Pearl · Rotating Savings Club

Pearl Circle

N members put in C PRL a round, for N rounds. Each round one member takes the whole pot — the payout order is drawn by a commit-reveal lottery nobody can game, and every pot sits in a Taproot escrow with a winner-claim leaf and an m-of-n timeout-refund leaf. Pure Taproot, no smart contracts, keys never leave this page.

Found the circle

Define the members and the money. Each member is a bech32m prl1…/tprl1… address, a 64-hex x-only key, or a BIP-39 mnemonic (converted locally to its key). One line per member: Name | address-or-key-or-mnemonic

Commit-reveal lottery

Each member generates a random 32-byte secret and publishes sha256(secret). Once every commitment is public, secrets are revealed and the payout order is computed deterministically — late reveals cannot change anyone else's odds because every commitment was already locked in.

Publish commitments

Send every member's commitment to the group before anyone reveals. Paste the published set here to lock the draw:

Reveal

After all commitments are public, each member reveals their secret. Paste the reveals here:

Fund the rounds

Each round's pot address is a Taproot escrow: the winner's claim leaf plus an m-of-n timeout refund leaf under a NUMS internal key (no keypath backdoor). Every member sends exactly the contribution to each round address.

Verify funding on-chain

Reads each round address from Blockbook (third-party — can lag). A full pot means the round is claimable by its winner.

Claim & refund

The round winner claims the whole pot through the claim leaf. If a round stalls, any m members sign one refund template through the timeout leaf.

Winner claim

Timeout refund (m-of-n)

Track the circle

Paste a descriptor (and the payout order, if drawn) to re-derive every round address and classify it against Blockbook.