{"version":1,"flow_id":"zanary-ci-checkout-control","flow_commit":"05cc6aeb22ebfd9f6c83d8f5c2861b4c10211a5111f9168cbb2c3eec9ddd8616","chain":"regtest","verified_at_height":134,"verified_at":"2026-10-19T10:03:03.355225244Z","ttl_seconds":2592000,"findings":[{"property":"policy-downgrade","severity":"disqualifying","verdict":"fail","title":"no privacy-policy downgrade instructed or implied","evidence":["txid=755aa3db5267b8fff15f35f38f4b24f1f75c84f3c5e773341743ada129254cd8 policy=\"AllowRevealedAmounts\" matched=AllowRevealedAmounts (wallet instructed to relax its privacy policy)","txid=4b18ff3fb42dfc080baf71cfbd95728d126570432148d0057a6e17588d59f175 policy=\"AllowRevealedAmounts\" matched=AllowRevealedAmounts (wallet instructed to relax its privacy policy)"],"note":"explicit fragments checked: AllowRevealedAmounts, AllowRevealedSenders, AllowRevealedRecipients, AllowLinkingAccountAddresses, AllowFullyTransparent and equivalents; negation prefixes (no/not/disallow/deny/without/block/never) are excluded. Implicit: shielded→transparent or shielded→mixed-bundle spends reveal amounts; zcashd refuses those by default with \"…would reveal transaction amounts. THIS MAY AFFECT YOUR PRIVACY…\"."},{"property":"receiver-reuse","severity":"disqualifying","verdict":"fail","title":"no receiver reused across distinct payments","evidence":["receiver=uregtest1l6kw3f5taut8quglz5p0v58j80ulfav4juracfm029vdwlkgn6jhhshdcxds3v8d4z2eavtze6ssj4uwvh37a07nuh0m2gpydyvlgzwu shared by 2 distinct payments: txid=755aa3db5267b8fff15f35f38f4b24f1f75c84f3c5e773341743ada129254cd8 label=\"invoice 7171\", txid=4b18ff3fb42dfc080baf71cfbd95728d126570432148d0057a6e17588d59f175 label=\"invoice 7172\""],"note":"grouping is exact-string on recipient receivers; groups span distinct payment labels, so a retry of one invoice is not counted as two payments. Diversified unified addresses of one account are not detectable from address strings alone (documented model gap)."},{"property":"payer-policy","severity":"disqualifying","verdict":"skip","title":"a bounded payer stays inside its grant","evidence":[],"note":"this run had no bounded payer: nothing held a grant, so there is no authority to check against the ledger"},{"property":"payer-linkability","severity":"disqualifying","verdict":"pass","title":"payments are not clusterable by an observer","evidence":[],"note":"no pair reached threshold=0.70; highest pair confidence=0.25 across 2 payments"},{"property":"transparent-fallback","severity":"disqualifying","verdict":"pass","title":"no transparent address anywhere in the flow","evidence":[],"note":"checked 13 observed addresses (payment recipients/senders, funding receivers, observed values); none transparent"},{"property":"unshielding","severity":"disqualifying","verdict":"pass","title":"no value leaves the shielded pool","evidence":[],"note":"2 payments checked; no transparent pool_out, no shielded→transparent movement across 2 pool snapshots, no transparent hop between shielded legs"},{"property":"amount-fingerprint","severity":"warn","verdict":"fail","title":"amounts do not fingerprint deposits or repeat","evidence":["txid=755aa3db5267b8fff15f35f38f4b24f1f75c84f3c5e773341743ada129254cd8 txid=4b18ff3fb42dfc080baf71cfbd95728d126570432148d0057a6e17588d59f175 amount_zat=25000000 (exact repeat across payments)"],"note":"thresholds: round granularity=10000000 zat (0.1 ZEC), echo epsilon=5000 zat; near-echoes are flagged only when exactly one funding candidate exists (candidate count is reported per match)."},{"property":"memo-absent","severity":"warn","verdict":"fail","title":"invoice-bearing payments bind their invoice in a memo","evidence":["txid=755aa3db5267b8fff15f35f38f4b24f1f75c84f3c5e773341743ada129254cd8 invoice=7171 no memo bytes bound (a verifier cannot recompute the invoice→payment binding from the chain)","txid=4b18ff3fb42dfc080baf71cfbd95728d126570432148d0057a6e17588d59f175 invoice=7172 no memo bytes bound (a verifier cannot recompute the invoice→payment binding from the chain)"],"note":"binding = alphanumeric-lowercase containment between invoice id and memo plaintext, either direction. Memos are the only reconciliation channel a shielded payment has; without the binding the merchant falls back to transparent rails."},{"property":"memo-content","severity":"warn","verdict":"skip","title":"memos carry no PII or free text","evidence":[],"note":"no memo bytes were recorded on any payment; there is nothing to inspect"},{"property":"same-block-roundtrip","severity":"warn","verdict":"pass","title":"funding and spending do not share a block","evidence":[],"note":"2 spend(s) checked against 11 funding event(s); no shared heights"},{"property":"server-metadata","severity":"warn","verdict":"pass","title":"merchant side receives no payer identity or linkage","evidence":[],"note":"2 merchant-side request(s) checked for identity fields, identity-shaped values, and cross-payment linkage; none found"},{"property":"timing-correlation","severity":"warn","verdict":"pass","title":"spends are not tightly correlated with their funding","evidence":[],"note":"2 spend(s) checked against 11 inflow(s); none within the 1 block window (delay 0 excluded by design)"},{"property":"report-leak","severity":"note","verdict":"pass","title":"exported artifacts reveal no more than their claim","evidence":[],"note":"2 exported artifact(s) checked for excess disclosures, key material, unknown addresses and PII; none found"}],"evidence":[{"kind":"transaction","txid":"755aa3db5267b8fff15f35f38f4b24f1f75c84f3c5e773341743ada129254cd8","height":118},{"kind":"receiver","address":"uregtest1l6kw3f5taut8quglz5p0v58j80ulfav4juracfm029vdwlkgn6jhhshdcxds3v8d4z2eavtze6ssj4uwvh37a07nuh0m2gpydyvlgzwu","first_seen_payment":"invoice 7171","first_seen_txid":"755aa3db5267b8fff15f35f38f4b24f1f75c84f3c5e773341743ada129254cd8"},{"kind":"memo","txid":"755aa3db5267b8fff15f35f38f4b24f1f75c84f3c5e773341743ada129254cd8","memo_hex":""},{"kind":"transaction","txid":"4b18ff3fb42dfc080baf71cfbd95728d126570432148d0057a6e17588d59f175","height":121},{"kind":"receiver","address":"uregtest1l6kw3f5taut8quglz5p0v58j80ulfav4juracfm029vdwlkgn6jhhshdcxds3v8d4z2eavtze6ssj4uwvh37a07nuh0m2gpydyvlgzwu","first_seen_payment":"invoice 7172","first_seen_txid":"4b18ff3fb42dfc080baf71cfbd95728d126570432148d0057a6e17588d59f175"},{"kind":"memo","txid":"4b18ff3fb42dfc080baf71cfbd95728d126570432148d0057a6e17588d59f175","memo_hex":""},{"kind":"pool_totals","height":1,"transparent_zat":625000000,"sapling_zat":0,"orchard_zat":0},{"kind":"pool_totals","height":134,"transparent_zat":80000060000,"sapling_zat":0,"orchard_zat":3749940000},{"kind":"merchant_field","key":"amount_zat","value":"25000000","path":"/webhook/invoice/7171"},{"kind":"merchant_field","key":"invoice_id","value":"7171","path":"/webhook/invoice/7171"},{"kind":"merchant_field","key":"txid","value":"755aa3db5267b8fff15f35f38f4b24f1f75c84f3c5e773341743ada129254cd8","path":"/webhook/invoice/7171"},{"kind":"merchant_field","key":"amount_zat","value":"25000000","path":"/webhook/invoice/7172"},{"kind":"merchant_field","key":"invoice_id","value":"7172","path":"/webhook/invoice/7172"},{"kind":"merchant_field","key":"txid","value":"4b18ff3fb42dfc080baf71cfbd95728d126570432148d0057a6e17588d59f175","path":"/webhook/invoice/7172"}],"merchant_is_simulated":true,"report_hash":"f052d23ac1a45f71ca7eba43fa8a71588b17d4e62ac6639ef84314bf3a321374"}