how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeagt_supplier-settle_1359 is not among the agents this mandate names
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, 0.5s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
actor_authenticityactor_not_authorized
agt_supplier-settle_1359 is not among the agents this mandate names
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 6826.3302008 USDC → GAJPJ4LEUZBCG6WF76DJIFUQT5F4FJV6LPVBUMKHJ7VZ6RUBEPJYJZRB
- memo (not trusted)
- invoice edc80e
- tool_call (not trusted)
- settle_invoice(vendor="sable audit")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- sable audit · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 107 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce f0bfb0b45a0aa860 · signed
- clock skew
- 0.5s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 8a9876b18ca4816beb707084920af4aa7bac37692358b4846d0ff868f08c1c85
- transaction
- e734975effd1d5bea147892ed5204855c7e36a16c4f3a1ac1b445cda1d76e9a1
the receipt
- entry
- 5655 of 7402
- previous entry
- 5b60231d325b833807358d59385a1590617e40924a295d7b297eb304bfbcd8e6
- leaf hash
- 0d3f39db2bd3c24dd6739d37d58be20833e42c498b52e599f3c06e723475a5cc
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- LJL4t0UtaKhSbi6pkG97Jkz5OltNwz4yFP9SA29oZoZSl0/n2+1Q/5J8K4/PwtQLFBJ7WgyoQs9uGUBQXPirCg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 308aaf868d…afd4a1
0left5b60231d325b833807…04bfbcd8e6
1leftf79982a1dcefda1638…f4578a42b2
2left0706bee1b117985508…925c6958e7
3right7decc92263521131d5…6f85712df3
4left64167639f02d9bf523…c21328e0c4
5right340be4087bbfc80407…d1b132c487
6right836b6e25c08d699e08…cd1ddfb9f6
7right5cfacfeb6960aa5e16…21a087e24f
8right23c4f0831b90f59516…a26a59256b
9left3fe0d5d17979ce94c0…bd6b56d925
10left120af2267f3c31cbf3…425e6ed072
11rightd3c0bfb7876a95c9b4…a043cba499
12leftdc8527842d65829ab0…fb53df942a
root
308aaf868d3fbda789f304cf6cdbc613041b63a44b31595ac0fcd09d49afd4a1