Honest question, in op_ctv what stops an attacker from trying to guess what the expected transaction looks like to get the expected hash?

#Bitcoin