PoS construction
================

* compare BFS/DFS order

Proof extraction
================

3 strategies:
* naive: node by node
* batching
* sorting + naive

Question
========

protocol is misspecified: challenges are generated with a PRNG, but need to
specify how to map random int to the proper range (different PoS have different
sizes)