhyMqeDBNrJYERqW58FeLd3p8@googlegroups.com
X-Gm-Gg: ASbGncvxdQvrYKxupFkwoasgrniT6ZPNiAoYJyHQFOmRzyJ1GwRkdJHFPgOYavVnXc1
	mc3Z+oPrgJ1oB3jmFYrMaQ+LQNY0kvbL3qlrXcmn5LJtR7NQnB7sdrpsRcUibDpjmyY7OerCJoB
	FgMaWtSbWrAVuPtE23YismvC+clZAMiWZZw7R54mQ9ImM=
X-Received: by 2002:a17:90b:4a92:b0:2fe:e9c6:689e with SMTP id
 98e67ed59e1d1-313f1ca8cf7mr4828120a91.8.1749917180465; Sat, 14 Jun 2025
 09:06:20 -0700 (PDT)
MIME-Version: 1.0
References: <aEdoIvOgNNtT6L4s@mail.wpsoftware.net> <CAPfvXfL=7bQvhN5ZOJoS-hQ8TmUku=mNhxNop=ZhcyH+kqs9jw@mail.gmail.com>
 <46349b6c-ccec-4378-8721-aecec22752e7@mattcorallo.com> <de023ffa-6f8b-44bc-8e4d-6012e2ba3ccen@googlegroups.com>
 <8d158e3d-b3cc-44b6-b71b-ab2e733c047c@mattcorallo.com> <CAPfvXfLc5-=UVpcvYrC=VP7rLRroFviLTjPQfeqMQesjziL=CQ@mail.gmail.com>
 <aEsvtpiLWoDsfZrN@mail.wpsoftware.net> <f8b37a59-0897-40df-a08e-7812c806a716@mattcorallo.com>
 <CADL_X_fxwKLdst9tYQqabUsJgu47xhCbwpmyq97ZB-SLWQC9Xw@mail.gmail.com>
 <psUO5AHTglJ3KiGM5tTd0sqrFDUexydKzfkOpjOHcWM97OdluX_hIplsXxl_9vzS1pPOqMek3rVBhlzWiPyuvFvz7VmG9FNXapkMG97a7xc=@protonmail.com>
 <CADL_X_faQhCGS78y0Nggm_h=x_cEtshhbrZDDhQ=FEgbDXkc-Q@mail.gmail.com>
In-Reply-To: <CADL_X_faQhCGS78y0Nggm_h=x_cEtshhbrZDDhQ=FEgbDXkc-Q@mail.gmail.com>
From: gmaxwell <gmaxwell@gmail.com>
Date: Sat, 14 Jun 2025 16:06:07 +0000
X-Gm-Features: AX0GCFtoL3quB8ccqOyeMP_u6Eu-A25jHQp2Tv2uO-Ed6LtFi1zY1UWAMoZJvrs
Message-ID: <CAAS2fgSo=pdRhj=MkRDObXm5GtKpP3R5T4yck_pwBpn3_72f5Q@mail.gmail.com>
Subject: Re: [bitcoindev] CTV + CSFS: a letter
To: Jameson Lopp <jameson.lopp@gmail.com>
Cc: Antoine Poinsot <darosior@protonmail.com>, Matt Corallo <lf-lists@mattcorallo.com>, 
	Andrew Poelstra <apoelstra@wpsoftware.net>, 
	Bitcoin Development Mailing List <bitcoindev@googlegroups.com>
Content-Type: multipart/alternative; boundary="000000000000ed9d8b06378a57a7"
X-Original-Sender: gmaxwell@gmail.com
X-Original-Authentication-Results: gmr-mx.google.com;       dkim=pass
 header.i=@gmail.com header.s=20230601 header.b="U5O/qHJU";       spf=pass
 (google.com: domain of gmaxwell@gmail.com designates 2607:f8b0:4864:20::1032
 as permitted sender) smtp.mailfrom=gmaxwell@gmail.com;       dmarc=pass
 (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;       dara=pass header.i=@googlegroups.com
Precedence: list
Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com
List-ID: <bitcoindev.googlegroups.com>
X-Google-Group-Id: 786775582512
List-Post: <https://groups.google.com/group/bitcoindev/post>, <mailto:bitcoindev@googlegroups.com>
List-Help: <https://groups.google.com/support/>, <mailto:bitcoindev+help@googlegroups.com>
List-Archive: <https://groups.google.com/group/bitcoindev
List-Subscribe: <https://groups.google.com/group/bitcoindev/subscribe>, <mailto:bitcoindev+subscribe@googlegroups.com>
List-Unsubscribe: <mailto:googlegroups-manage+786775582512+unsubscribe@googlegroups.com>,
 <https://groups.google.com/group/bitcoindev/subscribe>
X-Spam-Score: -0.5 (/)

--000000000000ed9d8b06378a57a7
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

I'm struggling to figure out what kind of useful 'vault' could be
constructed from CTV that isn't equivalent to "presign a transaction that
sweeps your funds to an emergency address".  Can someone clue me in?

It might be helpful to point to examples of where similar techniques are
used in other blockchains that already facilitate their construction.  This
isn't bitcoin-twitter,  it's permissible to observe some other system being
used in useful ways...





On Sat, Jun 14, 2025 at 2:08=E2=80=AFPM Jameson Lopp <jameson.lopp@gmail.co=
m> wrote:

> Casa (and many other companies focused on custody products) would love to
> see vaulting functionality. I don't think any of us are too hung up on th=
e
> details of the particular implementation - we would rather have a "good"
> tool than not have any tool because consensus has not been achieved for a
> "perfect" solution.
>
> What is the problem that makes vaults desirable? It's frankly because
> there's no such thing as perfect security. Even if one designs an
> architecture that is nearly perfectly secure against external threats, th=
e
> issue of internal threats (such as oneself, via social engineering) will
> remain. The ability to require high value funds to sit in a "quarantine /
> cooldown" address for some period of time before they can be sent to an
> arbitrary address enables additional security measures a la watchtowers t=
o
> be designed. Being your own bank is still an incredibly scary proposition
> because it's quite difficult to design custody solutions that tolerate
> failures without leading to catastrophic loss. The more tools that custod=
y
> application engineers have available to them, the more guardrails we can
> build into wallet software, and thus hopefully the more comfortable we ca=
n
> make the general public with the idea of taking on the responsibility of
> self custody.
>
> To be clear, I'm not aware of CSFS improving the vaulting functionality
> already available via CTV. As far as I can tell, CSFS is one of the least
> controversial opcodes proposed in a long time and just seems to be an
> all-around win with no risks / trade-offs, so why not bundle it in?
>
> I'm not sure how to parse Antoine's claim that CTV+CSFS doesn't enable
> vaults given that there has already been a CTV vault client proof of
> concept for 3 years: https://github.com/jamesob/simple-ctv-vault
>
> On Fri, Jun 13, 2025 at 9:07=E2=80=AFAM Antoine Poinsot <darosior@protonm=
ail.com>
> wrote:
>
>> Jameson,
>>
>> Thanks for sharing. Although i grew more skeptical of the reactive
>> security model of vaults as i implemented them in practice for real user=
s,
>> i can appreciate people's mileage may vary.
>>
>> That said, consensus-enforced vaults require a mechanism to forward any
>> amount received on a script A to a pre-committed script B. CTV+CSFS does
>> not enable this, and a primitive that actually does (like CCV) is more
>> controversial because of its potency. I see the CTV+CSFS bundle as
>> maximizing "bang for your buck" in terms of capabilities enabled compare=
d
>> to the accompanying risk. If we do want vaults, then we need to get past
>> the MEVil concerns and much more interesting primitives are actually on =
the
>> table.
>>
>> I also appreciate that CTV is nice to have for CCV vaults, but a
>> potential future use case that is not enabled by one proposal cannot be
>> used to motivate said proposal.
>>
>> Best,
>> Antoine Poinsot
>> On Friday, June 13th, 2025 at 7:15 AM, Jameson Lopp <
>> jameson.lopp@gmail.com> wrote:
>>
>> > Unlike a generic "We Want Things" sign-on letter, individual messages
>> indicating desire to utilize features is way more compelling.
>>
>> Then I submit my essay from 2 years ago (
>> https://blog.casa.io/why-bitcoin-needs-covenants/) and will quote myself=
:
>>
>> "There are clearly a LOT of use cases that could potentially be unlocked
>> with the right kind of covenant implementation. Personally, having spent=
 8
>> years working on high security multi-signature wallets, I'm most interes=
ted
>> in vaults. I believe the value they offer is quite straightforward and i=
s
>> applicable to every single self-custody bitcoin user, regardless of what
>> type of wallet they are running."
>>
>> - Jameson
>>
>> On Thu, Jun 12, 2025 at 6:54=E2=80=AFPM Matt Corallo <lf-lists@mattcoral=
lo.com>
>> wrote:
>>
>>> To be fair to James, in my (luckily rather brief) experience with
>>> Bitcoin-consensus-letter-writing,
>>> its nearly impossible to forge a statement that everyone agrees to that
>>> is consistently interpreted.
>>>
>>> Matt
>>>
>>> On 6/12/25 3:51 PM, Andrew Poelstra wrote:
>>> > Le Thu, Jun 12, 2025 at 02:38:13PM -0400, James O'Beirne a =C3=A9crit=
 :
>>> >>
>>> >> As the person who coordinated the letter, I can say that this is not
>>> an
>>> >> accurate characterization of the signers' intent. Everyone who signe=
d
>>> >> explicitly wants to see the imminent review, integration, and
>>> activation
>>> >> planning for CTV+CSFS specifically. The letter is intentionally
>>> concise to
>>> >> make sure there are no misunderstandings about that.
>>> >>
>>> >> I spoke to each person on the original list of signatories who eithe=
r
>>> did
>>> >> (or didn't) sign and this was made very clear. Some people didn't
>>> sign as a
>>> >> result of what the letter says.
>>> >>
>>> >
>>> > The letter asks Core to "prioritize the review and integration" on an
>>> > accelerated timeline, and that this will "allow" for "activation
>>> planning".
>>> >
>>> > Early drafts of the letter did ask for actual integration and even
>>> > activation, but I did not sign any of those early drafts. It was not
>>> > until the language was weakened to be about priorities and planning
>>> (and
>>> > to be a "respectful ask" rather some sort of demand) that I signed on=
.
>>> >
>>> >
>>> > The letter is concise but unfortunately I think Matt is correct that =
it
>>> > offers a broad range of interpretations, even among the signers.
>>> >
>>> >
>>>
>>> --
>>> You received this message because you are subscribed to the Google
>>> Groups "Bitcoin Development Mailing List" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to bitcoindev+unsubscribe@googlegroups.com.
>>> To view this discussion visit
>>> https://groups.google.com/d/msgid/bitcoindev/f8b37a59-0897-40df-a08e-78=
12c806a716%40mattcorallo.com
>>> .
>>>
>> --
>> You received this message because you are subscribed to the Google Group=
s
>> "Bitcoin Development Mailing List" group.
>> To unsubscribe from this group and stop receiving emails from it, send a=
n
>> email to bitcoindev+unsubscribe@googlegroups.com.
>> To view this discussion visit
>> https://groups.google.com/d/msgid/bitcoindev/CADL_X_fxwKLdst9tYQqabUsJgu=
47xhCbwpmyq97ZB-SLWQC9Xw%40mail.gmail.com
>> .
>>
>>
>> --
> You received this message because you are subscribed to the Google Groups
> "Bitcoin Development Mailing List" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to bitcoindev+unsubscribe@googlegroups.com.
> To view this discussion visit
> https://groups.google.com/d/msgid/bitcoindev/CADL_X_faQhCGS78y0Nggm_h%3Dx=
_cEtshhbrZDDhQ%3DFEgbDXkc-Q%40mail.gmail.com
> <https://groups.google.com/d/msgid/bitcoindev/CADL_X_faQhCGS78y0Nggm_h%3D=
x_cEtshhbrZDDhQ%3DFEgbDXkc-Q%40mail.gmail.com?utm_medium=3Demail&utm_source=
=3Dfooter>
> .
>

--=20
You received this message because you are subscribed to the Google Groups "=
Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/=
CAAS2fgSo%3DpdRhj%3DMkRDObXm5GtKpP3R5T4yck_pwBpn3_72f5Q%40mail.gmail.com.

--000000000000ed9d8b06378a57a7
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>I&#39;m struggling to figure out what kind of useful =
&#39;vault&#39; could be constructed from CTV that isn&#39;t equivalent=C2=
=A0to &quot;presign a transaction that sweeps your funds to an emergency ad=
dress&quot;.=C2=A0 Can someone clue me in?</div><div><br></div><div>It migh=
t be helpful to point to examples of where similar techniques are used in o=
ther blockchains that=C2=A0already=C2=A0facilitate their construction.=C2=
=A0 This isn&#39;t bitcoin-twitter,=C2=A0 it&#39;s permissible=C2=A0to obse=
rve some other system being used in useful ways...</div><div><br></div><div=
><br></div><div><br></div><div><br></div></div><br><div class=3D"gmail_quot=
e gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Sat, Jun =
14, 2025 at 2:08=E2=80=AFPM Jameson Lopp &lt;<a href=3D"mailto:jameson.lopp=
@gmail.com">jameson.lopp@gmail.com</a>&gt; wrote:<br></div><blockquote clas=
s=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid r=
gb(204,204,204);padding-left:1ex"><div dir=3D"ltr">Casa (and many other com=
panies focused on custody products) would love to see vaulting functionalit=
y. I don&#39;t think any of us are too hung up on the details of the partic=
ular implementation - we would rather have a &quot;good&quot; tool than not=
 have any tool because consensus has not been achieved for a &quot;perfect&=
quot; solution.<div><br></div><div>What is the problem that makes vaults de=
sirable? It&#39;s frankly because there&#39;s no such thing as perfect secu=
rity. Even if one designs an architecture that is nearly perfectly secure a=
gainst external threats, the issue of internal threats (such as oneself, vi=
a social engineering) will remain. The ability to require high value funds =
to sit in a &quot;quarantine / cooldown&quot; address for some period of ti=
me before they can be sent to an arbitrary address enables additional secur=
ity measures a la watchtowers to be designed. Being your own bank is still =
an incredibly scary proposition because it&#39;s quite difficult to design =
custody solutions that tolerate failures without leading to catastrophic lo=
ss. The more tools that custody application engineers have available to the=
m, the more guardrails we can build into wallet software, and thus hopefull=
y the more comfortable we can make the general public with the idea of taki=
ng on the responsibility of self custody.</div><div><br></div><div>To be cl=
ear, I&#39;m not aware of CSFS improving the vaulting functionality already=
 available via CTV. As far as I can tell, CSFS is one of the least controve=
rsial opcodes proposed in a long time and just seems to be an all-around wi=
n with no risks / trade-offs, so why not bundle it in?</div><div><br></div>=
<div>I&#39;m not sure how to parse Antoine&#39;s claim that CTV+CSFS doesn&=
#39;t enable vaults given that there has already been a CTV vault client pr=
oof of concept for 3 years: <a href=3D"https://github.com/jamesob/simple-ct=
v-vault" target=3D"_blank">https://github.com/jamesob/simple-ctv-vault</a><=
/div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_a=
ttr">On Fri, Jun 13, 2025 at 9:07=E2=80=AFAM Antoine Poinsot &lt;<a href=3D=
"mailto:darosior@protonmail.com" target=3D"_blank">darosior@protonmail.com<=
/a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0=
px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><=
div style=3D"font-family:Arial,sans-serif;font-size:14px">Jameson,</div><di=
v style=3D"font-family:Arial,sans-serif;font-size:14px"><br></div><div styl=
e=3D"font-family:Arial,sans-serif;font-size:14px">Thanks for sharing. Altho=
ugh i grew more skeptical of the reactive security model of vaults as i imp=
lemented them in practice for real users, i can appreciate people&#39;s mil=
eage may vary.</div><div style=3D"font-family:Arial,sans-serif;font-size:14=
px"><br></div><div style=3D"font-family:Arial,sans-serif;font-size:14px">Th=
at said, consensus-enforced vaults require a mechanism to forward any amoun=
t received on a script A to a pre-committed script B. CTV+CSFS does not ena=
ble this, and a primitive that actually does (like CCV) is more controversi=
al because of its potency. I see the CTV+CSFS bundle as maximizing &quot;ba=
ng for your buck&quot; in terms of capabilities enabled compared to the acc=
ompanying risk. If we do want vaults, then we need to get past the MEVil co=
ncerns and much more interesting primitives are actually on the table.<br><=
/div><div style=3D"font-family:Arial,sans-serif;font-size:14px"><br></div><=
div style=3D"font-family:Arial,sans-serif;font-size:14px">I also appreciate=
 that CTV is nice to have for CCV vaults, but a potential future use case t=
hat is not enabled by one proposal cannot be used to motivate said proposal=
.</div><div style=3D"font-family:Arial,sans-serif;font-size:14px"><br></div=
><div style=3D"font-family:Arial,sans-serif;font-size:14px">Best,<br>Antoin=
e Poinsot<br></div><div>
        On Friday, June 13th, 2025 at 7:15 AM, Jameson Lopp &lt;<a href=3D"=
mailto:jameson.lopp@gmail.com" target=3D"_blank">jameson.lopp@gmail.com</a>=
&gt; wrote:<br>
        <blockquote type=3D"cite">
            <div dir=3D"ltr">&gt; Unlike a generic &quot;We Want Things&quo=
t; sign-on letter, individual messages indicating desire to utilize feature=
s is way more compelling.<div><br></div><div>Then I submit my essay from 2 =
years ago (<a href=3D"https://blog.casa.io/why-bitcoin-needs-covenants/" re=
l=3D"noreferrer nofollow noopener" target=3D"_blank">https://blog.casa.io/w=
hy-bitcoin-needs-covenants/</a>) and will quote myself:</div><div><br></div=
><div>&quot;There are clearly a LOT of use cases that could potentially be =
unlocked with the right kind of covenant implementation. Personally, having=
 spent 8 years working on high security multi-signature wallets, I&#39;m mo=
st interested in vaults. I believe the value they offer is quite straightfo=
rward and is applicable to every single self-custody bitcoin user, regardle=
ss of what type of wallet they are running.&quot;</div><div><br></div><div>=
- Jameson</div></div><br><div class=3D"gmail_quote"><div class=3D"gmail_att=
r" dir=3D"ltr">On Thu, Jun 12, 2025 at 6:54=E2=80=AFPM Matt Corallo &lt;<a =
href=3D"mailto:lf-lists@mattcorallo.com" rel=3D"noreferrer nofollow noopene=
r" target=3D"_blank">lf-lists@mattcorallo.com</a>&gt; wrote:<br></div><bloc=
kquote style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,=
204);padding-left:1ex" class=3D"gmail_quote">To be fair to James, in my (lu=
ckily rather brief) experience with Bitcoin-consensus-letter-writing, <br>
its nearly impossible to forge a statement that everyone agrees to that is =
consistently interpreted.<br>
<br>
Matt<br>
<br>
On 6/12/25 3:51 PM, Andrew Poelstra wrote:<br>
&gt; Le Thu, Jun 12, 2025 at 02:38:13PM -0400, James O&#39;Beirne a =C3=A9c=
rit :<br>
&gt;&gt;<br>
&gt;&gt; As the person who coordinated the letter, I can say that this is n=
ot an<br>
&gt;&gt; accurate characterization of the signers&#39; intent. Everyone who=
 signed<br>
&gt;&gt; explicitly wants to see the imminent review, integration, and acti=
vation<br>
&gt;&gt; planning for CTV+CSFS specifically. The letter is intentionally co=
ncise to<br>
&gt;&gt; make sure there are no misunderstandings about that.<br>
&gt;&gt;<br>
&gt;&gt; I spoke to each person on the original list of signatories who eit=
her did<br>
&gt;&gt; (or didn&#39;t) sign and this was made very clear. Some people did=
n&#39;t sign as a<br>
&gt;&gt; result of what the letter says.<br>
&gt;&gt;<br>
&gt; <br>
&gt; The letter asks Core to &quot;prioritize the review and integration&qu=
ot; on an<br>
&gt; accelerated timeline, and that this will &quot;allow&quot; for &quot;a=
ctivation planning&quot;.<br>
&gt; <br>
&gt; Early drafts of the letter did ask for actual integration and even<br>
&gt; activation, but I did not sign any of those early drafts. It was not<b=
r>
&gt; until the language was weakened to be about priorities and planning (a=
nd<br>
&gt; to be a &quot;respectful ask&quot; rather some sort of demand) that I =
signed on.<br>
&gt; <br>
&gt; <br>
&gt; The letter is concise but unfortunately I think Matt is correct that i=
t<br>
&gt; offers a broad range of interpretations, even among the signers.<br>
&gt; <br>
&gt; <br>
<br>
-- <br>
You received this message because you are subscribed to the Google Groups &=
quot;Bitcoin Development Mailing List&quot; group.<br>
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:bitcoindev%2Bunsubscribe@googlegroups.com" rel=3D=
"noreferrer nofollow noopener" target=3D"_blank">bitcoindev+unsubscribe@goo=
glegroups.com</a>.<br>
To view this discussion visit <a rel=3D"noreferrer nofollow noopener" href=
=3D"https://groups.google.com/d/msgid/bitcoindev/f8b37a59-0897-40df-a08e-78=
12c806a716%40mattcorallo.com" target=3D"_blank">https://groups.google.com/d=
/msgid/bitcoindev/f8b37a59-0897-40df-a08e-7812c806a716%40mattcorallo.com</a=
>.<br>
</blockquote></div>

<p></p>

-- <br>
You received this message because you are subscribed to the Google Groups &=
quot;Bitcoin Development Mailing List&quot; group.<br>
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:bitcoindev+unsubscribe@googlegroups.com" rel=3D"n=
oreferrer nofollow noopener" target=3D"_blank">bitcoindev+unsubscribe@googl=
egroups.com</a>.<br>
To view this discussion visit <a href=3D"https://groups.google.com/d/msgid/=
bitcoindev/CADL_X_fxwKLdst9tYQqabUsJgu47xhCbwpmyq97ZB-SLWQC9Xw%40mail.gmail=
.com" rel=3D"noreferrer nofollow noopener" target=3D"_blank">https://groups=
.google.com/d/msgid/bitcoindev/CADL_X_fxwKLdst9tYQqabUsJgu47xhCbwpmyq97ZB-S=
LWQC9Xw%40mail.gmail.com</a>.<br>

        </blockquote><br>
    </div></blockquote></div>

<p></p>

-- <br>
You received this message because you are subscribed to the Google Groups &=
quot;Bitcoin Development Mailing List&quot; group.<br>
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:bitcoindev+unsubscribe@googlegroups.com" target=
=3D"_blank">bitcoindev+unsubscribe@googlegroups.com</a>.<br>
To view this discussion visit <a href=3D"https://groups.google.com/d/msgid/=
bitcoindev/CADL_X_faQhCGS78y0Nggm_h%3Dx_cEtshhbrZDDhQ%3DFEgbDXkc-Q%40mail.g=
mail.com?utm_medium=3Demail&amp;utm_source=3Dfooter" target=3D"_blank">http=
s://groups.google.com/d/msgid/bitcoindev/CADL_X_faQhCGS78y0Nggm_h%3Dx_cEtsh=
hbrZDDhQ%3DFEgbDXkc-Q%40mail.gmail.com</a>.<br>
</blockquote></div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;Bitcoin Development Mailing List&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:bitcoindev+unsubscribe@googlegroups.com">bitcoind=
ev+unsubscribe@googlegroups.com</a>.<br />
To view this discussion visit <a href=3D"https://groups.google.com/d/msgid/=
bitcoindev/CAAS2fgSo%3DpdRhj%3DMkRDObXm5GtKpP3R5T4yck_pwBpn3_72f5Q%40mail.g=
mail.com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google.com/=
d/msgid/bitcoindev/CAAS2fgSo%3DpdRhj%3DMkRDObXm5GtKpP3R5T4yck_pwBpn3_72f5Q%=
40mail.gmail.com</a>.<br />

--000000000000ed9d8b06378a57a7--