It's definitely tractable, though not trivial. I don't think you'll make this on you cellphone, bit with a powerful enough computer it's totally doable.

My two cents is that relay-enforced paywalled notes won't be too bad, specially for payd ones. Sure, no trust is better, but the incentives sounds just right to minimize trust here...