ShadeCheck: FAIL

Defined observable behavior tests; passing does not establish anonymity.

Policy: strict · 1 findings

Evidence root: 7dac04987dc35fab36695a29c898c83e9549c2f6e243d42595ab5cd8f3c2eae7

Tested rules

RuleCoverageCovered
SC-003multi-transaction-block-deliveredTrue

Findings

SC-003 · MEDIUM · Subset of delivered compact transactions fetched by ID

Observed behavior: The same transport session requested 1 of 2 delivered compact transaction IDs within the configured window.

Possible consequence: The service can associate selected transaction IDs with this connection; relevance to a wallet or person is not proven.

Affected component: lightwalletd transaction retrieval

Investigation: Review transaction-specific fetches, local caching, and broader retrieval for the tested block; evaluate bandwidth and other privacy tradeoffs.

Inspect current evidence (3 events)
[
  {
    "elapsed_ns": 8123332,
    "event_hash": "e01aa62a0db30b459d9500c0abc23a35f4f9f3e4a0876e832575a6ee0a4dd15c",
    "metadata": {
      "block_hash": "b9f9a9f4efc1edf2c905083f33a30f19d5e986bf26a4bc444c93581419eb3e00",
      "height": 122,
      "request_sequence": 1,
      "serialized_sha256": "10e3b4397e926896bda9f157610959ef27570a99065dc0b187abcd98f023fd78",
      "transaction_ids": [
        "fb8ad5d4aaf1de9213c42461bda109d2ccb6cdf2a70cc7954fb52a4073ae0687",
        "091e9ec17db332065e6cc58330854ab2915dd53d320d002c35e3b736a463f801"
      ]
    },
    "method": "GetBlockRange",
    "mode": "upstream",
    "phase": "response",
    "previous_hash": "e6dbd1391d72c9c56a2c2f1a81b3ba1d5b02b442e92977ed2eeee00d2f64d80d",
    "schema_version": 1,
    "sequence": 2,
    "session": "03e25d0de037a34161d663753237adf9a63595c427774eba368c3f1a64a70323",
    "timestamp_ns": 1792833808434878776
  },
  {
    "elapsed_ns": 228413284,
    "event_hash": "d99fc68bb8820b41ba2b18096e061eed586627cb00d3c83727a9b1dbd4b4a192",
    "metadata": {
      "transaction_id": "091e9ec17db332065e6cc58330854ab2915dd53d320d002c35e3b736a463f801"
    },
    "method": "GetTransaction",
    "mode": "upstream",
    "phase": "request",
    "previous_hash": "e01aa62a0db30b459d9500c0abc23a35f4f9f3e4a0876e832575a6ee0a4dd15c",
    "schema_version": 1,
    "sequence": 3,
    "session": "03e25d0de037a34161d663753237adf9a63595c427774eba368c3f1a64a70323",
    "timestamp_ns": 1792833808655168318
  },
  {
    "elapsed_ns": 231353362,
    "event_hash": "7dac04987dc35fab36695a29c898c83e9549c2f6e243d42595ab5cd8f3c2eae7",
    "metadata": {
      "height": 122,
      "payload_sha256": "deb426766c8f827facc145e268204e138c62dab352dddc5cf5acef10c36498e9",
      "payload_size": 2373,
      "request_sequence": 3
    },
    "method": "GetTransaction",
    "mode": "upstream",
    "phase": "response",
    "previous_hash": "d99fc68bb8820b41ba2b18096e061eed586627cb00d3c83727a9b1dbd4b4a192",
    "schema_version": 1,
    "sequence": 4,
    "session": "03e25d0de037a34161d663753237adf9a63595c427774eba368c3f1a64a70323",
    "timestamp_ns": 1792833808658108916
  }
]

Limitations

Complete JSON result
{
  "correlation_window_seconds": 30,
  "evidence_modes": [
    "upstream"
  ],
  "evidence_root": "7dac04987dc35fab36695a29c898c83e9549c2f6e243d42595ab5cd8f3c2eae7",
  "findings": [
    {
      "affected_component": "lightwalletd transaction retrieval",
      "block_height": 122,
      "delivered_transaction_count": 2,
      "evidence": [
        {
          "elapsed_ns": 8123332,
          "event_hash": "e01aa62a0db30b459d9500c0abc23a35f4f9f3e4a0876e832575a6ee0a4dd15c",
          "metadata": {
            "block_hash": "b9f9a9f4efc1edf2c905083f33a30f19d5e986bf26a4bc444c93581419eb3e00",
            "height": 122,
            "request_sequence": 1,
            "serialized_sha256": "10e3b4397e926896bda9f157610959ef27570a99065dc0b187abcd98f023fd78",
            "transaction_ids": [
              "fb8ad5d4aaf1de9213c42461bda109d2ccb6cdf2a70cc7954fb52a4073ae0687",
              "091e9ec17db332065e6cc58330854ab2915dd53d320d002c35e3b736a463f801"
            ]
          },
          "method": "GetBlockRange",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "e6dbd1391d72c9c56a2c2f1a81b3ba1d5b02b442e92977ed2eeee00d2f64d80d",
          "schema_version": 1,
          "sequence": 2,
          "session": "03e25d0de037a34161d663753237adf9a63595c427774eba368c3f1a64a70323",
          "timestamp_ns": 1792833808434878776
        },
        {
          "elapsed_ns": 228413284,
          "event_hash": "d99fc68bb8820b41ba2b18096e061eed586627cb00d3c83727a9b1dbd4b4a192",
          "metadata": {
            "transaction_id": "091e9ec17db332065e6cc58330854ab2915dd53d320d002c35e3b736a463f801"
          },
          "method": "GetTransaction",
          "mode": "upstream",
          "phase": "request",
          "previous_hash": "e01aa62a0db30b459d9500c0abc23a35f4f9f3e4a0876e832575a6ee0a4dd15c",
          "schema_version": 1,
          "sequence": 3,
          "session": "03e25d0de037a34161d663753237adf9a63595c427774eba368c3f1a64a70323",
          "timestamp_ns": 1792833808655168318
        },
        {
          "elapsed_ns": 231353362,
          "event_hash": "7dac04987dc35fab36695a29c898c83e9549c2f6e243d42595ab5cd8f3c2eae7",
          "metadata": {
            "height": 122,
            "payload_sha256": "deb426766c8f827facc145e268204e138c62dab352dddc5cf5acef10c36498e9",
            "payload_size": 2373,
            "request_sequence": 3
          },
          "method": "GetTransaction",
          "mode": "upstream",
          "phase": "response",
          "previous_hash": "d99fc68bb8820b41ba2b18096e061eed586627cb00d3c83727a9b1dbd4b4a192",
          "schema_version": 1,
          "sequence": 4,
          "session": "03e25d0de037a34161d663753237adf9a63595c427774eba368c3f1a64a70323",
          "timestamp_ns": 1792833808658108916
        }
      ],
      "first_fetch_delta_ns": 220289952,
      "observed_behavior": "The same transport session requested 1 of 2 delivered compact transaction IDs within the configured window.",
      "possible_privacy_consequence": "The service can associate selected transaction IDs with this connection; relevance to a wallet or person is not proven.",
      "requested_transaction_ids": [
        "091e9ec17db332065e6cc58330854ab2915dd53d320d002c35e3b736a463f801"
      ],
      "rule_id": "SC-003",
      "severity": "MEDIUM",
      "suggested_investigation": "Review transaction-specific fetches, local caching, and broader retrieval for the tested block; evaluate bandwidth and other privacy tradeoffs.",
      "title": "Subset of delivered compact transactions fetched by ID"
    }
  ],
  "limitations": [
    "Defined tests cover SC-001 through SC-004; SC-005 requires a compatible saved baseline.",
    "A transport peer identifies a connection, not a person or wallet.",
    "Local fixture replay is not consensus validation or network acceptance.",
    "Transaction SHA-256 fingerprints are not Zcash transaction IDs.",
    "No violation observed does not establish anonymity."
  ],
  "payment_policy": null,
  "policy": "strict",
  "rules": [
    {
      "coverage": "multi-transaction-block-delivered",
      "covered": true,
      "executed": true,
      "rule_id": "SC-003"
    }
  ],
  "schema_version": 1,
  "status": "FAIL",
  "sync_policy": null
}