What if multi-signature privacy has to survive the public transcript too? This paper formalizes that and proves MuSig2-H.