Dmitry Petukhov

> I was thinking of adding some extra data for a label which would also be signed, that way Trezor could say "Are you sure you want to pay Cindy?"...

> m/2042083607'/959190427'/1400854130'/990526201' (Magic number, randomly picked only for low likelyhood of overlapping). Why not use `174'` as the root for this path, using the number of this BIP, in accordance...

> Since this signature is really just for the offline signer to prove to itself that it has approved these keys for use in outputs, I think it would be...

> I would much rather this be more generic with the use of miniscript and output descriptors With pre-defined set of scripts in the signer configuration, the signer can process...

The idea is that to authorize a specific script, you don't need to specify full semantics of the script, you only need the positions of the pubkeys and the values...

`m=0` can mean that there's a script template after the signature. `m=1` can mean that the script is standard single-sig (and no data after the signature) `1 < m

Putting the script template after a signature will mean certain duplication (duplicating the pubkeys of xpubs), and also would prevent having different scripts with the same xpub set, within one...

> a way to denote pubkey sorting for a simple byte-level-replace template presented above, bip67-style pubkey sorting is not applicable - in the general case, the script can have sorted...

> The servers actually work by spending a fixed budget Could it be possible to temporarily increase this budget by sending a certain sum (can call it a "donation", if...

Does the third point mean that the encoding of blinded outputs (value commitments) will be different after HF, so a covenant that puts restriction on blinded outputs (with deterministic random)...