the post-quantum privacy chain (2025). state lives under recursive STARK proofs (Triton VM — hash-based, no trusted setup, no curves for Shor to unwind), and privacy comes from the mutator set: a cryptographic accumulator where additions are public but removals are unlinkable to them. the anonymity set is every output ever created — membership without rings, without decoys, without a shielded/transparent split
the lesson: accumulate, don't decoy. an accumulator gives the whole chain as the anonymity set and stays post-quantum while doing it. bbg carries this lineage directly — its block-level privacy builds on a mutator set over commitment and nullifier polynomials
privacy · privacy/monero · bbg