RPC URL + Storage Program address + L2PS instance (caller must be a subnet member; otherwise AES-GCM auth fails).
A ChannelTranscript whose every component has been
validated end-to-end — callers do not need to run
verifyTranscript again.
On the first of:
contentHash (tamper)channelId does not match the anchor's channelIdverifyTranscript).
Fetch + decrypt + fully verify the original transcript.