how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 209d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 1.0s skew, nonce fresh
07✓post approval integritybuy_capacity unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GCJQU7XXJOSMVJYLGACPS5JMIP2HB3IECAHYALQGJREFNL3XYLZAT5Z5
- operations
- 1
- op 0 · movement
- 3448.7359494 USDC → GAI32BDAUBEHV7QNDFUCCPAF3MJSIJ7GE4WV2DVK3QJXQDBZUNUJ7GJ6
- memo (not trusted)
- invoice 861eff
- tool_call (not trusted)
- buy_capacity(vendor="pixel foundry")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pixel foundry · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 4b2b590db3a4d369 · signed
- clock skew
- 1.0s against a 60s replay window
- tool approved
- buy_capacity · e36a5e92928cb61982b86bfa…
- tool executing
- e36a5e92928cb61982b86bfa… · unchanged
- policy commitment
- a3959ef915d5368820c53ef9…
provenance
- mandate
- customer refunds
- mandate hash
- a6fe0774aa8a60312784220227a16c52c711988d4dfe0bf0e426907a77ba7055
- rule hash
- a3959ef915d5368820c53ef9c3def8ff05e256ee3c37f1b68d5a33eb0332cad8
- request hash
- a4a40b919e9576710a64a875e6bede53eb024626589de42addc92d4ef98b6a50
- transaction
- 8af58adf4a12a2b8f317c0f8dfafc441b2cefb357309d9547570b417224b6ee5
the receipt
- entry
- 3440 of 7793
- previous entry
- 97fdfe1e69e7c403e352e83253dd205c86f66b8912c5f20b68c473abbdf86f7f
- leaf hash
- 36974ddebee1e114f5e5b1ec8737d746935c99ef207fde448b8fc8247f6045f6
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- MlvLVCF7dsoeJT5Z5ihO4LVyjYzp9e/OxcaDn2/cy0UK2+awruRUg3EKqAA5bQjPvg2pvd9tZ8zuLrHlCDxIDg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root e9edd0cb49…ff91d0
0right54e6006ed7dc84feb5…cd9aec79eb
1righta84e21111349e82684…d54ea4b289
2right26c2335456509433e4…d990c00d76
3rightfe7b6eb4fd70a1dfd1…99b0da0001
4left20bd3a90634df758d2…b1bc15d5f7
5left0f73974e9ba14db008…1d7d4f6b4b
6left3320dbdfdadb25bdd4…6c3cfa8f01
7right29271aca6ed696ca35…d4f5bb8ea7
8left1688c1e4a32a5083fd…4b7c26e6dc
9rightd455e87f03300cd42e…d51b14eb31
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12right70c09b213c893d8197…77eabfca43
root
e9edd0cb497c6d577994c6ddcf804885e27cc97b47f86935fbfe5d6d5eff91d0