Inscribe on a rare sat
An inscription lives forever on the one sat it was revealed on. Marketplaces will sell you a rare sat out of their drawer to be born on; this bench uses one you already own. It reads your wallet for rare sats, lines your outputs up so the sat you choose is exactly where the commit begins, and asks your wallet to sign that transaction. The reveal we broadcast can pay nowhere but your own address.
How the sat is kept
Ordinal theory is first-in, first-out: the commit's inputs form one stream of sats and its outputs slice that stream in order. The rare sat's position in the stream is computed from the output's sat ranges, the sats before it go back to you as their own output, and the commit output begins on the rare sat itself. The reveal spends that output to your ordinals address, and the inscription is born on its first sat. If the two positions disagree by a single sat, no transaction is offered.
Every input is yours and your wallet signs under SIGHASH_ALL, so the transaction it shows you is the only one that can be broadcast. Our key signs only the reveal, whose script can pay only the address the plan named. Funding comes from your payment address and is checked sat by sat to hold nothing rare, so the plan never moves treasure it did not name.
Version one takes a rare sat in an output with no inscription and no runes; a rare riding in an inscribed bundle is cut out first with sat surgery. Files up to 390,000 bytes. The bench charges 2,000 sats as an output of the commit itself: paid only when it lands.