Segwit commitment to post-quantum witness data?

The discussion centers around the advantages of an annex-style witness commitment compared to a whole-witness commitment. In the annex-style approach, it is possible to introduce new styles of witness commitments for different leaf versions or opcodes without requiring a new output type. This flexibility allows for the sequential addition of witness styles as consensus changes are made or new features are introduced, all while keeping in mind that nodes will not need to manage non-contiguous subsets of witness styles.

Moreover, a strategy is proposed where chaining witness style commitments could be implemented efficiently. The style=0 witness would initially carry a single annex committing to the witness of the next highest non-zero style. This linked system continues, with each subsequent witness possibly containing a space reserved for a future higher-level commitment. From a resource management perspective, this method would likely incur minimal overhead since serialized data would typically contain only one such non-expanded piece of witness commitment, aside from the potential cost associated with a single SHA256 verification per witness.

Additionally, there is consideration of creating mixed-cost witness data aimed at optimizing how discount factors are applied within transaction verifications, specifically targeting scenarios like SHRINCS signatures. One suggested method involves utilizing an assertion-style mechanism similar to OP_CLTV, where each signature check required by a transaction would include an annex specifying the necessary details (e.g., signature and public key). This setup ensures that each check is accounted for individually, allowing specific discount factors to be applied per annex during weight computation, independent of script execution. This method proposes a structured yet flexible way to manage varying costs associated with different types of witness data, potentially leading to more efficient blockchain transactions.