14:40:26 SyntheticBird: You can define every Monero TX as having a 2-of-2 ownership between an ECC key and a PQ key. Users can decide which is their actual key. You'd just need outputs to contain a PQ key and for the membership proof to additionally output a re-randomized PQ key. 14:41:31 That doesn't actually have benefits over the PQ migration scheme, it's just an option. 14:42:06 *a bad option which achieves indistinguishability as to what key type is used.