HOW THE SIGNING PATHS WORK
Three ways through time.
This is the illustrative basic setup shown on the Reskey Pro page. Your setup can be tailored to your needs. The wallet descriptor records your wallet’s full rules: the chosen keys, the number of signatures required and the delays in Bitcoin blocks. The 2-of-2, 2-of-3 and 1-of-2 paths below are only one example.
01 · AVAILABLE IMMEDIATELY2-of-2
Normal collaborative signing
Your primary key and Reskey's separate key must both sign a normal transaction. One stolen, lost or misused key cannot satisfy this path by itself. Reskey is a co-signer; it is not a custodian with unilateral spending power.
Benefit: Two independently controlled signatures make a forced or unauthorized immediate transaction far harder: coercion, a compromised device or a software error affecting only one signer cannot satisfy the 2-of-2 path on its own. If a key becomes unusable instead, the delayed recovery paths can avert permanent loss—provided their separate keys, backups and descriptor survive.
02 · AFTER THE FIRST DELAY2-of-3
Recovery with another pair
The example has two separately controlled keys on your side and one Reskey key. Once this path matures, any two can sign. Your two keys allow spending without Reskey. If you lose one, the remaining key and Reskey can help with recovery.
Boundary: the delay does not restore a missing key. You can add more independently held co-signers of your choice to this delayed path and adjust the number of signatures required. Wallet-policy and signing-device limits still apply. This makes losing all your usable keys at once less likely when keys and backups are kept separately. Reskey alone is still insufficient in the illustrated 2-of-3 path.
03 · AFTER A LONGER DELAY1-of-2
Independent long-term exit
The illustrated final path allows either a recovery key you control or a separately held inheritance key to spend after the longer delay. Reskey's signature is not part of this path. It can provide a route for inheritance or an exit if the company is gone.
Boundary: you can also add more independent recovery signers to this path. Wallet-policy and signing-device limits still apply. A 1-of-N version reduces the chance that all keys for this recovery path are lost, but every listed key can spend alone once the delay matures. Separate custody and clear access instructions therefore matter as much as the timelock.