View in context in the libbitcoin Slack #general mirror.
R.x mod n == r check and does not provide the recovery parity needed to reconstruct R unambiguously. So any wording suggesting “Pippenger ECDSA” is misleading unless it refers to generic MSM or a recoverable/explicit-R variant.