• Fetch + decrypt + fully verify the original transcript.

    Parameters

    • opts: DecryptAnchoredTranscriptOpts

      RPC URL + Storage Program address + L2PS instance (caller must be a subnet member; otherwise AES-GCM auth fails).

    Returns Promise<ChannelTranscript>

    A ChannelTranscript whose every component has been validated end-to-end — callers do not need to run verifyTranscript again.

    On the first of:

    • SP not found / wrong shape / unknown transcriptVersion
    • ciphertext hash does not match the stored contentHash (tamper)
    • AES-GCM auth fails (= caller's L2PS instance is not a subnet member)
    • decrypted channelId does not match the anchor's channelId
    • anchor-party transcript signature is invalid
    • any embedded ChannelMessage signature, sequence, sender ∈ members, or per-message channelId check fails (delegated to verifyTranscript).