lucaniz

TODO: review how ECDSA `recover` [function](https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/contracts/utils/cryptography/ECDSA.sol) operates **Note:** It seems that` recover(hash, signature) ` always returns an address even if `signature` is not a legitimate signature for `hash` (no error...

Draft [here](https://www.notion.so/pl-strflt/a1e79964ceb64d5088fafd0f20523262?v=30210e4224fa41c482dbc2422210fa00&p=12c974eb614944608cf6184d3465144b&pm=s)

Updated document [here](https://www.notion.so/pl-strflt/Retrievability-Passes-12c974eb614944608cf6184d3465144b) TODOs - [ ] Review updated doc cc @irenegia - [ ] Review privacy state tokes docs suggested by Will [here](https://chromestatus.com/feature/5078049450098688) and [here](https://github.com/WICG/trust-token-api)

Same here :)