ShadeCheck evidence report

Rule	Coverage	Covered
SC-001	complete-range-delivery	True

Rule

Coverage

Covered

SC-001

complete-range-delivery

True

Findings

SC-001 · MEDIUM · Block range violates configured sync disclosure policy

Observed behavior: Requested heights 103 through 109 (7 blocks): start height is not aligned to the configured boundary; inclusive request size differs from the configured chunk size.

Possible consequence: The service observes the connection's exact scan boundary and request size. These can depend on local sync state, but wallet history or identity is not proven.

Affected component: lightwalletd block-range synchronization

Investigation: Review fixed-size aligned retrieval, local filtering, and chain-tip handling against the declared policy; evaluate extra bandwidth and other privacy tradeoffs.

Inspect current evidence (8 events)

[
  {
    "elapsed_ns": 3895932,
    "event_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
    "metadata": {
      "end_height": 109,
      "start_height": 103
    },
    "method": "GetBlockRange",
    "mode": "upstream",
    "phase": "request",
    "previous_hash": "0000000000000000000000000000000000000000000000000000000000000000",
    "schema_version": 1,
    "sequence": 1,
    "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
    "timestamp_ns": 1792833856367879505
  },
  {
    "elapsed_ns": 5458681,
    "event_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
    "metadata": {
      "block_hash": "f24d6e7666100c5ddb3fe9a42e8dbe150eebdad9b89177cf341086eb26ed0d02",
      "height": 103,
      "request_sequence": 1,
      "serialized_sha256": "6e3f4e63f4bb6a678599c75cbd43e99c70e6d2d8305f782af495e0614af5f948",
      "transaction_ids": []
    },
    "method": "GetBlockRange",
    "mode": "upstream",
    "phase": "response",
    "previous_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
    "schema_version": 1,
    "sequence": 2,
    "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
    "timestamp_ns": 1792833856369442284
  },
  {
    "elapsed_ns": 5982767,
    "event_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
    "metadata": {
      "block_hash": "9bd1d1e029b32ff597a5fdcd6cf19ab46e23adcfbb1a5ec531787a8a7136bd0b",
      "height": 104,
      "request_sequence": 1,
      "serialized_sha256": "440462894933a096cb461dd2cf651977fffa082985a82a602be9b1305ed4a643",
      "transaction_ids": []
    },
    "method": "GetBlockRange",
    "mode": "upstream",
    "phase": "response",
    "previous_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
    "schema_version": 1,
    "sequence": 3,
    "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
    "timestamp_ns": 1792833856369966460
  },
  {
    "elapsed_ns": 6297746,
    "event_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
    "metadata": {
      "block_hash": "f1d476273a0bf74a1c073dbe098e94a66a760dd14412629890feaef39b26140b",
      "height": 105,
      "request_sequence": 1,
      "serialized_sha256": "0f591157cf09e74ce9132b11eb1c762c2f28b8314a9ef6f94f698f13413908e3",
      "transaction_ids": []
    },
    "method": "GetBlockRange",
    "mode": "upstream",
    "phase": "response",
    "previous_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
    "schema_version": 1,
    "sequence": 4,
    "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
    "timestamp_ns": 1792833856370281459
  },
  {
    "elapsed_ns": 6583369,
    "event_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
    "metadata": {
      "block_hash": "58dbb3169028cbb4726dcef18103bf73a87abf502a360923a3e2196701165a09",
      "height": 106,
      "request_sequence": 1,
      "serialized_sha256": "494f9ac12f5846fe6fbaea3bfe457a7af3b7b53dd7fbf3aec45fa38be55e331f",
      "transaction_ids": []
    },
    "method": "GetBlockRange",
    "mode": "upstream",
    "phase": "response",
    "previous_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
    "schema_version": 1,
    "sequence": 5,
    "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
    "timestamp_ns": 1792833856370567083
  },
  {
    "elapsed_ns": 6914067,
    "event_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
    "metadata": {
      "block_hash": "5fe7c2063e93327201494226cabe11e30ce924ade4f6396971625675bed9950a",
      "height": 107,
      "request_sequence": 1,
      "serialized_sha256": "55e156b982e1f6ba6f1544ffdbbdbc1d5965bc811d38a20fbcfb8794e5ee4cf6",
      "transaction_ids": []
    },
    "method": "GetBlockRange",
    "mode": "upstream",
    "phase": "response",
    "previous_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
    "schema_version": 1,
    "sequence": 6,
    "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
    "timestamp_ns": 1792833856370897750
  },
  {
    "elapsed_ns": 7193359,
    "event_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
    "metadata": {
      "block_hash": "398b75d9d51f5a2b61e724203daecc96307dc241a0c28a5c3ec58a8f8a91a40b",
      "height": 108,
      "request_sequence": 1,
      "serialized_sha256": "d01d6568d5630f5214e836c5daf764cfb42628b19d76f05d15d73dcc490a006a",
      "transaction_ids": []
    },
    "method": "GetBlockRange",
    "mode": "upstream",
    "phase": "response",
    "previous_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
    "schema_version": 1,
    "sequence": 7,
    "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
    "timestamp_ns": 1792833856371177092
  },
  {
    "elapsed_ns": 7502246,
    "event_hash": "dc3e56735b1ce28627a7d631addae54f37b8447b80b50ab3e370c5bc53acc17b",
    "metadata": {
      "block_hash": "0208b147d29f7beb81945339f5e6e73909faaa54706e410957d676811e1b1108",
      "height": 109,
      "request_sequence": 1,
      "serialized_sha256": "3c13d4ce5041bf800b052d1b6e1f00f36e0249fa35a06e4d9baf53908d7a6cb5",
      "transaction_ids": []
    },
    "method": "GetBlockRange",
    "mode": "upstream",
    "phase": "response",
    "previous_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
    "schema_version": 1,
    "sequence": 8,
    "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
    "timestamp_ns": 1792833856371485949
  }
]

Limitations

Defined tests cover SC-001 through SC-004; SC-005 requires a compatible saved baseline.

A transport peer identifies a connection, not a person or wallet.

Local fixture replay is not consensus validation or network acceptance.

Transaction SHA-256 fingerprints are not Zcash transaction IDs.

No violation observed does not establish anonymity.

Complete JSON result

{
  "correlation_window_seconds": 30,
  "evidence_modes": [
    "upstream"
  ],
  "evidence_root": "dc3e56735b1ce28627a7d631addae54f37b8447b80b50ab3e370c5bc53acc17b",
  "findings": [
    {
      "affected_component": "lightwalletd block-range synchronization",
      "complete_range_delivered": true,
      "evidence": [
        {
          "elapsed_ns": 3895932,
          "event_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
          "metadata": {
            "end_height": 109,
            "start_height": 103
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "request",
          "previous_hash": "0000000000000000000000000000000000000000000000000000000000000000",
          "schema_version": 1,
          "sequence": 1,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856367879505
        },
        {
          "elapsed_ns": 5458681,
          "event_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
          "metadata": {
            "block_hash": "f24d6e7666100c5ddb3fe9a42e8dbe150eebdad9b89177cf341086eb26ed0d02",
            "height": 103,
            "request_sequence": 1,
            "serialized_sha256": "6e3f4e63f4bb6a678599c75cbd43e99c70e6d2d8305f782af495e0614af5f948",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "85d38fb2c017bfd6edffd6d7012ec0b31e9ab02f4fd02d42d6e7d66f1954c555",
          "schema_version": 1,
          "sequence": 2,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856369442284
        },
        {
          "elapsed_ns": 5982767,
          "event_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
          "metadata": {
            "block_hash": "9bd1d1e029b32ff597a5fdcd6cf19ab46e23adcfbb1a5ec531787a8a7136bd0b",
            "height": 104,
            "request_sequence": 1,
            "serialized_sha256": "440462894933a096cb461dd2cf651977fffa082985a82a602be9b1305ed4a643",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "59e65ecf8dcc7a6d7a5ddf16339ae0cc55de417ae52a28406c8c8c14313a0caf",
          "schema_version": 1,
          "sequence": 3,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856369966460
        },
        {
          "elapsed_ns": 6297746,
          "event_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
          "metadata": {
            "block_hash": "f1d476273a0bf74a1c073dbe098e94a66a760dd14412629890feaef39b26140b",
            "height": 105,
            "request_sequence": 1,
            "serialized_sha256": "0f591157cf09e74ce9132b11eb1c762c2f28b8314a9ef6f94f698f13413908e3",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "623e0a2f57777b45920c6342e15840d1bed315f23510dab32dc564794302fac6",
          "schema_version": 1,
          "sequence": 4,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856370281459
        },
        {
          "elapsed_ns": 6583369,
          "event_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
          "metadata": {
            "block_hash": "58dbb3169028cbb4726dcef18103bf73a87abf502a360923a3e2196701165a09",
            "height": 106,
            "request_sequence": 1,
            "serialized_sha256": "494f9ac12f5846fe6fbaea3bfe457a7af3b7b53dd7fbf3aec45fa38be55e331f",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "ee7280c854adf05a96382fed35a7070489397109945aee472124cbc74d5a1e8b",
          "schema_version": 1,
          "sequence": 5,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856370567083
        },
        {
          "elapsed_ns": 6914067,
          "event_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
          "metadata": {
            "block_hash": "5fe7c2063e93327201494226cabe11e30ce924ade4f6396971625675bed9950a",
            "height": 107,
            "request_sequence": 1,
            "serialized_sha256": "55e156b982e1f6ba6f1544ffdbbdbc1d5965bc811d38a20fbcfb8794e5ee4cf6",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "1f05bc4ccba5d32f9ace88cf3e12fbf737f850e5541855490ce00d233c98e3c1",
          "schema_version": 1,
          "sequence": 6,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856370897750
        },
        {
          "elapsed_ns": 7193359,
          "event_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
          "metadata": {
            "block_hash": "398b75d9d51f5a2b61e724203daecc96307dc241a0c28a5c3ec58a8f8a91a40b",
            "height": 108,
            "request_sequence": 1,
            "serialized_sha256": "d01d6568d5630f5214e836c5daf764cfb42628b19d76f05d15d73dcc490a006a",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "c1bf894e4c1e219ffafd69b4bba70d6fe36c66070b5cf9a2ad047236b4b94560",
          "schema_version": 1,
          "sequence": 7,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856371177092
        },
        {
          "elapsed_ns": 7502246,
          "event_hash": "dc3e56735b1ce28627a7d631addae54f37b8447b80b50ab3e370c5bc53acc17b",
          "metadata": {
            "block_hash": "0208b147d29f7beb81945339f5e6e73909faaa54706e410957d676811e1b1108",
            "height": 109,
            "request_sequence": 1,
            "serialized_sha256": "3c13d4ce5041bf800b052d1b6e1f00f36e0249fa35a06e4d9baf53908d7a6cb5",
            "transaction_ids": []
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "a26577e896506d4c03f5624fc370520a805810d208fda3b8898ce4acbd947c92",
          "schema_version": 1,
          "sequence": 8,
          "session": "a72a0db9983e9a8835ea33baeb2f18b6d8ab9a4550d7b1905f7ff5844f73d08a",
          "timestamp_ns": 1792833856371485949
        }
      ],
      "observed_behavior": "Requested heights 103 through 109 (7 blocks): start height is not aligned to the configured boundary; inclusive request size differs from the configured chunk size.",
      "possible_privacy_consequence": "The service observes the connection's exact scan boundary and request size. These can depend on local sync state, but wallet history or identity is not proven.",
      "request_size": 7,
      "rule_id": "SC-001",
      "severity": "MEDIUM",
      "suggested_investigation": "Review fixed-size aligned retrieval, local filtering, and chain-tip handling against the declared policy; evaluate extra bandwidth and other privacy tradeoffs.",
      "sync_policy": {
        "alignment_height": 0,
        "chunk_size": 20
      },
      "title": "Block range violates configured sync disclosure policy",
      "violations": [
        "start height is not aligned to the configured boundary",
        "inclusive request size differs from the configured chunk size"
      ]
    }
  ],
  "limitations": [
    "Defined tests cover SC-001 through SC-004; SC-005 requires a compatible saved baseline.",
    "A transport peer identifies a connection, not a person or wallet.",
    "Local fixture replay is not consensus validation or network acceptance.",
    "Transaction SHA-256 fingerprints are not Zcash transaction IDs.",
    "No violation observed does not establish anonymity."
  ],
  "payment_policy": null,
  "policy": "strict",
  "rules": [
    {
      "coverage": "complete-range-delivery",
      "covered": true,
      "executed": true,
      "rule_id": "SC-001"
    }
  ],
  "schema_version": 1,
  "status": "FAIL",
  "sync_policy": {
    "alignment_height": 0,
    "chunk_size": 20
  }
}

ShadeCheck: FAIL

Tested rules

Findings

SC-001 · MEDIUM · Block range violates configured sync disclosure policy

Limitations