how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 209d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 0.3s skew, nonce fresh
07✓post approval integritybuy_capacity unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GDSPNKK5N65L5URZX46SJE2YBD4T5ZPFLDSVTWQIJSIXS436CYWF4IFL
- operations
- 1
- op 0 · movement
- 4448.7063625 USDC → GAI32BDAUBEHV7QNDFUCCPAF3MJSIJ7GE4WV2DVK3QJXQDBZUNUJ7GJ6
- memo (not trusted)
- invoice 6fa9c3
- tool_call (not trusted)
- buy_capacity(vendor="pixel foundry")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pixel foundry · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce e45e83946d3121df · signed
- clock skew
- 0.3s against a 60s replay window
- tool approved
- buy_capacity · e36a5e92928cb61982b86bfa…
- tool executing
- e36a5e92928cb61982b86bfa… · unchanged
- policy commitment
- a3959ef915d5368820c53ef9…
provenance
- mandate
- customer refunds
- mandate hash
- a6fe0774aa8a60312784220227a16c52c711988d4dfe0bf0e426907a77ba7055
- rule hash
- a3959ef915d5368820c53ef9c3def8ff05e256ee3c37f1b68d5a33eb0332cad8
- request hash
- 2e312180c3f9da7e2ecf3ef8fbd2f7f88984221ef5f5a02b715342ee68c1f438
- transaction
- 9094fe96688a1a20a3b0044345a8c58540a831fa7b8fc4093c480e2bd5b6ff4d
the receipt
- entry
- 4907 of 7448
- previous entry
- c2d605b6979786559299f3e5d4bc0153b26f2d9872ef0c43b3f2b1104b3396f9
- leaf hash
- 3305fe4f679175e88fc30b3d66fb4cfd5802988c15dfc327eead088b4a5aa9d9
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 0pIWi38r5bbzi9IDM7eVTcKCcpzr+uzZ2aQ+DDtB/N2yLQr9wuvs0qnq2lx1h25NqiPaHEzp+UKHT0syalWUCw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 00bb58334d…d2678b
0leftc2d605b69797865592…104b3396f9
1leftf8db3e54ad01d07357…94afb1cc26
2rightde04f6b665e81b9940…d0622824c1
3left9fdad9edc0bd86eeac…6eb5580830
4right369010d729d0c97e43…8d17572238
5left4a615a592cdb22c602…ff91388f84
6right2fe3cc9e573188b29b…cf19a9e990
7rightad1d35062277b6b212…913e82dc0e
8leftaf2867073a354f4d40…d7f24e6c47
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11right37fc32e3fc5f4cb4cb…e8afcf4f86
12leftdc8527842d65829ab0…fb53df942a
root
00bb58334d580d6ebb46a35101c7968413f8d02e8d502c9fb749c779a6d2678b