Subject: Re: [bitcoin-dev] Graftroot: Private and efficient surrogate scripts under the taproot assumption

From: Ryan Grant <[email-masked]>
Date: Mon, 5 Feb 2018 10:56:23 -0500

Am I reading correctly that this allows unilateral key rotation (to a
previously unknown key), without invalidating the interests of other
parties in the existing multisig (or even requiring any on-chain
transaction), at the cost of storing the signed delegation?