how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritympp-relay, 0.3s skew, nonce fresh
07✓post approval integritypay_vendor unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GC27NDXT4MOALGAT2RWMYHJEH5KBM5NAT4WZCXDNKU2BOWMN4RELXGRP
- operations
- 1
- op 0 · movement
- 9587.5790674 XLM → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice 97e47d
- tool_call (not trusted)
- pay_vendor(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- mpp-relay · as the mandate names
- envelope
- nonce 6a3767c5f651cf1f · signed
- clock skew
- 0.3s against a 60s replay window
- tool approved
- pay_vendor · e1593e906c588f3acdcafb9d…
- tool executing
- e1593e906c588f3acdcafb9d… · unchanged
- policy commitment
- f15db4cb501110bfe44c87d8…
provenance
- mandate
- vendor settlement
- mandate hash
- 0accd5a31f9eb1c0c68d1584f8fb21ba4741c81466f83864926e86495a075d9e
- rule hash
- f15db4cb501110bfe44c87d8b96c5a83c92100469691a2f516026584bef2f4a7
- request hash
- 35de298d8d6da6e6793e05a6bba42a752f9318d2a92ac1fdd62588e52e2a7ced
- transaction
- cfdee34d344ca04e393a9bf4e21d6af095b6a89b14ab3d1894048fe129448e75
the receipt
- entry
- 2801 of 7840
- previous entry
- 91f71c1ce04ba605de4f92bbaa2b3f45894974e3d52eb38f3c405955eec571bd
- leaf hash
- 2d3bb9706e92dac4223613aa2c71730f69ddb9c1de554780eb53ae8c0dc3baf6
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- mYY8uRiEWSwKCU3AInmuYZOb0bB5C3kxddOsdLVwPbcZUZIBKpUBIrEgOy+M9ZF6vA5Pr0ezNgsyItv3RW9/Cw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 3b37905cb1…e45ab9
0left91f71c1ce04ba605de…55eec571bd
1rightdfc43f9cd04acc48d8…ccf1f904f0
2right3a3331c446bdf91e4b…9d5e74baa6
3right1b901f845d76b5d4f1…f3304ce4f3
4left8506a942f652cb8d88…ed25037e12
5left8600cbdacea7dfd99b…5ce7437a0f
6left4ffaa8506f56810eeb…23989a189d
7left7b23e2c4e24f966cea…5ab2de4da5
8rightbd4d9f0271ede98c3c…f686b62b8e
9left2602c3d2391ba4609c…a3f4763fe1
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12righte75fcd6c33593889b0…c25dc8f178
root
3b37905cb1cf9169b58931dd3a3519bed43e33b6a1c96f56f0efed4fd5e45ab9