how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritympp-relay, 0.5s skew, nonce fresh
07✓post approval integritypay_vendor unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GC27NDXT4MOALGAT2RWMYHJEH5KBM5NAT4WZCXDNKU2BOWMN4RELXGRP
- operations
- 1
- op 0 · movement
- 9061.6113230 XLM → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice 6259a2
- tool_call (not trusted)
- pay_vendor(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- mpp-relay · as the mandate names
- envelope
- nonce 4002548df1177a1d · signed
- clock skew
- 0.5s against a 60s replay window
- tool approved
- pay_vendor · e1593e906c588f3acdcafb9d…
- tool executing
- e1593e906c588f3acdcafb9d… · unchanged
- policy commitment
- f15db4cb501110bfe44c87d8…
provenance
- mandate
- vendor settlement
- mandate hash
- 0accd5a31f9eb1c0c68d1584f8fb21ba4741c81466f83864926e86495a075d9e
- rule hash
- f15db4cb501110bfe44c87d8b96c5a83c92100469691a2f516026584bef2f4a7
- request hash
- 090c1c6fa297f0fbd3623c7ed73dbc60d408560e2523a057685f04e182087f3d
- transaction
- 8f4d9b464634f08da73448113d8c98a3a2d3ca6c1081708d1b618867ff46c3d1
the receipt
- entry
- 4793 of 7562
- previous entry
- 132ac117323380b2750f2c85e26492c12b38378ed4fda2badddec4824ea3614b
- leaf hash
- 09acac29251e24c5aa919ab5270ee882e12a8e08b1ae5b3b7ce7b87ab320cbee
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- pejDMgohZ101zckzAYt+ka7UQnIz0FWBswxIXvlEkboYVgRjHiUlfu4HAY4tvEMJHZcz0CRKcV1p002anNSpDw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 1842d0749b…0b95f1
0left132ac117323380b275…824ea3614b
1righteb0ff4d7b8319cdeec…a02d0d3d3c
2right63c17b12f05e05fb37…fd456a622a
3leftb1231cd7cccf25db4c…032b934184
4left8e41b921f91d25d092…65b78663ce
5left75c1c05e1b29ce21e2…0488dbd638
6right029624cbfb49088154…b769e4bfad
7left8ff71191901628c93a…62d334e864
8rightf4014cf557446bb624…43642a4211
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11rightc2221912835f5c93e8…6c6be5bd24
12leftdc8527842d65829ab0…fb53df942a
root
1842d0749b8a082e95e7ce3bc46e027e89fddfc51ec035e46b79b01bcf0b95f1