how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, -0.6s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAO7VSWNNZZQWYUNNSUJXO6FWEHC5VLUGDWAEOOWG5DRYYY56Q2Q52LZ
- operations
- 1
- op 0 · movement
- 9476.5952162 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice a16841
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce b5fb6ba768dd2545 · signed
- clock skew
- -0.6s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 2292c87c44078006f2115e19a241d00e92940a1098fdfc8b5986232fa488ef5f
- transaction
- ef33f7b6e6cf99946728eafa40354c5d744bed049b2952b359441fab07ba1d02
the receipt
- entry
- 4561 of 7403
- previous entry
- fbd260c19ecaf74f6fa82733fbbb6209fb4e3e915fe13b1f0b7b120cfb356309
- leaf hash
- 109ecf5f5088eb5b0448e05cd059212bd73ec0d4a8b368d1aef2e1793da4b58d
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- w9ZUsiI9/dVK5w/pkUDeVMgmPo1UnhDVbzOtCHxXe5K7ACkgUmfvxsGXL6vuxXoJtK0uXIxgc3FXNGYN74DwDQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root aa7beee6a2…fdc67e
0leftfbd260c19ecaf74f6f…0cfb356309
1rightb49fbf7fa23ad2f9c2…a583e09ed9
2right01aab94e534c2e99f1…af631576e5
3right645fab7692ca7f6f21…4af5642c9f
4left9c796b5f1b16881bf4…8f0de026a6
5right2f31b2a3353b258b8f…2ff433b5eb
6leftbfea747cbce68a2344…cb14b69e36
7leftdaee7ac1aefaa3c4ee…1a78985402
8left4e4bc411d7266f864e…35a4b2046e
9rightcceadbe3aa211130c6…9fbf263854
10right78d79e50c934cffc8b…2cef11de30
11right0a030a216cac3b8e8b…93bd2e19c0
12leftdc8527842d65829ab0…fb53df942a
root
aa7beee6a23cfffb103ba3dd25c2aa580ed55951f24bc222aa6f0b7056fdc67e