Honest limits — read before any real PRL moves
- "Goal met" is a social rule, not a cryptographic one. The release leaf is spendable the moment the recipient and the creator both sign — even before the goal is reached, even minutes after launch. This page's Release tab refuses to build below the goal, but nothing on-chain enforces that.
- The creator can refuse after the goal is met. Release needs the creator's signature too. If the creator withholds it, funds stay locked until the deadline — then every backer can refund unilaterally.
- Every backer keeps a unilateral post-deadline refund. After the tide turns (chain height ≥ deadline), any backer can take their pledge back alone with their own key. Nobody can stop a refund, and nobody needs permission.
- Descriptors have no checksum. A single flipped character can silently describe a different campaign. Always pair a descriptor with its fingerprint (shown on every card) — the verifier refuses loudly on any mismatch.
- Needs live Blockbook + real funds for the real thing. Funding scans, chain height, fee estimates and broadcast all go through the Blockbook endpoint you configure. No real campaigns were funded in testing — the cryptography is real; the mainnet miles are not.
- Secrets stay in this page. Keys you paste are kept in page memory only and wiped with the lock button. Verify every address and amount out of band before funding.
Launch a campaign provision the ship
Define the voyage: who receives the provisions (recipient), how much makes her fully provisioned (goal), and when the tide turns (deadline height). You sign as creator — your key co-signs every release.
Campaign manifest
Pledge load provisions aboard
Paste the campaign manifest. You get a personal pledge address — a Taproot output only you can refund and only recipient+creator can release. Fund it from your wallet afterwards; this page never moves funds on this step.
Your pledge berth
Track watch the harbor
Load the manifest and every backer's pledge descriptor, then scan the chain. Totals, backer count, progress toward fully-provisioned, and the countdown to the tide turning — all from GET-only Blockbook reads.
| Pledge address | Backer key | Funded |
|---|
Release sail the provisions out
Sweep funded pledges to the recipient in one transaction. Both the recipient and the creator sign — signatures are collected as JSON and every one is re-verified on import. This tab builds a release only when the scanned total meets the goal (a UI rule, not a chain rule).
| Pledge address | UTXO | Value |
|---|
Unsigned bundle copy to the co-signer, or keep signing here
Refund take your provisions home
After the tide turns, any backer reclaims their pledge alone — one signature, no permission needed. The refund pays to your own backer key; there is no destination to get wrong. Before the deadline, this tab refuses loudly.