Taproot tree

The escrow uses a provably unspendable internal key, so every spend must reveal one of four expected leaves. Standard SIGHASH_ALL binds a signature to its specific escrow input and prevents replay against another vTXO.

k-of-n threshold

ArkadeOS MultisigTapscript uses + OP_CHECKSIGADD. Each juror or oracle keeps and signs with an individual key; the witness supplies at least k valid signatures plus the winning party’s signature.

SDK policy covenant

For human-mode dispute resolution, the funded tree contains a deterministic commitment placeholder. At dispute time, output introspection verifies replacement with the panel derived from registry data and a Bitcoin block hash. This is Ark Operator policy enforcement, not a Bitcoin-native covenant.