how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 107d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 1.5s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAZX2QOPWIJMCJLQTTFPKBNKBIS7KRPS5A3TS4UAAAM6XZTMEWBRWWMV
- operations
- 1
- op 0 · movement
- 2170.2916277 USDC → GAJPJ4LEUZBCG6WF76DJIFUQT5F4FJV6LPVBUMKHJ7VZ6RUBEPJYJZRB
- memo (not trusted)
- invoice 8926a5
- tool_call (not trusted)
- settle_invoice(vendor="sable audit")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- sable audit · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 107 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 573c324f62abf6d1 · signed
- clock skew
- 1.5s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_cloud-spend_12d8
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 1f36447f712cf8a0bb9f59c74f608145973387bfe1f356d17fb8fba14b948bf8
- transaction
- 1dd7b944f24320f3d99205c2044700d536bd299b6a7ae5518892be54a85b15b7
the receipt
- entry
- 6384 of 7288
- previous entry
- 5e7052b586231316b5ec26f21b7acb55a0e1c5be4355218e8dfabe31158a34b2
- leaf hash
- 16003890608b6412176f1216d0e1dc80509d8ad99597ec501115d762c69a9f38
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- sqdDXD0hNJ1DZe57d98aJe2R64QAmXDeak2k11pBV+q9ezouIQDrQOYpPAf3WQIhUOac4EIZyixMkaZkj8ahCA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root a882c9cf79…a284c0
0right145026865c83b6629b…33f8a4cbb6
1right9e2a0f70873206b3db…9060e62a8a
2rightc79022a7b180904c26…3d85d43b3b
3rightb2e8098012a064852a…3aeba14248
4left72404cc76137d83ede…eb425f7e7a
5lefteeac0b47ead8516325…c9d02691a3
6left2837f0d2fdf056aff2…51733dfe2c
7left281c02aa0e8b3e7d37…dd9f4535ca
8rightf1802e138ad8e1e868…7ccc6953ce
9rightf1501cd5c083126291…586061c99b
10right1baf5ad3e780eeb319…751bbc6056
11left4043c82f03366d541c…af7a3fd4fe
12leftdc8527842d65829ab0…fb53df942a
root
a882c9cf79c7aeb81aad052204af2a76aef068f0c564e5c2beed13f6d7a284c0