how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 117d ago
05!privacymemo carries an email address, and this field is written to a public ledger
06✓rail integrityx402, -0.6s skew, nonce fresh
07✓post approval integritypay_vendor unchanged since approval
why
data_leakemail_in_memo
memo carries an email address, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBRHRTFEUU24FA65267Q7OP5FNSVGF54KGFUYR5ORXS7WVKYEVDYWLGM
- operations
- 1
- op 0 · movement
- 1202.4953722 EURC → GCEOWOKPP2NHGJACBKTQPG5PIJ24QKBOYOTCSS2YSLVBWBAHCH6IT7HJ
- memo (not trusted)
- invoice for j.okafor@kite.example
- tool_call (not trusted)
- pay_vendor(vendor="kite courier")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- kite courier · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 117 days
- rail
- x402 · as the mandate names
- envelope
- nonce 13a70df85feb6b27 · signed
- clock skew
- -0.6s against a 60s replay window
- tool approved
- pay_vendor · 4d1cb1714f0c4847781cf5a7…
- tool executing
- 4d1cb1714f0c4847781cf5a7… · unchanged
- policy commitment
- 7d904c650fc2deb15c054f3e…
provenance
- mandate
- bandwidth commit
- mandate hash
- 58b2171517b0016ad11ce866fd11c328f9e4876ec1c2cb33a8615353fa00c0e6
- rule hash
- 7d904c650fc2deb15c054f3e10016e162564cc0d4379f71a6e0fe0a534c1e9ec
- request hash
- 0879a052ef2799140142fd85a14040e392e8a5cfb208da6eaa8b50375e0ff56f
- transaction
- b6fd0ed2b2ad47808204dd7116cc411d5054847c2624982fad0ae4e5fec1b44e
the receipt
- entry
- 5064 of 7708
- previous entry
- dbe9472f3d6fad541e5f201c396f9224a27d10490eab61708fb9fdd848f5a7fe
- leaf hash
- 1044dfcaabbc1dbb2219676782b6dfbc05caceef6288973dba5cedaf736c5131
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 4UqFKDdp7xOsJcM9HM5+rIiukUrpk2UIW0jx+ddtYiCZGves2L7q0bfkuUE2dI176FpY2Xy8sN+YmykYhNzGCA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 40be9556a5…dd8fbf
0right360dc959f8f57cf852…0b3cc701e9
1right8671ff3fbffef3e930…91392b5473
2rightae4e9a641458524092…de97120a05
3left489b3be31f81536c0c…83c8cf49ea
4rightd88cea9021c88b6807…a9ea3476eb
5right36dc34ce0dacf8bc58…01efff429c
6left714610ebaeb03b5a75…41bba3b960
7left79f7450aea35c41d62…5e9e49deb3
8leftaf2867073a354f4d40…d7f24e6c47
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11right94047116d3ba1b1092…4fb86ffa9f
12leftdc8527842d65829ab0…fb53df942a
root
40be9556a5b7459bbe3f90736f003d3ac5397e1ec50ad9cb8ae64b5533dd8fbf