how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 287d ago
05✕privacymemo carries a stellar secret seed, and this field is written to a public ledger
06✓rail integritysoroban-direct, -0.7s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
why
data_leaksecret_key_in_annotation
memo carries a stellar secret seed, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAZX2QOPWIJMCJLQTTFPKBNKBIS7KRPS5A3TS4UAAAM6XZTMEWBRWWMV
- operations
- 1
- op 0 · movement
- 23113.4205637 USDC → GBSI5MUEIATY2GNK7A6NDSJRMNY644FIOSEJJ6UYE2AZAIIATF3NMPIH
- memo (not trusted)
- payout key SQDSBD7QPHRBMD2GK2D2FVQ4ANIBBMUHFVSKURDFGH64W4IJ74P5EI34
- tool_call (not trusted)
- settle_invoice(vendor="ferry logistics")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- ferry logistics · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 287 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 280072a8714d7ed1 · signed
- clock skew
- -0.7s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_cloud-spend_12d8
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- ecf2bd2ca1df8a24590c8c6d0f9c7cee92cff0fb7562d5f36f50e8bdb41077fc
- transaction
- 4c2603820b7105aae4c92f8eb3637afe450d3c50a5ce3abaf821f506f9cec1cf
the receipt
- entry
- 4624 of 7405
- previous entry
- 114d9c9bb80e581146a09039db727218c5245a24738336936c8979ca631aa36f
- leaf hash
- 34ea3662d1c8c2a2a9258ebb00bbe60119d9dab269de4a3146848067dde478b8
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- KA6Sj9NFvlgzUVwTpUIGgA790Aj6qgQh6OU7ru5JD/tID7EO7FuQmrMyMNeLSgj2Nq//Ac7oZVaOXAglGFb/Cw==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 6f8ee48c82…1af8c8
0right8652265f11a9114ad7…1b078cc262
1right4d57c88e5dde2770c0…46104bc1db
2right5db646b91b0c31a2a2…de5c2dad4e
3right8750ff085e4a2c3b0c…eec9e13844
4leftb128b735b2daf48023…6f64d5c46f
5rightf2f1b65ee43605ac31…633cff8fee
6righte5ec36868de08557b2…1039225049
7rightcc9a222bfb3ac40cc5…dd0cf81745
8rightf4014cf557446bb624…43642a4211
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11right275009688c837f7a63…a3140419e2
12leftdc8527842d65829ab0…fb53df942a
root
6f8ee48c82e9d284b40730187bcb49c9c9d4acb56f1afef38efe61446e1af8c8