how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 117d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integrityx402, -0.7s skew, nonce fresh
07✓post approval integritypay_vendor unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBRZS2ZL3LLC53TYDDK5J2U7KU6BIK5E42WCDPNRJYH2JBFQ3WUZZCHD
- operations
- 1
- op 0 · movement
- 879.8626707 EURC → GCEOWOKPP2NHGJACBKTQPG5PIJ24QKBOYOTCSS2YSLVBWBAHCH6IT7HJ
- memo (not trusted)
- invoice 0d9a99
- tool_call (not trusted)
- pay_vendor(vendor="kite courier")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- kite courier · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 117 days
- rail
- x402 · as the mandate names
- envelope
- nonce 23a8920fedba57a4 · signed
- clock skew
- -0.7s against a 60s replay window
- tool approved
- pay_vendor · 4d1cb1714f0c4847781cf5a7…
- tool executing
- 4d1cb1714f0c4847781cf5a7… · unchanged
- policy commitment
- 7d904c650fc2deb15c054f3e…
provenance
- mandate
- bandwidth commit
- mandate hash
- 58b2171517b0016ad11ce866fd11c328f9e4876ec1c2cb33a8615353fa00c0e6
- rule hash
- 7d904c650fc2deb15c054f3e10016e162564cc0d4379f71a6e0fe0a534c1e9ec
- request hash
- 2e3a0524b2413701e8f71ed336530e56c3b51aec36430635f4283ef33f00ef3e
- transaction
- 4837a1f482456534d297edaca52bd70b8864d2341f1e1469546f0ab7b034febc
the receipt
- entry
- 5455 of 7564
- previous entry
- 41ed58396a1eb0d66695fa58580950a82acd745fb9220285695270670edc025c
- leaf hash
- 289887698387b0f4126e7ed341066c4985226cacca84d6ce9951c7a0c474bf06
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 1NCAKk+tMy2wNZMsBlhEJsNrkKMgeWMADfmjq4+j7jNQR//chodZ70aP2yRExpZQxQG1ZNAIJLDJv6jC37hVDg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root c8f7b58ea8…8b44c9
0left41ed58396a1eb0d666…670edc025c
1leftd58b7f59718965c489…308e73f580
2leftb860ea63512e24a4d2…220fed10b5
3left3418b04e578daa8d3a…87cbaace38
4righte928f21a8f66dd964b…85a46c3dd8
5rightb8e004914267d3c9c9…0300edea3c
6leftafcb566836b649fed8…abf892bc18
7right5ef8d47092b4a9a9fc…9d71f7af8a
8left4457566ed7240b9466…543dd4c1ea
9rightc1ee5dcce64b8e468a…839a1d2c47
10left120af2267f3c31cbf3…425e6ed072
11right9d7875d3dbd0928402…deacdfd5c1
12leftdc8527842d65829ab0…fb53df942a
root
c8f7b58ea8286b1de3bb97d3bcc2e588a5db3d16935d7a5b38199cc9848b44c9