how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06!rail integritytransport envelope is unsigned, so its route cannot be proven
07✓post approval integritypay_vendor unchanged since approval
why
rail_integrityenvelope_unsigned
transport envelope is unsigned, so its route cannot be proven
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GDM7DWHXNMLJGUQLAWJDBBVHIO3A3IJ6EKPUWBGYAK6HHJI6EU3SIEJR
- operations
- 1
- op 0 · movement
- 3855.8199737 XLM → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice d89b50
- tool_call (not trusted)
- pay_vendor(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- mpp-relay · as the mandate names
- envelope
- nonce 009fe6c243d85f44 · unsigned
- clock skew
- 0.4s against a 60s replay window
- tool approved
- pay_vendor · e1593e906c588f3acdcafb9d…
- tool executing
- e1593e906c588f3acdcafb9d… · unchanged
- policy commitment
- f15db4cb501110bfe44c87d8…
provenance
- mandate
- vendor settlement
- mandate hash
- 0accd5a31f9eb1c0c68d1584f8fb21ba4741c81466f83864926e86495a075d9e
- rule hash
- f15db4cb501110bfe44c87d8b96c5a83c92100469691a2f516026584bef2f4a7
- request hash
- 1cd8120f3b04e2161119ec24d444d3141685c69102046e9fe07a8a074bc27334
- transaction
- 26d9a12fb88d38bd935653d47cc3affe4ed9aa217f04ac393bdf1cfc5e9a4128
the receipt
- entry
- 6911 of 7341
- previous entry
- 5ae102ddb32782da53d54fb9b8befbe772133bee74f12c5cb7e0f151cbbf7659
- leaf hash
- 2a8dd36110ea86641dcfe8778610c0b426114677e809d78d3aaa4202f683462e
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- GniErl6e+y3IsflFogKeDAeHhOSd4NNCBOfbPTmssoYtl/TmJ7rDHdeWF0wmYxVGgEuIFoip/yunkYY2lRg/DQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 560bf0f5f0…bb115f
0left5ae102ddb32782da53…51cbbf7659
1leftcb29fce2f8daad4772…c086b94206
2left133cd9df937d5b8928…991efc0a45
3leftc637f2709ede9525e7…2c1abfcf6a
4left3fd5b0157ba08f5236…ab92878e98
5left5cdc11b7ba46adbbe8…8c49f77ddf
6leftad4a66150e75485cfd…880872bd02
7leftdd24b7b0c365c182ba…ea9c29ac8b
8right2e9def86dd618400c6…2405603d8f
9left96c0eb2bff9c529bfd…5dcced0eb9
10right24247ebec0c31f8bea…61381a5599
11left4043c82f03366d541c…af7a3fd4fe
12leftdc8527842d65829ab0…fb53df942a
root
560bf0f5f0d62ad0ef633bf63bc60afaa05a4ddbd6378798bdf836e783bb115f