Hmm interesting, but couldn't you potentially produce a lot of such "proofs". And how would you effectively blacklist a certain utxo/proof? Would all the utxos involved in that proof be tainted?
Monero has something called key image to solve it. It ensures that each proof has an identical component based on the key. So you can know if two proofs are to the same key and discard duplicates but still don't know which one it is. I don't remember the details enough to say if it's possible to use on Bitcoin. Probably yes.
reply