ShadeCheck: FAIL

{
  "baseline_comparison": {
    "baseline_evidence_root": "3509aed257541bb43ecb78cd8616cd444cf508a5d49c273df52b23cb702a38eb",
    "baseline_hash": "a6bd509ae342b9364f9168f6b709fddb5d921b67d2942c533ee7356cb986d460",
    "changes": [
      {
        "behavior": [
          "SC-001",
          "lightwalletd block-range synchronization",
          "inclusive request size differs from the configured chunk size|start height is not aligned to the configured boundary"
        ],
        "change": "new-sensitive-behavior",
        "current_severity": "MEDIUM",
        "previous_severity": null,
        "source_rule": "SC-001"
      }
    ],
    "regressions": 1,
    "resolved_behaviors": [
      [
        "SC-001",
        "lightwalletd block-range synchronization",
        "inclusive request size differs from the configured chunk size"
      ]
    ],
    "status": "FAIL",
    "unchanged_behaviors": 0
  },
  "correlation_window_seconds": 30,
  "evidence_modes": [
    "upstream"
  ],
  "evidence_root": "dc3e56735b1ce28627a7d631addae54f37b8447b80b50ab3e370c5bc53acc17b",
  "findings": [
    {
      "affected_component": "lightwalletd block-range synchronization",
      "complete_range_delivered": true,
      "evidence": [
        {
          "elapsed_ns": 3895932,
          "event_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
          "metadata": {
            "end_height": 109,
            "start_height": 103
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "request",
          "previous_hash": "0000000000000000000000000000000000000000000000000000000000000000",
          "schema_version": 1,
          "sequence": 1,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856367879505
        },
        {
          "elapsed_ns": 5458681,
          "event_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
          "metadata": {
            "block_hash": "f24d6e7666100c5ddb3fe9a42e8dbe150eebdad9b89177cf341086eb26ed0d02",
            "height": 103,
            "request_sequence": 1,
            "serialized_sha256": "6e3f4e63f4bb6a678599c75cbd43e99c70e6d2d8305f782af495e0614af5f948",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
          "schema_version": 1,
          "sequence": 2,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856369442284
        },
        {
          "elapsed_ns": 5982767,
          "event_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
          "metadata": {
            "block_hash": "9bd1d1e029b32ff597a5fdcd6cf19ab46e23adcfbb1a5ec531787a8a7136bd0b",
            "height": 104,
            "request_sequence": 1,
            "serialized_sha256": "440462894933a096cb461dd2cf651977fffa082985a82a602be9b1305ed4a643",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
          "schema_version": 1,
          "sequence": 3,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856369966460
        },
        {
          "elapsed_ns": 6297746,
          "event_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
          "metadata": {
            "block_hash": "f1d476273a0bf74a1c073dbe098e94a66a760dd14412629890feaef39b26140b",
            "height": 105,
            "request_sequence": 1,
            "serialized_sha256": "0f591157cf09e74ce9132b11eb1c762c2f28b8314a9ef6f94f698f13413908e3",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
          "schema_version": 1,
          "sequence": 4,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856370281459
        },
        {
          "elapsed_ns": 6583369,
          "event_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
          "metadata": {
            "block_hash": "58dbb3169028cbb4726dcef18103bf73a87abf502a360923a3e2196701165a09",
            "height": 106,
            "request_sequence": 1,
            "serialized_sha256": "494f9ac12f5846fe6fbaea3bfe457a7af3b7b53dd7fbf3aec45fa38be55e331f",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
          "schema_version": 1,
          "sequence": 5,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856370567083
        },
        {
          "elapsed_ns": 6914067,
          "event_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
          "metadata": {
            "block_hash": "5fe7c2063e93327201494226cabe11e30ce924ade4f6396971625675bed9950a",
            "height": 107,
            "request_sequence": 1,
            "serialized_sha256": "55e156b982e1f6ba6f1544ffdbbdbc1d5965bc811d38a20fbcfb8794e5ee4cf6",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
          "schema_version": 1,
          "sequence": 6,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856370897750
        },
        {
          "elapsed_ns": 7193359,
          "event_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
          "metadata": {
            "block_hash": "398b75d9d51f5a2b61e724203daecc96307dc241a0c28a5c3ec58a8f8a91a40b",
            "height": 108,
            "request_sequence": 1,
            "serialized_sha256": "d01d6568d5630f5214e836c5daf764cfb42628b19d76f05d15d73dcc490a006a",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
          "schema_version": 1,
          "sequence": 7,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856371177092
        },
        {
          "elapsed_ns": 7502246,
          "event_hash": "dc3e56735b1ce28627a7d631addae54f37b8447b80b50ab3e370c5bc53acc17b",
          "metadata": {
            "block_hash": "0208b147d29f7beb81945339f5e6e73909faaa54706e410957d676811e1b1108",
            "height": 109,
            "request_sequence": 1,
            "serialized_sha256": "3c13d4ce5041bf800b052d1b6e1f00f36e0249fa35a06e4d9baf53908d7a6cb5",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
          "schema_version": 1,
          "sequence": 8,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856371485949
        }
      ],
      "observed_behavior": "Requested heights 103 through 109 (7 blocks): start height is not aligned to the configured boundary; inclusive request size differs from the configured chunk size.",
      "possible_privacy_consequence": "The service observes the connection's exact scan boundary and request size. These can depend on local sync state, but wallet history or identity is not proven.",
      "request_size": 7,
      "rule_id": "SC-001",
      "severity": "MEDIUM",
      "suggested_investigation": "Review fixed-size aligned retrieval, local filtering, and chain-tip handling against the declared policy; evaluate extra bandwidth and other privacy tradeoffs.",
      "sync_policy": {
        "alignment_height": 0,
        "chunk_size": 20
      },
      "title": "Block range violates configured sync disclosure policy",
      "violations": [
        "start height is not aligned to the configured boundary",
        "inclusive request size differs from the configured chunk size"
      ]
    },
    {
      "affected_component": "lightwalletd block-range synchronization",
      "baseline_evidence": [],
      "baseline_evidence_root": "3509aed257541bb43ecb78cd8616cd444cf508a5d49c273df52b23cb702a38eb",
      "change": {
        "behavior": [
          "SC-001",
          "lightwalletd block-range synchronization",
          "inclusive request size differs from the configured chunk size|start height is not aligned to the configured boundary"
        ],
        "change": "new-sensitive-behavior",
        "current_severity": "MEDIUM",
        "previous_severity": null,
        "source_rule": "SC-001"
      },
      "evidence": [
        {
          "elapsed_ns": 3895932,
          "event_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
          "metadata": {
            "end_height": 109,
            "start_height": 103
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "request",
          "previous_hash": "0000000000000000000000000000000000000000000000000000000000000000",
          "schema_version": 1,
          "sequence": 1,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856367879505
        },
        {
          "elapsed_ns": 5458681,
          "event_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
          "metadata": {
            "block_hash": "f24d6e7666100c5ddb3fe9a42e8dbe150eebdad9b89177cf341086eb26ed0d02",
            "height": 103,
            "request_sequence": 1,
            "serialized_sha256": "6e3f4e63f4bb6a678599c75cbd43e99c70e6d2d8305f782af495e0614af5f948",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
          "schema_version": 1,
          "sequence": 2,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856369442284
        },
        {
          "elapsed_ns": 5982767,
          "event_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
          "metadata": {
            "block_hash": "9bd1d1e029b32ff597a5fdcd6cf19ab46e23adcfbb1a5ec531787a8a7136bd0b",
            "height": 104,
            "request_sequence": 1,
            "serialized_sha256": "440462894933a096cb461dd2cf651977fffa082985a82a602be9b1305ed4a643",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
          "schema_version": 1,
          "sequence": 3,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856369966460
        },
        {
          "elapsed_ns": 6297746,
          "event_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
          "metadata": {
            "block_hash": "f1d476273a0bf74a1c073dbe098e94a66a760dd14412629890feaef39b26140b",
            "height": 105,
            "request_sequence": 1,
            "serialized_sha256": "0f591157cf09e74ce9132b11eb1c762c2f28b8314a9ef6f94f698f13413908e3",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
          "schema_version": 1,
          "sequence": 4,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856370281459
        },
        {
          "elapsed_ns": 6583369,
          "event_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
          "metadata": {
            "block_hash": "58dbb3169028cbb4726dcef18103bf73a87abf502a360923a3e2196701165a09",
            "height": 106,
            "request_sequence": 1,
            "serialized_sha256": "494f9ac12f5846fe6fbaea3bfe457a7af3b7b53dd7fbf3aec45fa38be55e331f",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
          "schema_version": 1,
          "sequence": 5,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856370567083
        },
        {
          "elapsed_ns": 6914067,
          "event_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
          "metadata": {
            "block_hash": "5fe7c2063e93327201494226cabe11e30ce924ade4f6396971625675bed9950a",
            "height": 107,
            "request_sequence": 1,
            "serialized_sha256": "55e156b982e1f6ba6f1544ffdbbdbc1d5965bc811d38a20fbcfb8794e5ee4cf6",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
          "schema_version": 1,
          "sequence": 6,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856370897750
        },
        {
          "elapsed_ns": 7193359,
          "event_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
          "metadata": {
            "block_hash": "398b75d9d51f5a2b61e724203daecc96307dc241a0c28a5c3ec58a8f8a91a40b",
            "height": 108,
            "request_sequence": 1,
            "serialized_sha256": "d01d6568d5630f5214e836c5daf764cfb42628b19d76f05d15d73dcc490a006a",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
          "schema_version": 1,
          "sequence": 7,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856371177092
        },
        {
          "elapsed_ns": 7502246,
          "event_hash": "dc3e56735b1ce28627a7d631addae54f37b8447b80b50ab3e370c5bc53acc17b",
          "metadata": {
            "block_hash": "0208b147d29f7beb81945339f5e6e73909faaa54706e410957d676811e1b1108",
            "height": 109,
            "request_sequence": 1,
            "serialized_sha256": "3c13d4ce5041bf800b052d1b6e1f00f36e0249fa35a06e4d9baf53908d7a6cb5",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
          "schema_version": 1,
          "sequence": 8,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856371485949
        }
      ],
      "observed_behavior": "Requested heights 103 through 109 (7 blocks): start height is not aligned to the configured boundary; inclusive request size differs from the configured chunk size.",
      "possible_privacy_consequence": "A defined privacy-sensitive behavior is newly observed or more severe than the saved baseline.",
      "rule_id": "SC-005",
      "severity": "MEDIUM",
      "suggested_investigation": "Inspect the current and baseline evidence and the code or configuration change; restore the tested requirement before accepting a new baseline.",
      "title": "Privacy regression: new-sensitive-behavior"
    }
  ],
  "limitations": [
    "Defined tests cover SC-001 through SC-004; SC-005 requires a compatible saved baseline.",
    "A transport peer identifies a connection, not a person or wallet.",
    "Local fixture replay is not consensus validation or network acceptance.",
    "Transaction SHA-256 fingerprints are not Zcash transaction IDs.",
    "No violation observed does not establish anonymity.",
    "SC-005 compares rule/component/behavior categories, not changing transaction IDs, sessions, timestamps, or finding counts.",
    "Baselines include inspectable evidence; hashes detect editing but do not authenticate an author.",
    "Compatible policy and complete coverage are required; a baseline is not a privacy exemption."
  ],
  "payment_policy": null,
  "policy": "strict",
  "rules": [
    {
      "coverage": "complete-range-delivery",
      "covered": true,
      "executed": true,
      "rule_id": "SC-001"
    },
    {
      "coverage": "compatible-baseline-comparison",
      "covered": true,
      "executed": true,
      "rule_id": "SC-005"
    }
  ],
  "schema_version": 1,
  "status": "FAIL",
  "sync_policy": {
    "alignment_height": 0,
    "chunk_size": 20
  }
}