✓ Verified on BSV mainnet

Turing-complete Collatz covenant — full chain on-chain

A covenant on BSV mainnet executed the complete Collatz trajectory 27 → 1 over 111 sequential transactions. Each step's locking script forced the rule n' = n/2 if even else 3n+1 inside Bitcoin Script, and network consensus required an OP_RETURN with the memo "paiybit.com | collatz turing-complete covenant on BSV" on every single advance. None of this is after-the-fact annotation — the chain itself is the proof.

Starting n
27
Steps
111
Fee / step
3,000 sats
Total miner fees
333,000 sats
View all 111 on-chain transitions
Phase 1 — UI prototype

Collatz Channel

Two parties (Alice, Bob) take turns advancing n off-chain. Each step is a would-be signed transaction; nothing is broadcast. When n = 1 the channel settles. This phase simulates the protocol flow only — real signatures and the on-chain covenant come next.

LIVE on BSV mainnet

Run a real covenant step on BSV

One click funds and advances a real Collatz covenant on the BSV mainnet, from your in-app wallet (the pill). The network enforces the Collatz rule n' = 3n+1 (27 → 82) inside Bitcoin Script, and requires an OP_RETURN with the paiybit.com memo by consensus. Cost: ~3300 sats (covenant burns 3000 sats as miner fee, ~300 for funding-tx fee).

Pill balance sats
Current n
Steps
0
Next signer
Status
Idle
How it works: Each transition is determined by the rule n' = n/2 if even, 3n+1 if odd. Alice signs odd-index steps, Bob signs even-index steps — both parties must co-sign for the channel to advance. In Phase 2 these mock signatures become real secp256k1 signatures over the state tuple. In Phase 3 a sCrypt covenant on the funding output enforces the transition rule so a cheating party who broadcasts a stale state can be overridden.