how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays EURC, mandate allows XLM
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integrityhorizon-submit, 1.6s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandateasset_mismatch
op 0 pays EURC, mandate allows XLM
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GCJCW6F2LQNESISSOWIKYSG5OBLBQS6GAZ4W2K2TZLZ36UD43BKDBHYP
- operations
- 1
- op 0 · movement
- 506230.6817492 EURC → GCTUINPFM5KIE6NGXUIBPBOOMF7O43WF4WJT4BKRDGZDSBEBT2TSGUSK
- memo (not trusted)
- invoice e2b810
- tool_call (not trusted)
- settle_invoice(vendor="harbor insurance")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- harbor insurance · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce 66975e27f3f1ae02 · signed
- clock skew
- 1.6s against a 60s replay window
- tool approved
- settle_invoice · cf8afbea802e68958853cc09…
- tool executing
- cf8afbea802e68958853cc09… · unchanged
- policy commitment
- 666fffa405f3422198fd9451…
provenance
- mandate
- field maintenance
- mandate hash
- 62054781513a89f3a21a0a59406754dbe61fba9c570cf7a9e437c93e2b2292f5
- rule hash
- 666fffa405f3422198fd9451df1674b17ec570e17de6c136b287abe831f35e8d
- request hash
- e775bed7ea89786b568c48ed8b3248c93986faa77fa859444b76d99b73420348
- transaction
- b6ca5a4b18ae0138c2d6bc8be561e5645d32bfcb33c0f0d32dbadfa6f6c16645
the receipt
- entry
- 6430 of 7240
- previous entry
- ff57000a2afd31ecacd78558ac6b441f1be358248f908ae7432781f6e78390df
- leaf hash
- 348533973dae21621648e26012aa991c3765df90c3d3d2926248750e30502f54
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- OkfvEw2dyYWxD3tExj25B8b6khmEe/7LeQ738csMNQqR6Locv+k0YKN9d0Ksr7DFEymHDZQrTBvzKGPbZcNrAQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root d785c20685…a13a7d
0right7593995abe1f4cf32d…e91b968595
1left68cf53e8e18648b2c6…978ffe2d9b
2left465ff37c66f7c96558…982b534ca7
3left4e1c7d463a902a049f…1f3fdecba7
4left8bab418bb39c11eeb8…34bca79600
5rightbb579780aa0b3dc6e2…758d1197b6
6right906e17b525ef9504e3…ce2c623a04
7right1efb72ab492ea41f44…cc01f5c3ee
8left42620fc8dde061fde4…0af69567a6
9rightf1501cd5c083126291…586061c99b
10right6807d671775c07e780…6074e6d011
11left4043c82f03366d541c…af7a3fd4fe
12leftdc8527842d65829ab0…fb53df942a
root
d785c2068536ae029ced9961c60607eb083681a381f997782ce66ab6efa13a7d