Shadowbip on Nostr: yep. different passphrases yield different xpubs. use one for the multisig descriptor ...

yep. different passphrases yield different xpubs. use one for the multisig descriptor and leave the empty passphrase for your daily driver. how are you enforcing the policy on that first xpub?