Blockchain Transaction Lifecycle Security Standard Audit Framework

previous: Check Complete Hashes and Addresses | Contents | next: Manage a Secure Software Supply Chain

Verify Received Transactions

Statement of Requirement

All Actors MUST verify transaction integrity upon receipt, ensuring the transaction bytes implement the intents expressed in the metadata hash attested by the Producer, and MUST cancel any transaction that fails verification.

See it in the specification

Applicability

All Roles

Purpose

Ensure transactions match the intent expressed on creation

Audit Procedure

Verify that an integrity check is performed on all transactions received

See also Verify at Point of Delivery

Success Criteria

• An Integrity check is performed on all transactions received
• Transaction data is compared against all expressions of intent encoded in transaction metadata
• Any transaction that fails an Integrity Check is canceled.

Best practices

• Actors with a User Interface present intents expressed in metadata alongside the corresponding aspects of teh transaction from its rendered bytes. See also Present Crucial Information in Readibility-optimised form](req-present-crucial-info-readable.html) and Present Readibility-optimised Information

Failure Criteria

• An Actor can receive a transaction and operate on it without first performing an integrity check.

Common Failure Patterns

• Expired transactions are not canceled

Key Evidence

• System documentation
• Source code
• Inspection, Reperformance

previous: Check Complete Hashes and Addresses | Contents | next: Manage a Secure Software Supply Chain