Docs
Transfers
Move funds with the exact, signed amount — nothing added after you approve.
Shielded internal transfers
Transfers move funds within the private settlement model rather than broadcasting a transparent transaction. You send exactly the amount you review and sign.
What you sign is what executes
The full execution payload — including the destination and amount — is hashed and bound into your signature. The server cannot alter any execution-sensitive field after you sign; tampering invalidates the signature.
This binding is described in detail under Security model.