I really like proof-of-utxo for spam resistance. It's something we've discussed before but I don't love the privacy implications in contexts where the UTXO is irrelevant. Maybe there's a zero knowledge/homomorphic way to prove/verify/identify them though.