Taproot (BIP341)

Taproot, defined in BIP341 and activated at block 709,632 in November 2021, is the soft fork that gave Bitcoin a new output type called Pay-to-Taproot (P2TR). It combines Schnorr signatures (BIP340) with Merkelized script trees so that a single 32-byte public key in an output can represent either one signer or an arbitrarily complex set of spending rules — and until the coins move, nobody can tell which. P2TR outputs are the ones behind bech32m addresses beginning bc1p.

Two ways to spend

Every P2TR output supports two paths. The key path is a plain Schnorr signature over the output's public key — indistinguishable on-chain from any single-signer payment, and the cheapest spend type Bitcoin offers. The script path reveals one branch of a hidden script tree, the script's inputs, and a control block proving that branch was committed into the output key. The construction works by "tweaking": the output key is the internal key plus a commitment to the Merkle root of the script tree, so the same 32 bytes simultaneously are a spendable key and commit to every fallback script. Crucially, only the branch actually used ever becomes public; every other condition — the recovery clause, the timeout path, the arbitration script — stays private forever. A wallet with elaborate contingency logic spends cooperatively via the key path and leaks nothing about what else it could have done.

Why it matters for sovereignty

Before Taproot, complex ownership was visible ownership: a multisig or vault script sat on-chain in recognizable form, marking those coins as interesting and costing more to spend. Taproot collapses the distinction — combined with key aggregation schemes like MuSig2, a 2-of-3 multisig whose participants cooperate produces one ordinary-looking Schnorr signature at single-sig cost. Privacy improves for everyone through herd effect: the more wallets default to P2TR, the less any single spend reveals. The honest trade-offs: script-path spends carry the control block and are heavier when a fallback must actually be exercised, and revealing a branch discloses that branch. Taproot also does its accounting in the SegWit witness, so for miners and node runners it changed nothing about how blocks validate economically — it changed what the transactions inside can quietly be.

What was built on it

Taproot is best understood as infrastructure. Tapscript (BIP342) modernized the scripting rules inside script-path branches. Lightning gained taproot channels, whose cooperative opens and closes blend into the ordinary payment crowd. Vault designs, inheritance schemes, and most active covenant proposals assume Taproot as the substrate. Even the controversial uses — inscriptions writing data into witness space — demonstrate the same fact from another angle: the upgrade made Bitcoin's script layer dramatically more expressive without loosening consensus. For a sovereign holder the practical takeaway is direct: P2TR lets you encode serious contingency planning — collaborative custody, timelocked recovery, degraded-key fallbacks — while presenting to the world as the plainest possible payment. Strong defaults for the watched, real depth for the prepared, built on the same elliptic-curve foundations covered in Bitcoin Script and the merkle root commitments that structure the script tree itself.

Adoption and the miner's-eye view

Taproot's activation was itself a study in Bitcoin governance: the Speedy Trial deployment asked miners to signal readiness in their blocks, locked in during mid-2021 with overwhelming signaling, and activated months later at block 709,632 — coordination without a trusted coordinator. Adoption since has been the slow, steady kind that matters: major wallets and exchanges added P2TR support over subsequent years, and taproot spends are now a routine share of on-chain activity. For miners, taproot transactions validate and mine like any others; the practical effects arrived indirectly, when witness-space inscriptions periodically flooded the fee market and lifted revenue per block. For a node runner, nothing changed except what the chain can quietly contain. That is the upgrade's real signature: years of preparation, an activation the network barely felt, and a script layer whose depth most observers still underestimate — conservative engineering doing radical work.