03:45:07 milestone: bare-bones unit test of seraphis tx spending legacy inputs https://github.com/UkoeHB/monero/blob/21147bd5af4663f77f1efec58525703c8cab4097/tests/unit_tests/seraphis.cpp#L1130 09:52:43 "milestone: bare-bones unit..." <- Awesome! 13:03:13 Hello guys, I would like to share my new CCS. I'm pretty sure that it is something needed and this proposal looks much less scary to me than the moneroinflation when I didnt know much about the technicalities of Monero. Therefore I'm pretty sure I can do it and adapt if necessary to reach the expected goals. Please give me your thumbs up if you support it and feel free to share your thoughts too. Thank you very much! 13:11:46 https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/344 13:35:19 Correct me if I am wrong, but as I understand Monero uses RingCT to prove that the sum of the referenced outputs is equal to the sum of the current inputs (and hence that you are not spending more than what you have) and then uses range proofs to prove that all referenced outputs are positive (say that the limit is 2^{64}, then we prove that each outputs lies between [0,2^{64}-1]). Combining both we obtain that the sum of the 13:35:19 outputs equal the sum of the inputs and that each element of this sum is positive 13:36:47 Am I right? 13:41:58 wimet[m]: yes 13:45:40 The problem that I see is that there is not a correspondence between referenced outputs and inputs, right? So I could have as outputs 4,3,5 and inputs 6,5,1 and checks would pass anyways 13:46:10 Modulo fee, yes. 13:46:57 wimet[m]: the input proofs show that referenced outputs -> pseudo-output commitments by a mask on G 13:47:22 so that amounts are conserved 13:49:11 I do not understand the concern. Why would order matter ? 13:49:31 order ? 13:50:08 I understood the question to be about order. If it's not, then I understand even less... 13:50:19 Nevermind, not important anyway. 13:50:23 UkoeHB: That's right, thanks! 13:51:08 grumblemobile: It's not about the order but about the outputs being differents than the inputs but still adding up to the same value 13:52:19 Wimet: If I understand you correctly, that's a feature, not a bug. 13:52:36 A feature Monero shares with all currencies: divisibility. 13:52:48 OK. This is about not "splitting" coins, like in the real world. 13:52:53 Or merging. 13:53:23 If you could not split/merge, you wouldn't need range proofs in the first place. 13:53:40 It'd make fees... very hard too. 13:54:30 he is asking about how ring members and pseudo-output commitments are connected so that amounts properly travel from inputs to outputs