Transfer authorized
Every challenger watching this chain independently re-evaluated the policy against the same inputs and none could produce a proof that the result differs. This is final: the window cannot be reopened.
No ABI available for selector function swap(address currency0, address currency1, uint24 fee, int24 tickSpacing, bool zeroForOne, bool exactInput, uint256 amount, uint160 sqrtPriceLimitX96) — switch to RAW to inspect the calldata.
One aggregate BLS signature is submitted on chain, not one per operator — so an individual signature, the prepare/commit phase it was produced in, and per-operator latency are not recoverable from any record. Membership above is exact; the parts the gateway discarded after aggregating are not shown rather than guessed.
No policy in this set reads private data, so its operators produced no enclave attestation and none is stored on chain. Privacy is decided per policy — a set needs only one slot touching a privacy namespace, and then the whole set runs inside one enclave request. Correctness here rests on the policy re-evaluation proof any challenger can generate — section 07 — not on hardware isolation.
| Slot | Policy | WASM output | expireAfter |
|---|---|---|---|
| 0 | 0xe3c043a6039ac44c69f23e2db5ad09e96f220c50 · 0xe3c043a6…0c50 | 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 | 300sets response expiry |
newton-cli policy-client status --registry 0x0dbd6e44a1814f5efe4f67a00b7f28642e3064dd --client 0xfa2B8F045EB50Cc6F8e13E82e10A41Ef45732880
The aggregate signature verifies against the operator set registered at block 11,919,249. Anyone may re-run this check — and challenge submission is permissionless, so anyone who finds a mismatch can act on it directly.
Receipt hash