Opt-in proof that the server co-signed what it handed back.
Be precise about what this buys, because it is less than it sounds like. It
does NOT protect a preimage or any other condition value: those reach the
server at submitTx, before any of this runs. What it buys is a loud,
immediate failure instead of a caller reporting success, watching nothing
confirm, and learning the truth when the counterparty's refund lands.
Opt-in proof that the server co-signed what it handed back.
Be precise about what this buys, because it is less than it sounds like. It does NOT protect a preimage or any other condition value: those reach the server at
submitTx, before any of this runs. What it buys is a loud, immediate failure instead of a caller reporting success, watching nothing confirm, and learning the truth when the counterparty's refund lands.