Yeah but that's the easy mode with broken privacy.
Discussion
I was just proving the math worked. Didn’t get as far as working on privacy implications. Could easily be addressed by a wallet by breaking an amount into the sum of two random components, etc. Anyway, very keen to see this idea is still alive.