how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 117d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integrityx402, 1.6s skew, nonce fresh
07✓post approval integritypay_vendor unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBRZS2ZL3LLC53TYDDK5J2U7KU6BIK5E42WCDPNRJYH2JBFQ3WUZZCHD
- operations
- 1
- op 0 · movement
- 247.1624467 EURC → GCEOWOKPP2NHGJACBKTQPG5PIJ24QKBOYOTCSS2YSLVBWBAHCH6IT7HJ
- memo (not trusted)
- invoice 1ed670
- tool_call (not trusted)
- pay_vendor(vendor="kite courier")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- kite courier · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 117 days
- rail
- x402 · as the mandate names
- envelope
- nonce f7aa22c534e64f6e · signed
- clock skew
- 1.6s against a 60s replay window
- tool approved
- pay_vendor · 4d1cb1714f0c4847781cf5a7…
- tool executing
- 4d1cb1714f0c4847781cf5a7… · unchanged
- policy commitment
- 7d904c650fc2deb15c054f3e…
provenance
- mandate
- bandwidth commit
- mandate hash
- 58b2171517b0016ad11ce866fd11c328f9e4876ec1c2cb33a8615353fa00c0e6
- rule hash
- 7d904c650fc2deb15c054f3e10016e162564cc0d4379f71a6e0fe0a534c1e9ec
- request hash
- a8cbc3250c79ea6cf05853b6faebb3cc4f84d41dfe397daf2ec7702f39cb3793
- transaction
- bebf55e62bc3fc85fd6b78a67b7323b174a83239fbc62683ebfe4013198776ee
the receipt
- entry
- 5024 of 7402
- previous entry
- 33f3f33fc19a24a5b16527578aa23728d7e906a69e655e88d5d8802ba43ea65c
- leaf hash
- 2f7f1ed38ab8bbfc1c4702f5e8e6ed796cfb9ca69472cdeb3909bcff7a4b9ef8
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 0B81n0yEtn2IPFp377lT888a9gc7Zf/uPY00IcGWxR1+8nNInncCV/A7A+d2nIEKMY6HzKNICeCZki9fJ3afDg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 308aaf868d…afd4a1
0right49c9dc0d5fdd151c04…73287b6f03
1right9ffedd8802371a00b0…5f86062f8f
2rightea4d4279b73a8fd3a8…dfc7432cbe
3right64a83320af0b0e471b…390e066c9f
4right9f1fa1b09b794b84e1…b8d1a949bd
5left1b5c1da8b75fea68cb…40c7befb1e
6right8133322a542e4bc11e…ee68e3ceeb
7left79f7450aea35c41d62…5e9e49deb3
8leftaf2867073a354f4d40…d7f24e6c47
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11rightd3c0bfb7876a95c9b4…a043cba499
12leftdc8527842d65829ab0…fb53df942a
root
308aaf868d3fbda789f304cf6cdbc613041b63a44b31595ac0fcd09d49afd4a1