waxwing on Nostr: Thanks, this is a cool project! I left an Issue on the repo, but it's a technical ...

Thanks, this is a cool project! I left an Issue on the repo, but it's a technical point so leaving that aside for now - btw you write "suitable for anonymous voting" under SAG but that application requires linkability (otherwise repeated votes etc.). On the other hand, a distinction that I think *is* very interesting but won't occur to people immediately is, the difference between plain vanilla LSAG and Back-LSAG: with the latter, the key image is fixed for ever, for a given pubkey, which means if there is a "only use once" rule applied for say 10 different signing contexts (maybe, 10 different votes), the vote between each of the 10 use cases can be linked. Obviously that's not what you usually want. But for a cryptocurrency usage, it's exactly what you want: only one key image across every ring you'd ever use this key in (to prevent *global* double spend). The non-Back LSAG is the other way: the key image depends on my key, but also on the entire keyset, so it's different every time I ring-sign over a different keyset.