Hash-derived tags in shielded transfers that prevent double-spending by marking commitments as spent once revealed.