Docs
Transfers
Move funds with the exact, signed amount. Nothing added after you approve.
Shielded internal transfers
Transfers move funds within the private settlement model rather than broadcasting a transparent transaction. You send exactly the amount you review and sign.
What you sign is what executes
The full execution payload. Including the destination and amount. Is hashed and bound into your signature. The server cannot alter any execution-sensitive field after you sign; tampering invalidates the signature.
This binding is described in detail under Security model.