how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06!rail integritytransport envelope is unsigned, so its route cannot be proven
07✓post approval integritysettle_invoice unchanged since approval
why
rail_integrityenvelope_unsigned
transport envelope is unsigned, so its route cannot be proven
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 1039.9831064 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice 3fb5ff
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce d2cdccef8092d94f · unsigned
- clock skew
- -0.1s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 545c377d44687c04c2575d4963410477be550e0d9fa57e006b679c0a76a261c8
- transaction
- 75aa6659a305e9e37df805ff49f59268cb46c5205330d05680827d0d7d19a890
the receipt
- entry
- 4667 of 7560
- previous entry
- 30c1a01b85c697af9c32b15c044f12aee4ef5f3dcf8d236ddc4e8c3d2914e4f8
- leaf hash
- 0e847841be8a4aa2f6f46d84ffcab51c1d620b0704f76b4c94e4c8896011843e
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- XuC+r0PYCDnYuFgQYqB8aCuLM5S5Z72Htbg9ffMc36JhHsGorFyEWFKL4CI1vvZRWhI8VJUUAGzH6dUF9tSqCw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root ab4300211f…9c3585
0left30c1a01b85c697af9c…3d2914e4f8
1leftce1acc7f7deccbb036…6857ff5266
2right8a03332f23da523ffb…7742be6d4f
3left9350dc39da8ce4cd43…4494089da3
4left823027605dcbb41c90…c61bb0c2fb
5left6c5f4b88bf2dce32cf…3634650a07
6righte5ec36868de08557b2…1039225049
7rightcc9a222bfb3ac40cc5…dd0cf81745
8rightf4014cf557446bb624…43642a4211
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11right9191ac0041bcc7b810…2cdb31d8e7
12leftdc8527842d65829ab0…fb53df942a
root
ab4300211fb874d981d4f754451c23640d56937bf89acf0af663d1f5f79c3585