how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06!rail integritytransport envelope is unsigned, so its route cannot be proven
07✓post approval integritysettle_invoice unchanged since approval
why
rail_integrityenvelope_unsigned
transport envelope is unsigned, so its route cannot be proven
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAO7VSWNNZZQWYUNNSUJXO6FWEHC5VLUGDWAEOOWG5DRYYY56Q2Q52LZ
- operations
- 1
- op 0 · movement
- 16348.6926977 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice 4c0c15
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 3bed090d669e0c37 · unsigned
- clock skew
- -0.1s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 7af0b8828c1560742022fd8e24f6e6a0467b7914777fa6efde6d45120108a1a3
- transaction
- 7db6aa9d193fda608ff73854e0c3d7c9051bf51e4581708d6deda5d43a68e25f
the receipt
- entry
- 4157 of 7560
- previous entry
- 74134b14410713b3e44ccbe9ffbff75fdfd6d528c5eb8317bfe3706482db8159
- leaf hash
- 269b319bc80103bc71896bc57b344859a34cc2e2b20672ce08f8fe8b84655826
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- WMn+kpu/eD9y+Sw+mqisLcpFUxtHD0Fx5s5kOsdG/bR0ks9/9YbqlaSXfw/h3RMAryCqFTU7W3mu7UF29YKYAA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root ab4300211f…9c3585
0left74134b14410713b3e4…6482db8159
1rightda6225b408c9c601f4…26b3026eff
2left3403fe60132c998dd8…f0ff5197ea
3left5215cad8ec6e7a0356…f5ecaaaffc
4leftc89b255b18114e358e…cbc2ff510b
5leftd5b36eb8149fa1bd17…c51c419f6b
6rightd7b4a8b5efa1bd2d55…86b241050b
7right2c0f709ad6c0bf69b1…d98eddf66d
8rightc4ef35061cd7edaa58…68e4521d67
9rightcceadbe3aa211130c6…9fbf263854
10right78d79e50c934cffc8b…2cef11de30
11right9191ac0041bcc7b810…2cdb31d8e7
12leftdc8527842d65829ab0…fb53df942a
root
ab4300211fb874d981d4f754451c23640d56937bf89acf0af663d1f5f79c3585