how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays 65884.44, cap is 50000.00
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, 0.4s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandateamount_exceeds_cap
op 0 pays 65884.44, cap is 50000.00
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 65884.4440407 USDC → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice b4c702
- tool_call (not trusted)
- settle_invoice(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 6ff6d3a9431b5e75 · signed
- clock skew
- 0.4s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 11354b67ec45696e93ad19f4c6895c6c76f77a9ab4cf03a6a1a06230d1731b5c
- transaction
- 30a7933848e3f94d374e8a59d7b1b069f4925bdb23054c323a3ae15d43cf1ea9
the receipt
- entry
- 7240 of 7406
- previous entry
- 65ba970fb8cb07383af06b3169d508b42f271baeb7e29768d95d323d9e905ca0
- leaf hash
- 35d26fd7dccdf1d14c3cc2567e838cdfc399ea98f89023eca5310c1d3527f9e8
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- OOQX27TEOIFtvO5ZGyzUZdSOww+C5y5PIIr4Dhgvex5vA9VsibUYPAh1ML37LSjWaTKDidrChStQ7UxUizTwAg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 1d93d28ccd…36a7f5
0right259192b5ebd2eaf841…a82f1b870c
1right0b707ba09f0e038ab2…ea002b6b9f
2right43b2c7403a8c8e169e…2000f1ae8c
3left6ecebe7105e746dbb5…386315067b
4right8c2a31006be6b540b9…09d05f2cc2
5rightd467942ff6b474990a…a3e49c043a
6leftb945222011aee84d24…6c88fd0de9
7rightf55bb04fd33dc32fb9…7bf0445621
8left48b90477dd015bba52…ce0d79dfde
9left4043c82f03366d541c…af7a3fd4fe
10leftdc8527842d65829ab0…fb53df942a
root
1d93d28ccd1b7f353c7b5a4e615f030dd36a312c3c0de432d53c97173736a7f5