how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays 248152.66, cap is 214961.31
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritympp-relay, 0.8s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandateamount_exceeds_cap
op 0 pays 248152.66, cap is 214961.31
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GA6NCKIO67IY5UY5LAYS5S2ZAT2JQUGWCULJEOYJAN5TP6VQOLJP2F4Z
- operations
- 1
- op 0 · movement
- 248152.6625923 XLM → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice 539e88
- tool_call (not trusted)
- pay_vendor(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- mpp-relay · as the mandate names
- envelope
- nonce d347ff59e3152531 · signed
- clock skew
- 0.8s against a 60s replay window
- tool approved
- pay_vendor · e1593e906c588f3acdcafb9d…
- tool executing
- e1593e906c588f3acdcafb9d… · unchanged
- policy commitment
- f15db4cb501110bfe44c87d8…
provenance
- mandate
- vendor settlement
- mandate hash
- 0accd5a31f9eb1c0c68d1584f8fb21ba4741c81466f83864926e86495a075d9e
- rule hash
- f15db4cb501110bfe44c87d8b96c5a83c92100469691a2f516026584bef2f4a7
- request hash
- ece9359b54cbf17da7bf749015864363cb4faafc174d2db9950c0f6fd7485796
- transaction
- 48c77c62dd0d80af98e8ec05bd44b36c81b85df673a75ea47ac44fe3d052e586
the receipt
- entry
- 3101 of 7660
- previous entry
- 71143861552f908f5b0356ac73ee9adceb86e5c401c330e4a102203053080c1f
- leaf hash
- 0540b914387f05a0227ecd3d4ec63fac979ef5ccc8f061a948998d33d2d6906e
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- wZovrdNLln9C3BJN2egDT+uAwh1CkOufr7U9/OiVCz4CGnBAoVUcsed22cGvc7/+ee4kS4s58lB0pxYW6dukAA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 8ba69882e3…4ee105
0left71143861552f908f5b…3053080c1f
1right4fe548fc8e25de0610…1aeb3edbad
2leftf4f917eb409f5b75a8…cffd6aa921
3leftfc24d2f32f898ce4bf…d65949de3c
4left1daac9b1f93e8f4b4f…fa7a9975ff
5right28cbac2fb4e1c9d187…dd05cbfaf8
6right01258f1bbd8ecdee06…f6cceb83e8
7rightb301653ed33d37c64f…649ddab9bf
8right2a9459ab386a2a6911…2cfee0febb
9rightd455e87f03300cd42e…d51b14eb31
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12rightca59d749273bffef13…f55b548a2f
root
8ba69882e32fc6b98e6f3cb30d3471b8da00a60d00da7007e84aa34abf4ee105