Protect against malicious collateral input spending

[GeorgeFlerovsky]

Eliminate head state input from root settlement transaction? i.e. to eliminate need for collateral inputs.

Instead, head treasury held in a multisig (not timelock) script. Post-dated (1-day delay) assurance transaction sends to dissolution validator address, which should only happen if the head doesn't have any L1 activity for that long.