how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays 4175.15, cap is 2293.58
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integrityx402, 0.9s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandateamount_exceeds_cap
op 0 pays 4175.15, cap is 2293.58
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBRHRTFEUU24FA65267Q7OP5FNSVGF54KGFUYR5ORXS7WVKYEVDYWLGM
- operations
- 1
- op 0 · movement
- 4175.1530508 EURC → GCEOWOKPP2NHGJACBKTQPG5PIJ24QKBOYOTCSS2YSLVBWBAHCH6IT7HJ
- memo (not trusted)
- invoice 65eb98
- tool_call (not trusted)
- pay_vendor(vendor="kite courier")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- kite courier · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 117 days
- rail
- x402 · as the mandate names
- envelope
- nonce 210d4000aa182eb4 · signed
- clock skew
- 0.9s against a 60s replay window
- tool approved
- pay_vendor · 4d1cb1714f0c4847781cf5a7…
- tool executing
- 4d1cb1714f0c4847781cf5a7… · unchanged
- policy commitment
- 7d904c650fc2deb15c054f3e…
provenance
- mandate
- bandwidth commit
- mandate hash
- 58b2171517b0016ad11ce866fd11c328f9e4876ec1c2cb33a8615353fa00c0e6
- rule hash
- 7d904c650fc2deb15c054f3e10016e162564cc0d4379f71a6e0fe0a534c1e9ec
- request hash
- 777035ea06add938a0c069249c1396bc49ca54aa8033280683ee25fbb01be741
- transaction
- 532fac9650f0cbc91ad1139fa4a7f12805aea5072b15c1c0bf98848436cfb176
the receipt
- entry
- 5516 of 7406
- previous entry
- 7a78b6e13db9674398bbf6415f37fe53c6a2470c5fc10e692f77f052ee2f001f
- leaf hash
- 2867661027a741d07a51f4ae5877d105ce7dc6877abb6b38894b2168dd36b5ed
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- qfiOZVmK8Oa0jGRvy1EhoeFVQYgIb3+kTOnXpOr4NQapPGP5/4NQekO6bKA1Pn4pvYcMg9sHGi3e0pnIaDRSDQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 1d93d28ccd…36a7f5
0right3e4f57c6c0f134fd16…f6e6ad6cdd
1right036f0a6efc1f83818c…ad65c6a8a2
2lefte491688551e3973b3e…518e3074c6
3left0db0bd5ab3b2912a14…0cc33bb0cf
4right130d2c4a190f0553c8…72d9065224
5right3872afe61389897d78…09c3c3f892
6righte190dcbd679803e7aa…7b4289c505
7leftcf832b259177631891…51131d8cfd
8left4457566ed7240b9466…543dd4c1ea
9rightc1ee5dcce64b8e468a…839a1d2c47
10left120af2267f3c31cbf3…425e6ed072
11rightfefea12d8df29f369c…c6be990466
12leftdc8527842d65829ab0…fb53df942a
root
1d93d28ccd1b7f353c7b5a4e615f030dd36a312c3c0de432d53c97173736a7f5