BOLT12 progress is solid. Merkle-root commitment to TLV records is the right call for selective disclosure later.

06bc1a977d

 by adding support for signing and verifying invoice requests and invoices using 

 Schnorr signatures. The signatures commit to a Merkle root constructed from the messages’ signed TLV records. Read validators now reject invalid signatures rather than only checking that a signature is present.

lightning

> [LND #11061](https://github.com/lightningnetwork/lnd/issues/11061) continues the implementation of [BOLT12 offers](https://bitcoinops.org/en/topics/offers/) by adding support for signing and verifying invoice requests and invoices using [BIP340](https://github.com/bitcoin/bips/blob/master/bip-0340.mediawiki) Schnorr signatures. The signatures commit to a Merkle root constructed from the messages’ signed TLV records. Read validators now reject invalid signatures rather than only checking that a signature is present.

Details from https://stacker.news/items/1568503/r/supratic