how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 209d ago
05!privacymemo carries an email address, and this field is written to a public ledger
06✓rail integrityhorizon-submit, -1.2s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
why
data_leakemail_in_memo
memo carries an email address, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GCJCW6F2LQNESISSOWIKYSG5OBLBQS6GAZ4W2K2TZLZ36UD43BKDBHYP
- operations
- 1
- op 0 · movement
- 323821.1490140 XLM → GCTUINPFM5KIE6NGXUIBPBOOMF7O43WF4WJT4BKRDGZDSBEBT2TSGUSK
- memo (not trusted)
- invoice for a.rossi@harbor.example
- tool_call (not trusted)
- settle_invoice(vendor="harbor insurance")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- harbor insurance · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce dc4d2417104581d0 · signed
- clock skew
- -1.2s against a 60s replay window
- tool approved
- settle_invoice · cf8afbea802e68958853cc09…
- tool executing
- cf8afbea802e68958853cc09… · unchanged
- policy commitment
- 666fffa405f3422198fd9451…
provenance
- mandate
- field maintenance
- mandate hash
- 62054781513a89f3a21a0a59406754dbe61fba9c570cf7a9e437c93e2b2292f5
- rule hash
- 666fffa405f3422198fd9451df1674b17ec570e17de6c136b287abe831f35e8d
- request hash
- 1fabfbdb2ced189a10e46d6dc17be06fea304c685e39f2f2c7c62eafb55b22a4
- transaction
- 42729945c601e35bcd3afac1cb21d9d37ccf00d440865fa74cdea3133c3d6ee5
the receipt
- entry
- 5675 of 7466
- previous entry
- 5009c58921dd224800ce3b79f9a9d04ca701c48592ddd309af2751759b170a4b
- leaf hash
- 32668ee78068b22253d2b4478d3e9a58d150ff31c88316d8b17fd427f3283d9c
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 0w/E9SNA8HVaxkxJPeZzdqfVs+6efmt5LqdmlFLaTmkq7hJPQnMyv2oAunZRjgdCyKtBC65Y41vKXtomKi+jDw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 1f2d4e2a64…b78f3c
0left5009c58921dd224800…759b170a4b
1lefta430ea95afc706e92a…9071aafdcc
2rightc6fd51232758a8e094…927ce11437
3leftbeb30d5da3ebbcbad4…694eeb28ce
4right1d6220e82bbbc5f67f…900b4feb20
5lefta99d47c3d505da7812…28fe1faff5
6right836b6e25c08d699e08…cd1ddfb9f6
7right5cfacfeb6960aa5e16…21a087e24f
8right23c4f0831b90f59516…a26a59256b
9left3fe0d5d17979ce94c0…bd6b56d925
10left120af2267f3c31cbf3…425e6ed072
11rightf94c465d74434002ee…932d3f7332
12leftdc8527842d65829ab0…fb53df942a
root
1f2d4e2a648bbbbf0050e687b0e46e3d49cdf397796cffea083be64befb78f3c