Skip to content
Plebum Dominium

08 · Plebum Dominium

2-of-3 spend path

Online unsigned PSBT → Tails Seed 1 → shutdown → Tails Seed 2 → broadcast.

Download PDF

Default path: two offline Tails sessions. Optional path after the key exists: sign on hardware wallets you imported the airgapped seed into. Either way, one seed per session, and two independent makers if hardware is in the quorum.

Step 1 — Build the spend (online watch-only)

  1. 01 · Open watch-only Sparrow. Recheck the receive history so you know this is the right wallet.
  2. 02 · Send tab: destination, amount, fee. Read every field against a written note.
  3. 03 · Finalize for signing. Export tx-unsigned.psbt to the data USB.

Step 2 — First signature (Tails session 1, or hardware A)

  1. 01 · Boot Tails, networking disabled. Do not unlock Persistent Storage. Launch verified Sparrow. Or unlock hardware wallet A that already holds Seed 1.
  2. 02 · Restore Seed 1 only (Tails) — or confirm Seed 1 is the only key on that device. Open tx-unsigned.psbt. Confirm fields. Sign.
  3. 03 · Export tx-partial-s1.psbt. Full shutdown of Tails, or unplug the hardware signer.

Step 3 — Second signature (Tails session 2, or hardware B)

  1. 01 · Fresh Tails boot, networking disabled. Do not unlock Persistent Storage. Restore Seed 2 only. Or unlock hardware wallet B from a different vendor.
  2. 02 · Open tx-partial-s1.psbt. Confirm the first signature and unchanged spend. Sign.
  3. 03 · Export tx-signed.psbt. Full shutdown.

Step 4 — Broadcast (online computer)

  1. 01 · Watch-only Sparrow: File → Open Transaction → fully signed file.
  2. 02 · Confirm fully signed and fields unchanged. Broadcast. Record the txid in the recovery workbook — not in this site.

If you export a key onto hardware

  • Generate the seed on airgapped Tails first. Import the finished 24 words. Do not let the device roll its own entropy for this stack.
  • Multi-vendor examples (not a ranking): Foundation Passport, Blockstream Jade, BitBox02, SeedSigner / Krux. Official shops only.
  • Two keys on two brands. Never three of the same box. A bricked vendor is one lost key — plates and geography still hold the wallet.
  • If Sparrow and Electrum disagree about the PSBT, stop. Do not sign. Test with a small amount first.