A npub/pkey - locked ecash, embedded in a BTC transaction's OP_RETURN.
Nice.
But in reality, I think cashu tokens are too big to fit in OP_RETURN, no?
Discussion
Pick your token amount carefully (ie base 2) and it is just one Cashu proof… eg, this one was 1024 sats