how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 1.4s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAZX2QOPWIJMCJLQTTFPKBNKBIS7KRPS5A3TS4UAAAM6XZTMEWBRWWMV
- operations
- 1
- op 0 · movement
- 10079.4755261 USDC → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- invoice aa46e9
- tool_call (not trusted)
- settle_invoice(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 719963bd4f74e532 · signed
- clock skew
- 1.4s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_cloud-spend_12d8
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 967b7e33c404190da4a3b0e9870c0b06e188d09b27181c1f12eae989cbece86c
- transaction
- 72855e13b1db6408ce4bd9cbf80fe9a6e30558112658ccf183024e0dedc120d2
the receipt
- entry
- 2753 of 7544
- previous entry
- 100224be3e3948b7c43ce39c961abc3adf6a50d0840b77d647ac6dbb9dc438d4
- leaf hash
- 4051287e4363ccc6c6296d8f01cb19f9bbd6e18f07ac6919a744c0a255e3c627
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- GPgp/cL6cC0MaMV4dvzOa6h1uduJTKWcJKvLR8G6YDoO2cG6d+z1mU6abQYT40Cnxv46AxFgXLeHVeNh+UOMAg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 20ef61d65a…52e286
0left100224be3e3948b7c4…bb9dc438d4
1rightfbcff671c2c0a42351…d82fb7b77a
2rightd8bd5429c74e1d7460…5303127153
3right545321705edd069e83…fbce696cde
4right708b9fc5e5d4cfe7b3…60e8b889db
5rightbe05aee54a0bd32c59…5c9b9d3810
6left4ffaa8506f56810eeb…23989a189d
7left7b23e2c4e24f966cea…5ab2de4da5
8rightbd4d9f0271ede98c3c…f686b62b8e
9left2602c3d2391ba4609c…a3f4763fe1
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12right0137bf92524c064b48…da14862dc0
root
20ef61d65afa708d1a0bb846a50869b162e439fb12e66118a38e81963152e286