A specification would probably not force people to use a specific encryption, or too specific of privacy tech. But for example, it might require masking IP's in some manner of who is sending, it might also require an analysis of what type of systems are used to make a transaction private... whether the system itself hides the transactions in some way, or there are adequate dumby / false transactions to sufficiently make it private. I think tech masking the originator's IP address is pretty essential for privacy tech going forward.

So it would be an outline of principles I think, and what sort of systems manage to uphold those principles in their design. Once we have gone farther in this area, we might reach a point where there is best practices and we could simply have a technical list of things to implement to make something private the best way possible.