Aptos validators agree on transaction block ordering in the mempool while blind to transaction contents, collectively decrypting payloads only after consensus finalizes the block.