In this section, we outline an algorithm for extracting \(\mathbf{W}\) up to an orthogonal \(h\times h\) matrix, instead of merely up to a nonsingular \(h\times h\) matrix as in Appendix C. We do **not** carry out this attack in practice for models considered in this paper, and leave improving this algorithm as an open problem for future work.