00:31:50 Hah that's a very good question @tevador 00:32:22 I haven't thought about that 00:32:51 How was it handled when RingCT was rolled out? 01:04:08 a seraphis enote can use ringct outputs as inputs, right? just as it can use seraphis enotes as inputs. for a time, could there be a blend of inputs allowed? 01:10:43 sorry, i think the proper phraseology would be "a seraphis tx can use ringct outputs as inputs" 03:02:04 Yes 05:21:36 There was no such issue with rct. A pre-rct output can be used as a rct output with a known mask. 05:22:15 And it looks like the same applies for seraphis, given hte few lines above ? 05:22:29 Can it also use pre-rct outputs the same way ? 05:25:57 moneromooo: that’s the plan 07:26:27 UkoeHB: CMIIW, but the Seraphis composition proof cannot be constructed for RingCT outputs due to a different key format, so you cannot have RingCT decoys when spending a Seraphis output 07:26:58 well, technically you can have RingCT decoys, but it's clear they are just decoys, so they are useless 07:30:24 tevador: I don't think we ever applied such an approach (e.g. the output pool was reset for RingCT) 07:30:30 And I think for Bulletproofs as well 07:34:25 Yes, a post-Seraphis TX input can be either CLSAG with all RingCT ring members or Seraphis with all Seraphis ring members. Outputs are always Seraphis outputs. 07:36:18 The point was that you cannot mix the decoys, so we need a new DSA for RingCT outputs that will be spent post-Seraphis. 07:53:07 Right 08:09:39 I *think* that is implicit for pre-rct. The pick is based on output index, so if there are very few new pre-rct outs, the picking automatically "skews" into the past. 08:16:20 I checked the code. We use a triangular distribution for pre-RCT outputs placed at the last existing output of the given value. 08:23:41 One option would be to use an approximate gamma tail distribution: https://www.johndcook.com/blog/2021/11/06/gamma-tail-estimate/