ShadeCheck: FAIL

Defined observable behavior tests; passing does not establish anonymity.

Policy: strict · 1 findings

Evidence root: 796a465c22b0f03ad8e00b6dc260033eb40e3789871f295c8361f4531499b290

Tested rules

RuleCoverageCovered
SC-002broadcast-observedTrue

Findings

SC-002 · HIGH · Broadcast payload linked to a transport session

Observed behavior: Accepted submission and identical mempool bytes observed within the configured window.

Possible consequence: The RPC observer can associate these submitted bytes with this connection; this does not identify a person.

Affected component: lightwalletd broadcast transport

Investigation: Review the server trust model and whether an independent broadcast path reduces the observer's linkability.

Inspect current evidence (3 events)
[
  {
    "elapsed_ns": 115067687,
    "event_hash": "7887a28eb640f0507cf452d1b454caf5801dfa8969bb1f199b196949e42b3535",
    "metadata": {
      "payload_sha256": "038efc5dd8ba7216abcff76c0f8f48c8df56297da2665b6a5224bf0cc0197afd",
      "payload_size": 2373
    },
    "method": "SendTransaction",
    "mode": "upstream",
    "phase": "request",
    "previous_hash": "49f60acb46ba4a9cb3a2391828544da2c6da424066e50f131d65a2be98a32c32",
    "schema_version": 1,
    "sequence": 3,
    "session": "fca96b9ce00a1b71edba4b14d0becac783bb7231577cee20b9e3898104c11de5",
    "timestamp_ns": 1792833780843300289
  },
  {
    "elapsed_ns": 136169436,
    "event_hash": "b02bc59fc4100d87b04fd309ec8cba679d8b3ab4e5d776a852a31adeb38a7842",
    "metadata": {
      "error_code": 0,
      "request_sequence": 3
    },
    "method": "SendTransaction",
    "mode": "upstream",
    "phase": "response",
    "previous_hash": "7887a28eb640f0507cf452d1b454caf5801dfa8969bb1f199b196949e42b3535",
    "schema_version": 1,
    "sequence": 4,
    "session": "fca96b9ce00a1b71edba4b14d0becac783bb7231577cee20b9e3898104c11de5",
    "timestamp_ns": 1792833780864402178
  },
  {
    "elapsed_ns": 243551385,
    "event_hash": "f2a4b7755f566062e939fe7e777a0bf8ef9223855b7660a9f8454911f8d43ba1",
    "metadata": {
      "height": 0,
      "payload_sha256": "038efc5dd8ba7216abcff76c0f8f48c8df56297da2665b6a5224bf0cc0197afd",
      "payload_size": 2373
    },
    "method": "GetMempoolStream",
    "mode": "upstream",
    "phase": "response",
    "previous_hash": "a3229a34f1627fa493b194fde2ab3cb0e977878d91011f1fabd33756cad2c7b9",
    "schema_version": 1,
    "sequence": 7,
    "session": "fca96b9ce00a1b71edba4b14d0becac783bb7231577cee20b9e3898104c11de5",
    "timestamp_ns": 1792833780971784087
  }
]

Limitations

Complete JSON result
{
  "correlation_window_seconds": 30,
  "evidence_modes": [
    "upstream"
  ],
  "evidence_root": "796a465c22b0f03ad8e00b6dc260033eb40e3789871f295c8361f4531499b290",
  "findings": [
    {
      "affected_component": "lightwalletd broadcast transport",
      "evidence": [
        {
          "elapsed_ns": 115067687,
          "event_hash": "7887a28eb640f0507cf452d1b454caf5801dfa8969bb1f199b196949e42b3535",
          "metadata": {
            "payload_sha256": "038efc5dd8ba7216abcff76c0f8f48c8df56297da2665b6a5224bf0cc0197afd",
            "payload_size": 2373
          },
          "method": "SendTransaction",
          "mode": "upstream",
          "phase": "request",
          "previous_hash": "49f60acb46ba4a9cb3a2391828544da2c6da424066e50f131d65a2be98a32c32",
          "schema_version": 1,
          "sequence": 3,
          "session": "fca96b9ce00a1b71edba4b14d0becac783bb7231577cee20b9e3898104c11de5",
          "timestamp_ns": 1792833780843300289
        },
        {
          "elapsed_ns": 136169436,
          "event_hash": "b02bc59fc4100d87b04fd309ec8cba679d8b3ab4e5d776a852a31adeb38a7842",
          "metadata": {
            "error_code": 0,
            "request_sequence": 3
          },
          "method": "SendTransaction",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "7887a28eb640f0507cf452d1b454caf5801dfa8969bb1f199b196949e42b3535",
          "schema_version": 1,
          "sequence": 4,
          "session": "fca96b9ce00a1b71edba4b14d0becac783bb7231577cee20b9e3898104c11de5",
          "timestamp_ns": 1792833780864402178
        },
        {
          "elapsed_ns": 243551385,
          "event_hash": "f2a4b7755f566062e939fe7e777a0bf8ef9223855b7660a9f8454911f8d43ba1",
          "metadata": {
            "height": 0,
            "payload_sha256": "038efc5dd8ba7216abcff76c0f8f48c8df56297da2665b6a5224bf0cc0197afd",
            "payload_size": 2373
          },
          "method": "GetMempoolStream",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "a3229a34f1627fa493b194fde2ab3cb0e977878d91011f1fabd33756cad2c7b9",
          "schema_version": 1,
          "sequence": 7,
          "session": "fca96b9ce00a1b71edba4b14d0becac783bb7231577cee20b9e3898104c11de5",
          "timestamp_ns": 1792833780971784087
        }
      ],
      "network_acceptance_reported": true,
      "observed_behavior": "Accepted submission and identical mempool bytes observed within the configured window.",
      "payload_sha256": "038efc5dd8ba7216abcff76c0f8f48c8df56297da2665b6a5224bf0cc0197afd",
      "possible_privacy_consequence": "The RPC observer can associate these submitted bytes with this connection; this does not identify a person.",
      "rule_id": "SC-002",
      "severity": "HIGH",
      "suggested_investigation": "Review the server trust model and whether an independent broadcast path reduces the observer's linkability.",
      "title": "Broadcast payload linked to a transport session"
    }
  ],
  "limitations": [
    "Defined tests cover SC-001 through SC-004; SC-005 requires a compatible saved baseline.",
    "A transport peer identifies a connection, not a person or wallet.",
    "Local fixture replay is not consensus validation or network acceptance.",
    "Transaction SHA-256 fingerprints are not Zcash transaction IDs.",
    "No violation observed does not establish anonymity."
  ],
  "payment_policy": null,
  "policy": "strict",
  "rules": [
    {
      "coverage": "broadcast-observed",
      "covered": true,
      "executed": true,
      "rule_id": "SC-002"
    }
  ],
  "schema_version": 1,
  "status": "FAIL",
  "sync_policy": null
}