Proposal for "Note" inputs

If a smart contracts sees that a transaction has 5 different notes, then how does it figure out which note should the use to determine msg_sender?

In the msg_sender implementation I provided, it would simply pick the first input.

I’m not sure if there’s any vulnerabilities that would com from a user expecting to be the owner, but being superseded by a different note, are you aware of any?

If so, it could potentially be addressed at the wallet level (a predicate could enforce that only one ownership note is attached).