feat(t6): validate BTC↔BCH end-to-end + bonded M-of-N + wallet UX (ADR-0046)
"Bitcoin Cash as a better Lightning" (T6) and the BTC-IOU trust floor, validated
end-to-end on BCH chipnet + BTC signet with real coins.
- LN→T6 routing: a routed payment received into a T6 channel; one preimage settles
both chains (BCH board reveal -> BTC HTLC claim). Scripts: chipnet-ln-to-t6-routing,
btc-signet-ln-leg, btc-claim-htlc.
- T6c unilateral exit complete: honest CSV-delayed self-close (ELSE branch) added
alongside the penalty branch (btc-signet-honest-close).
- T4 real BTC↔BCH atomic swap: one hashlock over a signet P2WSH HTLC + chipnet
AtomicSwapHTLC; claim + refund (btc-bch-htlc-swap). Fixes btc-htlc.mjs bigint bug.
- Model-3 bonded M-of-N redemption: BondedSignerSlash.cash (equivocation -> slash) +
2-of-3 signet release; BTC enforces the threshold, BCH enforces the punishment
(chipnet-bonded-signer-test, btc-signet-mofn-release).
- T6-aware wallet UX: one-tap send/receive over the validated stack, every tap a real
on-chain BchChannelBoard update (t6-wallet-server + design/t6-wallet); fresh-provider
+ retry hardening for flaky-chipnet broadcasts.
- Docs: ADR-0046, spec §16, Observability-and-privacy companion (the auditability
property + the three-baseline privacy framing), complete-record/model-explainer/
tracker updates, snapshots 0177–0179.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
850afd651d