def audit_nested_segwit(scriptsig_hex):
    # 1. Identify the length of the redeem script
    try:
        script_len = int(scriptsig_hex[:2], 16)
        redeem_script = scriptsig_hex[2:]
    except:
        print("[ERROR] Invalid ScriptSig format.")
        return

    print(f"--- Nested Multisig Audit ---")
    print(f"[*] Full ScriptSig: {scriptsig_hex}")
    print(f"[*] Length: {script_len} bytes")

    # 2. Check for P2WSH (Multisig) - 34 bytes, starts with 0020
    if script_len == 34 and redeem_script.startswith("0020"):
        print("[STATUS] MATCH: This is Nested SegWit Multisig (P2SH-P2WSH).")
        script_hash = redeem_script[4:]
        print(f"[*] SHA256 Script Hash: {script_hash}")
        print(f"[*] Security: 256-bit (Collision Resistant)")
        print(f"[*] Action: Validator must now look at the Witness Stack.")

    # 3. Check for P2WPKH (Single Key) - 22 bytes, starts with 0014
    elif script_len == 22 and redeem_script.startswith("0014"):
        print("[STATUS] MATCH: This is Single-Key Nested SegWit (P2SH-P2WPKH).")
        key_hash = redeem_script[4:]
        print(f"[*] HASH160 Key Hash: {key_hash}")
        print(f"[*] Security: 160-bit")

    else:
        print("[STATUS] NO MATCH: This is likely a Legacy P2SH spend.")

# --- Simulation ---

# Case 1: A standard Nested Multisig spend
# 22 (hex for 34) + 0020 + 32-byte hash
p2wsh_nested = "2200203333333333333333333333333333333333333333333333333333333333333333"
audit_nested_segwit(p2wsh_nested)

# Case 2: A single-key Nested spend
print("\n--- Next Audit ---")
p2wpkh_nested = "16001462e907b15cbf27d5425399ebf6f0fb50ebb88f18"
audit_nested_segwit(p2wpkh_nested)