how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 107d ago
05!privacymemo carries an email address, and this field is written to a public ledger
06✓rail integritysoroban-direct, -1.2s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
why
data_leakemail_in_memo
memo carries an email address, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 2449.8053904 USDC → GAJPJ4LEUZBCG6WF76DJIFUQT5F4FJV6LPVBUMKHJ7VZ6RUBEPJYJZRB
- memo (not trusted)
- invoice for m.chen@sable.example
- tool_call (not trusted)
- settle_invoice(vendor="sable audit")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- sable audit · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 107 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 4d265f98b6c5ee36 · signed
- clock skew
- -1.2s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 5791e4d63320fd73ced04c2ebb513494c5358ddfcf30efc65169ec18222b49ae
- transaction
- 9e6796793d5baaf3e421680898457a00a15508a5641b58d4e7c890faac594ffc
the receipt
- entry
- 5147 of 7451
- previous entry
- aedc39966e7b2f9e2b55bf2d6c130abd5c6df12724e4491264fc28c04ed4088a
- leaf hash
- 01f9aab449b204390f30ae873567718353d5a63fe3828327bfaf3ea9d68946aa
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 0PIaySwbTyfbBa2CPZghPZLY/6L7abqD+/grUvhoIBPB4/gtngdQpeVvWG2+ffGRfNAjzTDiTe36m/QFJwSRBA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 109870a918…c98145
0leftaedc39966e7b2f9e2b…c04ed4088a
1left9926e9d3209583a59c…ef538f2c3b
2right7747a59fa18da15c24…28ae43ae3f
3left4341053a03320d930d…ad72363ddc
4left78d4e012e3807e7bcd…9b3ff32389
5right42e51a3ea2831fa428…d444ad2075
6rightf842666501ceff1576…c5eb08594a
7right5d1d5e095e6e95b50d…281fd032b1
8right0ac57a3edabcb320f3…f795a447e3
9rightc1ee5dcce64b8e468a…839a1d2c47
10left120af2267f3c31cbf3…425e6ed072
11right8dd41627081ad90fd5…0ef169ea4b
12leftdc8527842d65829ab0…fb53df942a
root
109870a918cc2d9a5d220011d6b808c4d3bf05e1098d88e567725cb61bc98145