how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 1.2s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAZX2QOPWIJMCJLQTTFPKBNKBIS7KRPS5A3TS4UAAAM6XZTMEWBRWWMV
- operations
- 1
- op 0 · movement
- 3560.1216266 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice 72a7c9
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 67fef80c5c704037 · signed
- clock skew
- 1.2s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_cloud-spend_12d8
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 41406d1f2a9eb804c7856cefd2d33afb2a266842a33c37de90ffc7bcd767883f
- transaction
- 0848671f702a36dd0b416700229ac7019c09547fe67778a913b5329260e6563c
the receipt
- entry
- 2185 of 7681
- previous entry
- 754df454f6a18b4818d5d23232261bfd0f1be0e683b442701104d97d3f9b6a50
- leaf hash
- 13b1092e62a2648164eca1de6f5bda68f84bb4a9b3cf7fb4408043172663e471
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- Zw3Q5pEnlawUiCjl8kTHjKBVoW0xOr6Bwj/SFdsuSnf6064e8kIhxOyOF2vMVa3RMDjydquMiTSEpHkvHAqlDQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 6c3ee192db…4b7273
0left754df454f6a18b4818…7d3f9b6a50
1right96eebea39d5ae6ca6f…cf7af116a4
2right0a3f4b8a657b6a74ca…9d11b0ca82
3leftc18f0e377471b30143…42f87d4915
4right1ed2b1fb54fb6a6440…f1517b24c7
5right4ad08f58cd4768591a…e88c994557
6right58b1e5f0fb69088c4a…04a24f0797
7left80838e123e3b67694c…002c788183
8right343106862a40792d91…7061efa225
9righte799ad94e5ec8f5b18…1eb984ac76
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12right6783f14a2e7d9c07c7…23055ed3ca
root
6c3ee192db4fce1ba8d8d1c066af681393bfc5d40a224ba8277f840b9c4b7273