Before sending a transaction to a notary who does not check, it is filtered as follows:
stx.buildFilteredTransaction(Predicate {
it is StateRef || it is TimeWindow || it == notaryParty
})
(see NotaryFlow.kt in the main Corda repository). This means that a non-auditor notary will only see:
- Any inputs, in the form of
StateRefs - Time window, if one exists (since the notary is also the authority of the timestamp)
- Transaction notary identity
Merkle (. https://docs.corda.net/_images/merkleTree.png), , .