The Soulshell BTC+ Architecture Blueprint

The Soulshell BTC+ framework is a comprehensive modular Layer 2 architecture that unlocks Bitcoin's full programmability, sub-microsecond off-chain computation, and autonomous AI agent integration without altering Bitcoin's base-layer consensus rules. Explore the interactive modules below to test cryptographic key tweaks, state channel memory limits, BitVM dispute resolution, and agent access controls.

Watchtower Overhead

O(1) Constant

Eliminates Toxic Waste vs O(N)

DLC Execution

~5 μs

Tapscript vs ~100μs Adaptor

BitVM2 Dispute

3 On-Chain Txs

Claim → Challenge → Disprove

Agent Security

ABAC + DID

Prevents Confused Deputy

Interactive Architectural Stack

Click a layer to inspect cryptographic mechanisms

Layer 4 • Application & Governance

Autonomous Agent Overlay (ABAC & Ephemeral DIDs)

LLM Transaction Routing, Dynamic Trust Scoring, SEAgent Guardrails

Interactive

Layer 3 • Turing-Complete Compute

Optimistic Execution Engines (BitVM2 & BitVMX)

Groth16 SNARK Verifier, RISC-V Trace Hash Chains, 1-of-N Honesty

BitVM Engine

Layer 2 • State & Oracle Protocol

LN-Symmetry (Eltoo) & Discreet Log Contracts (DLC)

SIGHASH_ANYPREVOUT (APO), PTLCs, Threshold Oracles, Covenants

State Channels

Layer 1 Primitive • Cryptographic Base

Taproot (BIP 341/342) & MuSig2 (BIP 327)

Schnorr Key Aggregation, MAST Script Trees, X-Only Public Keys

Crypto Base

Base Settlement • Bitcoin L1

Bitcoin Blockchain (secp256k1 & Consensus Rules)

UTXO Model, Block Size Limits (4MB), Stack Limits (1000 items, 520 bytes)

Settlement

◆ Layer Deep Dive

Autonomous Agent Overlay

Secures automated LLM agents against prompt injection and privilege escalation. Utilizes SEAgent framework, dynamic trust scoring, and task-bound ephemeral Decentralized Identifiers (DIDs).

Target Vulnerability: Confused Deputy Attack

Authorization Model: ABAC (Attribute-Based)

Identity Lifespan: Ephemeral (Task-Specific)

Monitoring Engine: Information Flow Graph

Cryptographic Foundations: Taproot MAST & MuSig2

Taproot (BIP 341/342) merges pay-to-pubkey and pay-to-scripthash conditions using Merkleized Abstract Syntax Trees (MAST). Combined with MuSig2 (BIP 327), multi-party key aggregation compresses $n$-of-$n$ signers into a single, indistinguishable 64-byte Schnorr signature $P_2 = P + \text{Hash}(P \parallel h)G$.

Interactive Taproot Tweak Calculator

BIP 341 Math

Select Spending Path:

MAST Leaf Script Index ($m$): Leaf #2 (Depth 3)

Control Block Size: 129 bytes (33 + 32 × 3)

Internal Key (P): 0x02a1b2c3...99ff

Merkle Root (h): 0x88f1d3...e421

Tweak t: hashTapTweak(P || h)

Output Key (P₂): P + t × G (Valid BIP 340)

Privacy Guarantee: Outside observers cannot distinguish key path spends from multi-party script tree spends until spent.

MuSig2 Schnorr Key Aggregator

BIP 327

Number of Signers ($u$): 3 Signers

Partial Signature Scalar Calculation:

s₁ = (k₁ + b·k₂ + e·a·d) mod n

Aggregated Signature: s = ∑ s₁ + e·g·t₁₁ mod n (Single 64-byte Schnorr on-chain!)

State Channels: LN-Penalty vs LN-Symmetry (Eltoo)

Legacy Lightning Network channels rely on penalty-based revocation (RSMC & HTLC), forcing watchtowers to store every historical key ($O(N)$ toxic waste). LN-Symmetry leverages BIP 118 SIGHASH_ANYPREVOUT (APO) to enable "latest-wins" floating updates, reducing watchtower storage to $O(1)$ constant space.

Watchtower Storage Overhead Simulator

LN-Penalty O(N) LN-Symmetry O(1)

Simulated Off-Chain Updates ($N$): 500 Updates

Legacy LN-Penalty

Stored Revocation Keys: 500 keys

High risk of "Toxic Waste" catastrophic loss on backup failure.

Soulshell LN-Symmetry

Stored State Updates: 1 state (Latest)

Floating APO signature rebinds directly to any earlier output.

APO Rebinding Mechanism

State #10 Broadcast (Outdated)

Attacker attempts to settle channel on outdated state N=10.

↓

APO Rebind Trigger

Honest node produces State #50 signed with SIGHASH_ANYPREVOUT. Signature drops sha_prevouts check.

↓

State #50 Replaces State #10

State #50 spends directly from State #10 on-chain output before final settlement timelock expires.

Covenant Integration: Combines with BIP 119 (CTV) & BIP 348 (CSFS) for point time-locked contracts (PTLCs) and non-interactive channel factories.

Trustless Oracles & Discreet Log Contracts (DLCs)

DLCs enable privacy-preserving, conditional financial execution based on real-world events. By leveraging Taproot and MuSig2, Soulshell replaces heavy elliptic curve adaptor multiplications with deterministic Tapscript hash evaluations, dropping computation time per Contract Execution Transaction (CET) from hundreds of microseconds to ~5 microseconds.

DLC CET Compute Benchmark

Microsecond Scale

Financial Outcome Precision (Bits): 20 Bits (1,048,576 CETs)

Tapscript Hash Evaluation Optimization:

Moving conditional payout branches directly into Taproot tree leaves eliminates combinatorial CPU lag, allowing low-power mobile agents to handle high-frequency derivative contracts.

Threshold Oracle & Median Evaluation ($k$-of-$n$)

Select Consensus Scheme:

Attestation Point Formula:

S₁ = R + Hash(R || X || outcome₁) · X

R = Oracle Nonce Point, X = Oracle Public Key

Active Combinatorial CET Sets: 3 Pairs [(A,B), (A,C), (B,C)]

Blind Oracle Guarantee:

Oracles publish raw signature scalars without knowing which participants or financial contracts rely on their feeds. Total censorship resistance is maintained.

Continuous Data Feeds: Supports median evaluations over continuous price feeds to insulate against rogue outliers.

Turing-Complete Optimistic Verification: BitVM Ecosystem

BitVM brings arbitrary compute (EVMs, zk-SNARK verifiers, RISC-V) to Bitcoin off-chain, backed by 1-of-N optimistic fraud proofs on-chain. BitVM2 compresses massive 1.2 GB Groth16 verifier scripts into sub-4MB Taproot chunks, reducing dispute resolution from 70+ interactive steps to just 3 on-chain transactions.

BitVM Architecture On-Chain Complexity

Dispute Transaction Count

BitVM1 (Legacy)

~70 Dispute Txs

BitVM2 (SNARK)

3 On-Chain Txs

BitVMX (RISC-V)

n-Ary Search

BitVM2 3-Step Dispute Game

1. Claim Transaction Operator

Operator posts financial stake and commits to SNARK verifier output on-chain.

2. Challenge Transaction Challenger

Challenger detects state anomaly, posts fee bond, and demands intermediate proof revelation.

3. Assert / Disprove On-Chain Exec

Single sub-4MB Tapscript chunk executes on-chain. Invalid claim slashes operator stake.

BitVM2 Script Chunking:

Full Verifier Size: 1.2 GB

Max Chunk Size: < 4 MB (Fits L1 Block)

Autonomous AI Agent Security: Preventing the Confused Deputy

As autonomous LLM agents manage Lightning liquidity, watchtowers, and DLC execution, indirect prompt injection and RAG poisoning create "Confused Deputy" vulnerabilities. Soulshell enforces Mandatory Access Control (MAC), Attribute-Based Access Control (ABAC), dynamic trust scoring, and task-bound ephemeral DIDs.

Interactive Confused Deputy Threat Simulator

IAM Workbench

Select Attack Vector:

Soulshell ABAC Policy Engine:

Protected by ABAC Policy BLOCKED

Malicious prompt payload detected in RAG context. Ephemeral DID lacks key export attributes. Transaction execution halted automatically.

Agent Dynamic Trust Score:

92 / 100

Soulshell Agent IAM Architecture

1. Ephemeral Task-Bound DIDs

Agents generate short-lived Decentralized Identifiers per transaction session, strictly bounding blast radius if an individual session is compromised.

2. Information Flow Graphs

Directed graphs monitor Agent-to-Agent (A2A) and Agent-to-Tool data movement, ensuring untrusted RAG inputs cannot touch Taproot private keys.

3. Continuous Micro-Attestation

High-value transactions (BitVM challenges or state channel settlements) require multi-attribute hardware enclave signatures before L1 broadcast.

Security Rule: Never trust probabilistic LLM reasoning with deterministic cryptographic spending authority.

Technical Reference & Standards Spec Sheet

Quick-reference matrix of Bitcoin Improvement Proposals (BIPs), script limits, cryptographic primitives, and execution boundaries defined in the Soulshell BTC+ white paper.

Standard / BIP	Component Name	Technical Primitive	Primary Role in Soulshell BTC+
BIP 340	Schnorr Signatures	secp256k1 X-Only Pubkeys	Enables mathematical signature linearity and batch validation.
BIP 341 / 342	Taproot & Tapscript	MAST (Merkle Trees)	Combines P2PK and P2SH; conceals unexecuted contract branches.
BIP 327	MuSig2	Two-Round Multi-Sig	Aggregates N-of-N keys into a single standard 64-byte Schnorr signature.
BIP 118	SIGHASH_ANYPREVOUT	Floating Prevout Signature Hash	Powers LN-Symmetry (Eltoo), enabling O(1) watchtower state updates.
BIP 119 / 345	CTV & OP_VAULT	Covenants	Restricts spending outputs for non-interactive channels & vaults.
BitVM2	Groth16 Verifier	Zero-Knowledge SNARKs	Turing-complete optimistic computation with 3-step on-chain dispute.
BitVMX	CPU Execution Trace	RISC-V / MIPS Hash Chains	General-purpose compute dispute via n-ary state search.