how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06!rail integritytransport envelope is unsigned, so its route cannot be proven
07✓post approval integritysettle_invoice unchanged since approval
why
rail_integrityenvelope_unsigned
transport envelope is unsigned, so its route cannot be proven
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBSDR4ZCBLW5J37XVUSEME44BFA53OHVEAHRKX7JKL6LUFBTMJIO3MJS
- operations
- 1
- op 0 · movement
- 10168.6465439 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice 73e78a
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 1f6d524b2710ca63 · unsigned
- clock skew
- -0.2s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- a1fe24bfb3057a5565875363395a7d379e00ec00eaf2b16ffc96a329fa5760c0
- transaction
- 64a9f7febd1f6a2d4af8a9adceeebb3b84fd5494d9bd4b53ff79786be2a9144f
the receipt
- entry
- 5603 of 7342
- previous entry
- abe05f550b99b4cf610ce18d422b2c2dc3d9a22f0ba5af0908e121eefac54200
- leaf hash
- 3fe1be6cec5b2d9e0c944cb0790403784d06a436dd61b8c82865c0a73e427c82
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 3JcKtzbvwXWXqf0T+iDS38t2tzbPBYnAVoBuACdcD71OZNrKCupeZfJV/C6wkci2iPExSGcQnSwNUCdQIKY3AQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 7ea4d54510…a8477b
0leftabe05f550b99b4cf61…eefac54200
1leftae9fc6db43904c595c…265dfe4201
2right158e3c1c022d7c3731…5d84770bf1
3rightc2b344f7f248a7d66d…795511e019
4right4ba076e9a887e345cf…6f697268f4
5leftd5fb4ef6cb1d1c3fe6…b042b5e622
6left16421deb9d7b44283f…34b855b691
7leftcf832b259177631891…51131d8cfd
8left4457566ed7240b9466…543dd4c1ea
9rightc1ee5dcce64b8e468a…839a1d2c47
10left120af2267f3c31cbf3…425e6ed072
11rightdf599c38335b598d03…b6cc6737e3
12leftdc8527842d65829ab0…fb53df942a
root
7ea4d54510858ab55037e6c5fd413c82fa9aef2713fdfb2b092fcce86ca8477b