In the implementations I’ve designed - both parties to the transaction control the content of the transaction payload,so it’s hash is not determined by either p

In the implementations I’ve designed - both parties to the transaction control the content of the transaction payload,so it’s hash is not determined by either party (the attacker, in particular). The subset of hosts is determined by the hash of the transaction.