Hmm, an interesting perspective. First, to be clear, most of these proposals are "self-verifying" so to speak, so the question doesn't arise (i.e. proof of burn, proof of work and aut-ct). Specifically for a payment though, like ecash, I imagined it as "user has N entry point relays, relays talk to ...

How about backing Nostr events (or pubkeys) with timelocked fidelity bonds as an alternative/addition to proof-of-burn? This seems to mitigate the perverse incentive you mention at the end of your paper: > "Interestingly, this proposal creates an incentive for Bitcoin miners to spam unprotected No...