Draft the vault
Two leaves under a NUMS internal key (nobody's key — no keypath backdoor):
the owner leaf (<owner> CHECKSIG, spendable any time) and the
heir leaf (<unlock> CLTV DROP m-of-n CHECKSIGADD, spendable only at/after the unlock block).
Owner key
The owner reclaims at any time. Paste a 64-hex x-only pubkey, or derive one locally.
Generated wallets derive m/86'/808276'/0'/0/0 (Pearl BIP-86). The owner private key can also sign the reclaim on the Claim tab.
Heirs (1–5)
Each heir contributes an x-only pubkey. Heir keys are sorted lexicographically in the script, so the vault is canonical — the same descriptor always rebuilds the same address, byte for byte.
Threshold & unlock
Enter the absolute block height at/after which heirs may claim. Heirs are refused loudly before it.
Sealed vault
- Vault address
- Sealed commitment
- Descriptor
- Unlock block
- Owner leaf
- Heir leaf
- NUMS internal key
- Control blocks
Fund the vault
Send PRL to the vault address. Check its balance with a GET-only Blockbook lookup, or tally air-gapped UTXOs offline.
- Vault address
- Balance
- —
- QR
Air-gapped UTXO tally (offline)
One per line: txid:vout amount-PRL address. Nothing leaves your machine.
Claim fee preview
Exact vBytes for each claim path at your fee rate — no surprises when the day comes.
- Owner reclaim
- Heir claim
Watch the vault
Lifecycle at a glance: funded or empty, spent or sealed, and the countdown to the unlock block.
- Chain tip
- Unlock block
- Countdown
- Status
- Confirmed balance
- Recent txs
Manual countdown (offline)
No Blockbook? Paste the current chain tip height and the desk counts the blocks for you.
Claim
Two paths, one vault. Owner reclaim works at any height. Heir claim is refused — loudly, before any bytes are built — until the chain reaches the unlock block.
- Address
- Threshold
- Unlock
- Sealed
Owner reclaim
- Signed txid
- Fee
- Builder tip
- Signed hex
Heir claim
Heir signatures (64-hex Schnorr). Each heir signs the digest shown below with their own key — locally, or paste a pre-computed signature. Empty slots are non-signers.
Claim digest to sign:
- Signed txid
- Locktime
- Fee
- Signed hex
Verify
Standalone verifier. Paste a pearl-will:v1 descriptor and it re-derives everything — scripts, NUMS key, taptree, address — and rules PROVEN or NOT PROVEN. Trust the re-derivation, not the claim.