Interesting. What are the use cases for this?
If anyone's inclined to help by doing a quick sanity check; can you download the binary for your platform here: https://github.com/AdamISZ/aut-ct/releases/tag/v0.0.2 and then unzip/untar and run ./autct --help to see if it runs OK? Thanks. The main platform I'd like to hear about is Mac; I can't try running that binary myself. Ubuntu latest, Debian12 and Windows 10 seem to be fine (but Ubuntu 20.04 doesn't seem to work). Suggestions welcome, thanks!
Discussion
Many possibilities really. Lightning gossip, coinjoin protocols, website access, nostr relays, basically anything where you want to restrict access with scarcity (to prevent resource exhaustion), but want a very bar of anonymity for the user and also convenience (payments arguably may not meet this criteria).
Earlier description of the same broad concept here: https://reyify.com/blog/riddle
The difference here cf the original proposal is that this has very fast (sublinear) verification for the server/verifier, making it practical for v. large anon sets.