how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeagt_payroll-relay_48d2 is not among the agents this mandate names
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritympp-relay, -0.7s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
actor_authenticityactor_not_authorized
agt_payroll-relay_48d2 is not among the agents this mandate names
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GDM7DWHXNMLJGUQLAWJDBBVHIO3A3IJ6EKPUWBGYAK6HHJI6EU3SIEJR
- operations
- 1
- op 0 · movement
- 27202.3078606 XLM → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice 12018b
- tool_call (not trusted)
- pay_vendor(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- mpp-relay · as the mandate names
- envelope
- nonce b3e3093fb8cdf739 · signed
- clock skew
- -0.7s against a 60s replay window
- tool approved
- pay_vendor · e1593e906c588f3acdcafb9d…
- tool executing
- e1593e906c588f3acdcafb9d… · unchanged
- policy commitment
- f15db4cb501110bfe44c87d8…
provenance
- mandate
- vendor settlement
- mandate hash
- 0accd5a31f9eb1c0c68d1584f8fb21ba4741c81466f83864926e86495a075d9e
- rule hash
- f15db4cb501110bfe44c87d8b96c5a83c92100469691a2f516026584bef2f4a7
- request hash
- ef99d07dcf59f6ddb6e73da07cf4ca36178ba74bf2d261e2b9add5c97233e63d
- transaction
- b71bf0b7bce248c048b2b2afa056a496691b4376a180cb2c71e458393b634cd0
the receipt
- entry
- 5512 of 7404
- previous entry
- acf5ab0b836a49db53fc23b1f8029b0f5e095bf5008fe3c51cff35c7950e886c
- leaf hash
- 30ff22bd3fdc47f8df0e4a1dd0f12e8fb77479c0752071f9a40dc40f196e9d53
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- sB5zxzg/vqtZt5Jako0AJ+nK8s3hXJutRr2nVBAN4YLmI5kJS/CpcqdDy28BG6cL2qy0q1CSagwMBCWCRdRlBg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 03c79c2f42…8ff52b
0righte3e9cae4b958fb849a…c9dcc8d113
1right31fcb9c7889676348b…dbe6ec87a8
2right8d7c62c40c510c6742…597a800c24
3left0db0bd5ab3b2912a14…0cc33bb0cf
4right130d2c4a190f0553c8…72d9065224
5right3872afe61389897d78…09c3c3f892
6righte190dcbd679803e7aa…7b4289c505
7leftcf832b259177631891…51131d8cfd
8left4457566ed7240b9466…543dd4c1ea
9rightc1ee5dcce64b8e468a…839a1d2c47
10left120af2267f3c31cbf3…425e6ed072
11right747f12f58baa04ca90…65cc7dde22
12leftdc8527842d65829ab0…fb53df942a
root
03c79c2f42ca9255de2536781df0b75d1aaa59b2e3ec0ffb772f49bf0a8ff52b