Thank you, that's an interesting application of OP_CTV.
Perhaps worth pointing out that this does not require OP_CTV but could also be enabled by other covenant constructions. For example, it seems like ANYPREVOUT-based covenants provide similar benefits. The script of the Taproot leaves could be set to <sig> <G> CHECKSIGVERIFY <CET_i> CHECKSIGVERIFY where <sig> is an ANYPREVOUTANYSCRIPT signature of the CET for public key P = G. When using nonce R = G, signature creation has negligible computational cost (s = 1 + H(R, P, m)). A downside compared to CTV is the additional overhead of 64 witness bytes (<sig>). _______________________________________________ bitcoin-dev mailing list bitcoin-dev@lists.linuxfoundation.org https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
