Skip to main content
TSN is designed to bind a settlement to the authorization and predecessor state it was created for. When an accepted transition advances the state atomically, a repeated request refers to an already-used predecessor and cannot apply as a new transition. For a balance-changing action, GPRU is intended to prove that the hidden user state is current and that the proposed change follows from it. TCAP governs the funds and applies valid authorized transitions atomically. The hidden-head proof path is not established end to end, so do not treat this design goal as an active guarantee until the relevant flow is verified. If an application receives a timeout, it should check the transaction signature and current status before retrying. A service timeout alone does not prove the transaction failed. An expired sender-signed transaction must be prepared again and approved by the sender. The exact replay/nullifier contract and implementation evidence belong in the repository documentation.