{"version":1,"flow_id":"zanary-ci-checkout","flow_commit":"4d8279bbab9defbd66390daf2ee8a7d1f42b968d31f1d4982d7b026270c350a0","chain":"regtest","verified_at_height":134,"verified_at":"2026-10-19T10:02:51.032909243Z","ttl_seconds":2592000,"findings":[{"property":"payer-policy","severity":"disqualifying","verdict":"skip","title":"a bounded payer stays inside its grant","evidence":[],"note":"this run had no bounded payer: nothing held a grant, so there is no authority to check against the ledger"},{"property":"payer-linkability","severity":"disqualifying","verdict":"pass","title":"payments are not clusterable by an observer","evidence":[],"note":"no pair reached threshold=0.70; highest pair confidence=0.20 across 2 payments"},{"property":"policy-downgrade","severity":"disqualifying","verdict":"pass","title":"no privacy-policy downgrade instructed or implied","evidence":[],"note":"every recorded policy token was checked against the downgrade fragments; none matched, and no shielded→transparent/cross-pool spend was observed"},{"property":"receiver-reuse","severity":"disqualifying","verdict":"pass","title":"no receiver reused across distinct payments","evidence":[],"note":"no receiver repeats among 2 payments; note the spec calls for N>=5 payments (two payers, two amounts) for a meaningful reuse window"},{"property":"transparent-fallback","severity":"disqualifying","verdict":"pass","title":"no transparent address anywhere in the flow","evidence":[],"note":"checked 13 observed addresses (payment recipients/senders, funding receivers, observed values); none transparent"},{"property":"unshielding","severity":"disqualifying","verdict":"pass","title":"no value leaves the shielded pool","evidence":[],"note":"2 payments checked; no transparent pool_out, no shielded→transparent movement across 2 pool snapshots, no transparent hop between shielded legs"},{"property":"amount-fingerprint","severity":"warn","verdict":"pass","title":"amounts do not fingerprint deposits or repeat","evidence":[],"note":"2 payments checked against 11 funding events; no round, repeated or echoed amounts (epsilon=5000 zat)"},{"property":"memo-absent","severity":"warn","verdict":"pass","title":"invoice-bearing payments bind their invoice in a memo","evidence":[],"note":"2 invoice-bearing payments checked; every one carries a memo that contains its invoice id"},{"property":"memo-content","severity":"warn","verdict":"pass","title":"memos carry no PII or free text","evidence":[],"note":"2 memo(s) decoded and scanned for emails, phone/gov-id shapes, long digit runs, key-like labels and free text; none flagged"},{"property":"same-block-roundtrip","severity":"warn","verdict":"pass","title":"funding and spending do not share a block","evidence":[],"note":"2 spend(s) checked against 11 funding event(s); no shared heights"},{"property":"server-metadata","severity":"warn","verdict":"pass","title":"merchant side receives no payer identity or linkage","evidence":[],"note":"2 merchant-side request(s) checked for identity fields, identity-shaped values, and cross-payment linkage; none found"},{"property":"timing-correlation","severity":"warn","verdict":"pass","title":"spends are not tightly correlated with their funding","evidence":[],"note":"2 spend(s) checked against 11 inflow(s); none within the 1 block window (delay 0 excluded by design)"},{"property":"report-leak","severity":"note","verdict":"pass","title":"exported artifacts reveal no more than their claim","evidence":[],"note":"2 exported artifact(s) checked for excess disclosures, key material, unknown addresses and PII; none found"}],"evidence":[{"kind":"transaction","txid":"d573f0579752473ed4fa3b0c56cebe2d1fc4d2e8557ffc9477ee87f85656c5f8","height":118},{"kind":"receiver","address":"uregtest1ucld8846782denmdppjpsycarzavyxr0dm679t3exwglk4x2ulrpz2k359halvsdtxkf6v07n0x9v0na3k0t6qujrgwygvha2vz5s2s0","first_seen_payment":"invoice 6161","first_seen_txid":"d573f0579752473ed4fa3b0c56cebe2d1fc4d2e8557ffc9477ee87f85656c5f8"},{"kind":"memo","txid":"d573f0579752473ed4fa3b0c56cebe2d1fc4d2e8557ffc9477ee87f85656c5f8","memo_hex":"7a616e6172793a20696e766f6963652036313631"},{"kind":"transaction","txid":"043ee2a309355ec7f7f20f0403d5bebdad162bdaed239d13fbd6dfe565fc8be2","height":121},{"kind":"receiver","address":"uregtest1hcl96n4hyw4vycda3w75f7nr3c0x0prruquxyp9hwzcrd65hmzxwcc8ktwjh8833jaf80k9dmrc3sdkt75nm6tcnzjk97dhyj5val80u","first_seen_payment":"invoice 6162","first_seen_txid":"043ee2a309355ec7f7f20f0403d5bebdad162bdaed239d13fbd6dfe565fc8be2"},{"kind":"memo","txid":"043ee2a309355ec7f7f20f0403d5bebdad162bdaed239d13fbd6dfe565fc8be2","memo_hex":"7a616e6172793a20696e766f6963652036313632"},{"kind":"pool_totals","height":1,"transparent_zat":625000000,"sapling_zat":0,"orchard_zat":0},{"kind":"pool_totals","height":134,"transparent_zat":80000060000,"sapling_zat":0,"orchard_zat":3749940000},{"kind":"merchant_field","key":"amount_zat","value":"1234567","path":"/webhook/invoice/6161"},{"kind":"merchant_field","key":"invoice_id","value":"6161","path":"/webhook/invoice/6161"},{"kind":"merchant_field","key":"txid","value":"d573f0579752473ed4fa3b0c56cebe2d1fc4d2e8557ffc9477ee87f85656c5f8","path":"/webhook/invoice/6161"},{"kind":"merchant_field","key":"amount_zat","value":"2345678","path":"/webhook/invoice/6162"},{"kind":"merchant_field","key":"invoice_id","value":"6162","path":"/webhook/invoice/6162"},{"kind":"merchant_field","key":"txid","value":"043ee2a309355ec7f7f20f0403d5bebdad162bdaed239d13fbd6dfe565fc8be2","path":"/webhook/invoice/6162"}],"merchant_is_simulated":true,"report_hash":"682d6114285973c72b37e16fd57146eacb576a76f0865ee2883240ad4ce034d4"}