Bitcoin PIPEs version 2 can enforce binary covenants such as OP_VAULT or OP_CHECKSIGFROMSTACK