From 1a157a641837c90343fc8d191cb249430eaee222 Mon Sep 17 00:00:00 2001
From: pythcoiner <pythcoiner@proton.me>
Date: Wed, 15 Jul 2026 02:32:55 -0400
Subject: [PATCH] bip-138 saturate the decoy bucket at the count limit

---
 bip-0138.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/bip-0138.md b/bip-0138.md
index 81740452..c1baec9d 100644
--- a/bip-0138.md
+++ b/bip-0138.md
@@ -285,7 +285,9 @@ parsing.
 Encoders SHOULD append random decoy `INDIVIDUAL_SECRET` entries to hide the exact
 number of real decryption keys. The total count SHOULD be rounded up to the
 smallest bucket greater than or equal to the real count, starting at 5 and doubling
-for each following bucket: 5, 10, 20, and so on. Decoders do not distinguish real
+for each following bucket: 5, 10, 20, and so on. The bucket sequence saturates at
+the 255 `COUNT` limit: when the smallest fitting bucket would exceed 255, encoders
+SHOULD pad to 255 instead. Decoders do not distinguish real
 entries from decoys; they try each entry until one decrypts the payload.
 
 #### Encryption