<k​ayabanerve:matrix.org> SyntheticBird: You can define every Monero TX as having a 2-of-2 ownership between an ECC key and a PQ key. Users can decide which is their actual key. You'd just need outputs to contain a PQ key and for the membership proof to additionally output a re-randomized PQ key.

<k​ayabanerve:matrix.org> That doesn't actually have benefits over the PQ migration scheme, it's just an option.

<k​ayabanerve:matrix.org> *a bad option which achieves indistinguishability as to what key type is used.