Defined observable behavior tests; passing does not establish anonymity.
SC-001 · MEDIUM · Block range violates configured sync disclosure policy
Observed behavior: Requested heights 103 through 109 (7 blocks): start height is not aligned to the configured boundary; inclusive request size differs from the configured chunk size.
Possible consequence: The service observes the connection's exact scan boundary and request size. These can depend on local sync state, but wallet history or identity is not proven.
Affected component: lightwalletd block-range synchronization
Investigation: Review fixed-size aligned retrieval, local filtering, and chain-tip handling against the declared policy; evaluate extra bandwidth and other privacy tradeoffs.
Inspect current evidence (8 events)
[
{
"elapsed_ns": 3895932,
"event_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
"metadata": {
"end_height": 109,
"start_height": 103
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "request",
"previous_hash": "0000000000000000000000000000000000000000000000000000000000000000",
"schema_version": 1,
"sequence": 1,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856367879505
},
{
"elapsed_ns": 5458681,
"event_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
"metadata": {
"block_hash": "f24d6e7666100c5ddb3fe9a42e8dbe150eebdad9b89177cf341086eb26ed0d02",
"height": 103,
"request_sequence": 1,
"serialized_sha256": "6e3f4e63f4bb6a678599c75cbd43e99c70e6d2d8305f782af495e0614af5f948",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
"schema_version": 1,
"sequence": 2,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856369442284
},
{
"elapsed_ns": 5982767,
"event_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
"metadata": {
"block_hash": "9bd1d1e029b32ff597a5fdcd6cf19ab46e23adcfbb1a5ec531787a8a7136bd0b",
"height": 104,
"request_sequence": 1,
"serialized_sha256": "440462894933a096cb461dd2cf651977fffa082985a82a602be9b1305ed4a643",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
"schema_version": 1,
"sequence": 3,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856369966460
},
{
"elapsed_ns": 6297746,
"event_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
"metadata": {
"block_hash": "f1d476273a0bf74a1c073dbe098e94a66a760dd14412629890feaef39b26140b",
"height": 105,
"request_sequence": 1,
"serialized_sha256": "0f591157cf09e74ce9132b11eb1c762c2f28b8314a9ef6f94f698f13413908e3",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
"schema_version": 1,
"sequence": 4,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856370281459
},
{
"elapsed_ns": 6583369,
"event_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
"metadata": {
"block_hash": "58dbb3169028cbb4726dcef18103bf73a87abf502a360923a3e2196701165a09",
"height": 106,
"request_sequence": 1,
"serialized_sha256": "494f9ac12f5846fe6fbaea3bfe457a7af3b7b53dd7fbf3aec45fa38be55e331f",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
"schema_version": 1,
"sequence": 5,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856370567083
},
{
"elapsed_ns": 6914067,
"event_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
"metadata": {
"block_hash": "5fe7c2063e93327201494226cabe11e30ce924ade4f6396971625675bed9950a",
"height": 107,
"request_sequence": 1,
"serialized_sha256": "55e156b982e1f6ba6f1544ffdbbdbc1d5965bc811d38a20fbcfb8794e5ee4cf6",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
"schema_version": 1,
"sequence": 6,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856370897750
},
{
"elapsed_ns": 7193359,
"event_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
"metadata": {
"block_hash": "398b75d9d51f5a2b61e724203daecc96307dc241a0c28a5c3ec58a8f8a91a40b",
"height": 108,
"request_sequence": 1,
"serialized_sha256": "d01d6568d5630f5214e836c5daf764cfb42628b19d76f05d15d73dcc490a006a",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
"schema_version": 1,
"sequence": 7,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856371177092
},
{
"elapsed_ns": 7502246,
"event_hash": "dc3e56735b1ce28627a7d631addae54f37b8447b80b50ab3e370c5bc53acc17b",
"metadata": {
"block_hash": "0208b147d29f7beb81945339f5e6e73909faaa54706e410957d676811e1b1108",
"height": 109,
"request_sequence": 1,
"serialized_sha256": "3c13d4ce5041bf800b052d1b6e1f00f36e0249fa35a06e4d9baf53908d7a6cb5",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
"schema_version": 1,
"sequence": 8,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856371485949
}
]SC-005 · MEDIUM · Privacy regression: new-failure
Observed behavior: Requested heights 103 through 109 (7 blocks): start height is not aligned to the configured boundary; inclusive request size differs from the configured chunk size.
Possible consequence: A defined privacy-sensitive behavior is newly observed or more severe than the saved baseline.
Affected component: lightwalletd block-range synchronization
Investigation: Inspect the current and baseline evidence and the code or configuration change; restore the tested requirement before accepting a new baseline.
Inspect current evidence (8 events)
[
{
"elapsed_ns": 3895932,
"event_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
"metadata": {
"end_height": 109,
"start_height": 103
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "request",
"previous_hash": "0000000000000000000000000000000000000000000000000000000000000000",
"schema_version": 1,
"sequence": 1,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856367879505
},
{
"elapsed_ns": 5458681,
"event_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
"metadata": {
"block_hash": "f24d6e7666100c5ddb3fe9a42e8dbe150eebdad9b89177cf341086eb26ed0d02",
"height": 103,
"request_sequence": 1,
"serialized_sha256": "6e3f4e63f4bb6a678599c75cbd43e99c70e6d2d8305f782af495e0614af5f948",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
"schema_version": 1,
"sequence": 2,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856369442284
},
{
"elapsed_ns": 5982767,
"event_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
"metadata": {
"block_hash": "9bd1d1e029b32ff597a5fdcd6cf19ab46e23adcfbb1a5ec531787a8a7136bd0b",
"height": 104,
"request_sequence": 1,
"serialized_sha256": "440462894933a096cb461dd2cf651977fffa082985a82a602be9b1305ed4a643",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
"schema_version": 1,
"sequence": 3,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856369966460
},
{
"elapsed_ns": 6297746,
"event_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
"metadata": {
"block_hash": "f1d476273a0bf74a1c073dbe098e94a66a760dd14412629890feaef39b26140b",
"height": 105,
"request_sequence": 1,
"serialized_sha256": "0f591157cf09e74ce9132b11eb1c762c2f28b8314a9ef6f94f698f13413908e3",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
"schema_version": 1,
"sequence": 4,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856370281459
},
{
"elapsed_ns": 6583369,
"event_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
"metadata": {
"block_hash": "58dbb3169028cbb4726dcef18103bf73a87abf502a360923a3e2196701165a09",
"height": 106,
"request_sequence": 1,
"serialized_sha256": "494f9ac12f5846fe6fbaea3bfe457a7af3b7b53dd7fbf3aec45fa38be55e331f",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
"schema_version": 1,
"sequence": 5,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856370567083
},
{
"elapsed_ns": 6914067,
"event_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
"metadata": {
"block_hash": "5fe7c2063e93327201494226cabe11e30ce924ade4f6396971625675bed9950a",
"height": 107,
"request_sequence": 1,
"serialized_sha256": "55e156b982e1f6ba6f1544ffdbbdbc1d5965bc811d38a20fbcfb8794e5ee4cf6",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
"schema_version": 1,
"sequence": 6,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856370897750
},
{
"elapsed_ns": 7193359,
"event_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
"metadata": {
"block_hash": "398b75d9d51f5a2b61e724203daecc96307dc241a0c28a5c3ec58a8f8a91a40b",
"height": 108,
"request_sequence": 1,
"serialized_sha256": "d01d6568d5630f5214e836c5daf764cfb42628b19d76f05d15d73dcc490a006a",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
"schema_version": 1,
"sequence": 7,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856371177092
},
{
"elapsed_ns": 7502246,
"event_hash": "dc3e56735b1ce28627a7d631addae54f37b8447b80b50ab3e370c5bc53acc17b",
"metadata": {
"block_hash": "0208b147d29f7beb81945339f5e6e73909faaa54706e410957d676811e1b1108",
"height": 109,
"request_sequence": 1,
"serialized_sha256": "3c13d4ce5041bf800b052d1b6e1f00f36e0249fa35a06e4d9baf53908d7a6cb5",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
"schema_version": 1,
"sequence": 8,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856371485949
}
]Complete JSON result
{
"baseline_comparison": {
"baseline_evidence_root": "dfb194b230480995a629f133c93adb0eba07503fd2e19b020f7e0ee7ecf8c459",
"baseline_hash": "398f71908e48f83dbf5e3d4e2ba8368cc50bd4d3906471d7adffbd9376d7c37a",
"changes": [
{
"behavior": [
"SC-001",
"lightwalletd block-range synchronization",
"inclusive request size differs from the configured chunk size|start height is not aligned to the configured boundary"
],
"change": "new-failure",
"current_severity": "MEDIUM",
"previous_severity": null,
"source_rule": "SC-001"
}
],
"regressions": 1,
"resolved_behaviors": [],
"status": "FAIL",
"unchanged_behaviors": 0
},
"correlation_window_seconds": 30,
"evidence_modes": [
"upstream"
],
"evidence_root": "dc3e56735b1ce28627a7d631addae54f37b8447b80b50ab3e370c5bc53acc17b",
"findings": [
{
"affected_component": "lightwalletd block-range synchronization",
"complete_range_delivered": true,
"evidence": [
{
"elapsed_ns": 3895932,
"event_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
"metadata": {
"end_height": 109,
"start_height": 103
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "request",
"previous_hash": "0000000000000000000000000000000000000000000000000000000000000000",
"schema_version": 1,
"sequence": 1,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856367879505
},
{
"elapsed_ns": 5458681,
"event_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
"metadata": {
"block_hash": "f24d6e7666100c5ddb3fe9a42e8dbe150eebdad9b89177cf341086eb26ed0d02",
"height": 103,
"request_sequence": 1,
"serialized_sha256": "6e3f4e63f4bb6a678599c75cbd43e99c70e6d2d8305f782af495e0614af5f948",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
"schema_version": 1,
"sequence": 2,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856369442284
},
{
"elapsed_ns": 5982767,
"event_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
"metadata": {
"block_hash": "9bd1d1e029b32ff597a5fdcd6cf19ab46e23adcfbb1a5ec531787a8a7136bd0b",
"height": 104,
"request_sequence": 1,
"serialized_sha256": "440462894933a096cb461dd2cf651977fffa082985a82a602be9b1305ed4a643",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
"schema_version": 1,
"sequence": 3,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856369966460
},
{
"elapsed_ns": 6297746,
"event_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
"metadata": {
"block_hash": "f1d476273a0bf74a1c073dbe098e94a66a760dd14412629890feaef39b26140b",
"height": 105,
"request_sequence": 1,
"serialized_sha256": "0f591157cf09e74ce9132b11eb1c762c2f28b8314a9ef6f94f698f13413908e3",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
"schema_version": 1,
"sequence": 4,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856370281459
},
{
"elapsed_ns": 6583369,
"event_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
"metadata": {
"block_hash": "58dbb3169028cbb4726dcef18103bf73a87abf502a360923a3e2196701165a09",
"height": 106,
"request_sequence": 1,
"serialized_sha256": "494f9ac12f5846fe6fbaea3bfe457a7af3b7b53dd7fbf3aec45fa38be55e331f",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
"schema_version": 1,
"sequence": 5,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856370567083
},
{
"elapsed_ns": 6914067,
"event_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
"metadata": {
"block_hash": "5fe7c2063e93327201494226cabe11e30ce924ade4f6396971625675bed9950a",
"height": 107,
"request_sequence": 1,
"serialized_sha256": "55e156b982e1f6ba6f1544ffdbbdbc1d5965bc811d38a20fbcfb8794e5ee4cf6",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
"schema_version": 1,
"sequence": 6,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856370897750
},
{
"elapsed_ns": 7193359,
"event_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
"metadata": {
"block_hash": "398b75d9d51f5a2b61e724203daecc96307dc241a0c28a5c3ec58a8f8a91a40b",
"height": 108,
"request_sequence": 1,
"serialized_sha256": "d01d6568d5630f5214e836c5daf764cfb42628b19d76f05d15d73dcc490a006a",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
"schema_version": 1,
"sequence": 7,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856371177092
},
{
"elapsed_ns": 7502246,
"event_hash": "dc3e56735b1ce28627a7d631addae54f37b8447b80b50ab3e370c5bc53acc17b",
"metadata": {
"block_hash": "0208b147d29f7beb81945339f5e6e73909faaa54706e410957d676811e1b1108",
"height": 109,
"request_sequence": 1,
"serialized_sha256": "3c13d4ce5041bf800b052d1b6e1f00f36e0249fa35a06e4d9baf53908d7a6cb5",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
"schema_version": 1,
"sequence": 8,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856371485949
}
],
"observed_behavior": "Requested heights 103 through 109 (7 blocks): start height is not aligned to the configured boundary; inclusive request size differs from the configured chunk size.",
"possible_privacy_consequence": "The service observes the connection's exact scan boundary and request size. These can depend on local sync state, but wallet history or identity is not proven.",
"request_size": 7,
"rule_id": "SC-001",
"severity": "MEDIUM",
"suggested_investigation": "Review fixed-size aligned retrieval, local filtering, and chain-tip handling against the declared policy; evaluate extra bandwidth and other privacy tradeoffs.",
"sync_policy": {
"alignment_height": 0,
"chunk_size": 20
},
"title": "Block range violates configured sync disclosure policy",
"violations": [
"start height is not aligned to the configured boundary",
"inclusive request size differs from the configured chunk size"
]
},
{
"affected_component": "lightwalletd block-range synchronization",
"baseline_evidence": [],
"baseline_evidence_root": "dfb194b230480995a629f133c93adb0eba07503fd2e19b020f7e0ee7ecf8c459",
"change": {
"behavior": [
"SC-001",
"lightwalletd block-range synchronization",
"inclusive request size differs from the configured chunk size|start height is not aligned to the configured boundary"
],
"change": "new-failure",
"current_severity": "MEDIUM",
"previous_severity": null,
"source_rule": "SC-001"
},
"evidence": [
{
"elapsed_ns": 3895932,
"event_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
"metadata": {
"end_height": 109,
"start_height": 103
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "request",
"previous_hash": "0000000000000000000000000000000000000000000000000000000000000000",
"schema_version": 1,
"sequence": 1,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856367879505
},
{
"elapsed_ns": 5458681,
"event_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
"metadata": {
"block_hash": "f24d6e7666100c5ddb3fe9a42e8dbe150eebdad9b89177cf341086eb26ed0d02",
"height": 103,
"request_sequence": 1,
"serialized_sha256": "6e3f4e63f4bb6a678599c75cbd43e99c70e6d2d8305f782af495e0614af5f948",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
"schema_version": 1,
"sequence": 2,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856369442284
},
{
"elapsed_ns": 5982767,
"event_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
"metadata": {
"block_hash": "9bd1d1e029b32ff597a5fdcd6cf19ab46e23adcfbb1a5ec531787a8a7136bd0b",
"height": 104,
"request_sequence": 1,
"serialized_sha256": "440462894933a096cb461dd2cf651977fffa082985a82a602be9b1305ed4a643",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
"schema_version": 1,
"sequence": 3,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856369966460
},
{
"elapsed_ns": 6297746,
"event_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
"metadata": {
"block_hash": "f1d476273a0bf74a1c073dbe098e94a66a760dd14412629890feaef39b26140b",
"height": 105,
"request_sequence": 1,
"serialized_sha256": "0f591157cf09e74ce9132b11eb1c762c2f28b8314a9ef6f94f698f13413908e3",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
"schema_version": 1,
"sequence": 4,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856370281459
},
{
"elapsed_ns": 6583369,
"event_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
"metadata": {
"block_hash": "58dbb3169028cbb4726dcef18103bf73a87abf502a360923a3e2196701165a09",
"height": 106,
"request_sequence": 1,
"serialized_sha256": "494f9ac12f5846fe6fbaea3bfe457a7af3b7b53dd7fbf3aec45fa38be55e331f",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
"schema_version": 1,
"sequence": 5,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856370567083
},
{
"elapsed_ns": 6914067,
"event_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
"metadata": {
"block_hash": "5fe7c2063e93327201494226cabe11e30ce924ade4f6396971625675bed9950a",
"height": 107,
"request_sequence": 1,
"serialized_sha256": "55e156b982e1f6ba6f1544ffdbbdbc1d5965bc811d38a20fbcfb8794e5ee4cf6",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
"schema_version": 1,
"sequence": 6,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856370897750
},
{
"elapsed_ns": 7193359,
"event_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
"metadata": {
"block_hash": "398b75d9d51f5a2b61e724203daecc96307dc241a0c28a5c3ec58a8f8a91a40b",
"height": 108,
"request_sequence": 1,
"serialized_sha256": "d01d6568d5630f5214e836c5daf764cfb42628b19d76f05d15d73dcc490a006a",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
"schema_version": 1,
"sequence": 7,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856371177092
},
{
"elapsed_ns": 7502246,
"event_hash": "dc3e56735b1ce28627a7d631addae54f37b8447b80b50ab3e370c5bc53acc17b",
"metadata": {
"block_hash": "0208b147d29f7beb81945339f5e6e73909faaa54706e410957d676811e1b1108",
"height": 109,
"request_sequence": 1,
"serialized_sha256": "3c13d4ce5041bf800b052d1b6e1f00f36e0249fa35a06e4d9baf53908d7a6cb5",
"transaction_ids": []
},
"method": "GetBlockRange",
"mode": "upstream",
"phase": "response",
"previous_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
"schema_version": 1,
"sequence": 8,
"session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
"timestamp_ns": 1792833856371485949
}
],
"observed_behavior": "Requested heights 103 through 109 (7 blocks): start height is not aligned to the configured boundary; inclusive request size differs from the configured chunk size.",
"possible_privacy_consequence": "A defined privacy-sensitive behavior is newly observed or more severe than the saved baseline.",
"rule_id": "SC-005",
"severity": "MEDIUM",
"suggested_investigation": "Inspect the current and baseline evidence and the code or configuration change; restore the tested requirement before accepting a new baseline.",
"title": "Privacy regression: new-failure"
}
],
"limitations": [
"Defined tests cover SC-001 through SC-004; SC-005 requires a compatible saved baseline.",
"A transport peer identifies a connection, not a person or wallet.",
"Local fixture replay is not consensus validation or network acceptance.",
"Transaction SHA-256 fingerprints are not Zcash transaction IDs.",
"No violation observed does not establish anonymity.",
"SC-005 compares rule/component/behavior categories, not changing transaction IDs, sessions, timestamps, or finding counts.",
"Baselines include inspectable evidence; hashes detect editing but do not authenticate an author.",
"Compatible policy and complete coverage are required; a baseline is not a privacy exemption."
],
"payment_policy": null,
"policy": "strict",
"rules": [
{
"coverage": "complete-range-delivery",
"covered": true,
"executed": true,
"rule_id": "SC-001"
},
{
"coverage": "compatible-baseline-comparison",
"covered": true,
"executed": true,
"rule_id": "SC-005"
}
],
"schema_version": 1,
"status": "FAIL",
"sync_policy": {
"alignment_height": 0,
"chunk_size": 20
}
}