how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopemandate signature does not verify against the stated issuer
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, 0.4s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandate_authenticitymandate_signature_invalid
mandate signature does not verify against the stated issuer
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GDSPNKK5N65L5URZX46SJE2YBD4T5ZPFLDSVTWQIJSIXS436CYWF4IFL
- operations
- 1
- op 0 · movement
- 7058.8365633 USDC → GBSI5MUEIATY2GNK7A6NDSJRMNY644FIOSEJJ6UYE2AZAIIATF3NMPIH
- memo (not trusted)
- invoice a8b768
- tool_call (not trusted)
- buy_capacity(vendor="ferry logistics")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- ferry logistics · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 287 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 3c6ae02832694943 · signed
- clock skew
- 0.4s against a 60s replay window
- tool approved
- buy_capacity · e36a5e92928cb61982b86bfa…
- tool executing
- e36a5e92928cb61982b86bfa… · unchanged
- policy commitment
- a3959ef915d5368820c53ef9…
provenance
- mandate
- customer refunds
- mandate hash
- a6fe0774aa8a60312784220227a16c52c711988d4dfe0bf0e426907a77ba7055
- rule hash
- a3959ef915d5368820c53ef9c3def8ff05e256ee3c37f1b68d5a33eb0332cad8
- request hash
- 110ef450740efb310af2fc6de0be15d553bdc43290d14b647add67ceba85ec70
- transaction
- 2e6fddd81984fc144def878b100373b6e1f6230fd72d1b9b8e97175174a14365
the receipt
- entry
- 3926 of 7680
- previous entry
- fbe6e7e10fa6f7d849151439acb067af2de231fdae070956f2823981fe9e761a
- leaf hash
- 0ac243dd0e34f9be14d0f7ff218bb8e6f8d7d44ff57637480afb3ffa7932fa21
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- rOz37ZXLJ/D35Ek1e2jXiJrSP2RhQbxWQTwdFuV+I2hFTG3w1DByQLITgxhcdOfDktTIPeFcLco+j9tds9wlDg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root aa38ca93be…9f0ea5
0right856be74efe6bb12ccc…43e0963158
1leftbdd79a1682bfc393d2…74df9d173b
2leftdd9a4b7754aeb4b155…8540f5fc38
3rightffa37649eeb69fe2d9…f05151de6b
4left5125d4eba7baf69117…5aed45ce91
5right3680fdffde4207e468…3038558f52
6left645738fcda46eccb96…87c433936e
7right38df458c4668a6ad01…4d683ae987
8left29c454556c69d47a2a…2632854b0d
9left1f8bece408d15a8047…f91777f0e3
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12right84061a221d57e96b30…20d7ad9857
root
aa38ca93beb4e5ba52d88daabcf374f919463dee38d5a174240bda60ed9f0ea5