The final observation is that the system in Lemma G.1 (\(x_{i}^{\top}\mathbf{A}x_{i}=1\) for all \(i\)) is linear in the \(h(h+1)/2\) distinct entries of \(\mathbf{A}\). By generating more than \(h(h+1)/2\) values for \(x_{i}\) (and again assuming no degeneracy), we can therefore solve a large system of linear equations, and in principle recover \(\mathbf{A}\), and hence \(\mathbf{M}\), and hence \(\mathbf{W}\). Note that any solution \(\mathbf{A}\) will be positive semidefinite because an overdetermined linear system has at most one solution. However, we do not know how to solve these systems of linear equations in \(h^{2}\) variables efficiently (\(h>750\) in all our experiments); so in practice we resort to reconstructing weights up to an arbitrary \(h\times h\) matrix, as described in Appendix C.