On Tue, May 23, 2017 at 3:22 PM, Paul Sztorc wrote: > > If you haven't seen http://www.truthcoin.info/blog/drivechain/ , that is > probably the most human-readable description. > I guess I was looking for the detail you get in the code, but without having to read the code. My quick reading gives that the sidechain codes (critical hashes) are added when a coinbase is processed. Any coinbase output that has the form "OP_RETURN <32 byte push>" counts as a potential critical hash. When the block is processed, the key value pair (hash, block_height) is added to a hash map. The OP_BRIBE opcode checks that the given hash is in the hash map and replaces the top element on the stack with the pass/fail result. It doesn't even check that the height matches the current block, though there is a comment that that is a TODO. I agree with ZmnSCPxj, when updating a nop, you can't change the stack. It has to fail the script or do nothing. OP_BRIBE_VERIFY would cause the script to fail if the hash wasn't in the coinbase, or cause a script failure otherwise. Another concern is that you could have multiple bribes for the same chain in a single coinbase. That isn't fair and arguably what the sidechain miner is paying for is to get his hash exclusively into the block. I would suggest that the output is OP_RETURN Then add the rule that only the first hash with a particular sidechain id actually counts. This forces the miner to only accept the bribe from 1 miner for each sidechain for each block. If he tries to accept 2, then only the first one counts. OP_BRIBE_VERIFY could then operate as follows OP_BRIBE_VERIFY This causes the script to fail if does not match the block height, or is not the hash for the sidechain with , or there is no hash for that sidechain in the block's coinbase If you want reduce the number of drops, you could serialize the info into a single push. This has the advantage that a sidechain miner only has to pay if his block is accepted in the next bitcoin block. Since he is the only miner for that sidechain that gets into the main bitcoin block, he is pretty much guaranteed to form the longest chain. Without that rule, sidechain miners could end up having to pay even though it doesn't make their chain the longest. How are these transactions propagated over the network? For relaying, you could have the rule that the opcode passes as long as is near the current block height. Maybe require that they are in the future. They should be removed from the memory pool once the block height has arrived, so losing miners can re-spend those outputs. This opcode can be validated without needing to look at other blocks, which is good for validating historical blocks. I am still looking at the deposit/withdrawal code.