ShadeCheck: FAIL

Defined observable behavior tests; passing does not establish anonymity.

Policy: strict · 1 findings

Evidence root: c684eadaf0a04e45a283215750f725ef58fc368df9bf58f02f9401b7afc6a15e

Tested rules

RuleCoverageCovered
SC-002broadcast-observedTrue

Findings

SC-002 · MEDIUM · Broadcast payload linked to a transport session

Observed behavior: Non-empty submission bytes observed on an identifiable transport connection.

Possible consequence: The RPC observer can associate these submitted bytes with this connection; this does not identify a person.

Affected component: lightwalletd broadcast transport

Investigation: Review the server trust model and whether an independent broadcast path reduces the observer's linkability.

Inspect current evidence (1 events)
[
  {
    "elapsed_ns": 6686781,
    "event_hash": "c684eadaf0a04e45a283215750f725ef58fc368df9bf58f02f9401b7afc6a15e",
    "metadata": {
      "payload_sha256": "bb0dd7dc6a10a205c05e116e8a321750dd395fd31a23f4124b9633ddac5586f4",
      "payload_size": 2373
    },
    "method": "SendTransaction",
    "mode": "upstream",
    "phase": "request",
    "previous_hash": "0000000000000000000000000000000000000000000000000000000000000000",
    "schema_version": 1,
    "sequence": 1,
    "session": "3b2e589b08e3de2fc6a1fab7e3b452b500b3c6060c21856ea16032d4131f8899",
    "timestamp_ns": 1792833768196148034
  }
]

Limitations

Complete JSON result
{
  "correlation_window_seconds": 30,
  "evidence_modes": [
    "upstream"
  ],
  "evidence_root": "c684eadaf0a04e45a283215750f725ef58fc368df9bf58f02f9401b7afc6a15e",
  "findings": [
    {
      "affected_component": "lightwalletd broadcast transport",
      "evidence": [
        {
          "elapsed_ns": 6686781,
          "event_hash": "c684eadaf0a04e45a283215750f725ef58fc368df9bf58f02f9401b7afc6a15e",
          "metadata": {
            "payload_sha256": "bb0dd7dc6a10a205c05e116e8a321750dd395fd31a23f4124b9633ddac5586f4",
            "payload_size": 2373
          },
          "method": "SendTransaction",
          "mode": "upstream",
          "phase": "request",
          "previous_hash": "0000000000000000000000000000000000000000000000000000000000000000",
          "schema_version": 1,
          "sequence": 1,
          "session": "3b2e589b08e3de2fc6a1fab7e3b452b500b3c6060c21856ea16032d4131f8899",
          "timestamp_ns": 1792833768196148034
        }
      ],
      "network_acceptance_reported": false,
      "observed_behavior": "Non-empty submission bytes observed on an identifiable transport connection.",
      "payload_sha256": "bb0dd7dc6a10a205c05e116e8a321750dd395fd31a23f4124b9633ddac5586f4",
      "possible_privacy_consequence": "The RPC observer can associate these submitted bytes with this connection; this does not identify a person.",
      "rule_id": "SC-002",
      "severity": "MEDIUM",
      "suggested_investigation": "Review the server trust model and whether an independent broadcast path reduces the observer's linkability.",
      "title": "Broadcast payload linked to a transport session"
    }
  ],
  "limitations": [
    "Defined tests cover SC-001 through SC-004; SC-005 requires a compatible saved baseline.",
    "A transport peer identifies a connection, not a person or wallet.",
    "Local fixture replay is not consensus validation or network acceptance.",
    "Transaction SHA-256 fingerprints are not Zcash transaction IDs.",
    "No violation observed does not establish anonymity."
  ],
  "payment_policy": null,
  "policy": "strict",
  "rules": [
    {
      "coverage": "broadcast-observed",
      "covered": true,
      "executed": true,
      "rule_id": "SC-002"
    }
  ],
  "schema_version": 1,
  "status": "FAIL",
  "sync_policy": null
}