TYPE 0x0706 · COMPOUND FAMILY

TIMELOCKED_MULTISIG

M-of-N threshold signature verification combined with a relative timelock (CSV) in a single block. Collapses the common MULTISIG + CSV two-block pattern for time-delayed multi-party authorization.

Compound Non-Invertible

Ladder Diagram

Fields

Field	Data Type	Size	Side	Description
threshold	NUMERIC	1-4 B	Conditions	Required number of valid signatures (M)
timelock	NUMERIC	1-4 B	Conditions	Relative timelock in blocks (BIP 68 sequence value)
scheme	SCHEME	1 B	Conditions	Signature scheme selector (Schnorr, ECDSA, or PQ)
pubkey[0..N]	PUBKEY	32-33 B each	Witness	N public keys (each verified against Merkle leaf via merkle_pub_key)
signature[0..M]	SIGNATURE	64-65 B each	Witness	M valid signatures (empty sigs for non-participating keys)

Public keys folded into Merkle leaf via merkle_pub_key (PubkeyCountForBlock = N). No key fields in conditions.

Evaluation Logic

1. For each key: verify witness PUBKEY[i] against Merkle leaf (merkle_pub_key). If any mismatch → UNSATISFIED

2. Count valid SIGNATURE verifications. Non-empty sigs checked against corresponding PUBKEY.

3. If valid count < threshold → UNSATISFIED

4. Verify CheckSequence(timelock). If fails → UNSATISFIED

5. Threshold met AND timelock elapsed → SATISFIED

Return Values

Condition	Result
Missing required fields	ERROR
Threshold M = 0 or M > N	ERROR
Merkle leaf verification fails for any key	UNSATISFIED
Fewer than M valid signatures	UNSATISFIED
CSV sequence check fails	UNSATISFIED
M+ sigs valid AND timelock elapsed	SATISFIED

JSON Wire Format

Conditions (scriptPubKey)

{
  "type": "TIMELOCKED_MULTISIG",
  "inverted": false,
  "fields": [
    { "type": "PUBKEY", "hex": "02abc1...33 bytes" },
    { "type": "PUBKEY", "hex": "03def2...33 bytes" },
    { "type": "PUBKEY", "hex": "02789a...33 bytes" },
    { "type": "NUMERIC", "value": 2 },
    { "type": "NUMERIC", "value": 144 },
    { "type": "SCHEME", "value": 1 }
  ]
}

Use Cases

Lightning Penalty Branches

Revocation paths in commitment transactions require a 2-of-2 multisig with a CSV delay. TIMELOCKED_MULTISIG encodes this in one block, saving wire overhead across every commitment transaction update.

Vault Recovery with Cooling Period

2-of-3 recovery multisig with a mandatory 1008-block (1 week) delay. Prevents immediate fund extraction even with two compromised keys, giving the vault owner time to respond.

Corporate Treasury Governance

3-of-5 board approval with a 24-hour cooling period before funds move. Combines multi-party authorization with temporal safety in a single block.

← CLTV_SIG EPOCH_GATE →