Exploiting all ancilla outcomes in linear combinations of unitaries: low-rank recovery and quantum trapdoor functions

This is a brief. The day’s lead story carries the full analysis.