how it was scanned
01✓realityclear
02!mandate scopeop 0 pays 917854.20, above 80% of the 1031814.27 cap, human approval required
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 209d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integrityhorizon-submit, 1.0s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
why
mandateamount_near_cap
op 0 pays 917854.20, above 80% of the 1031814.27 cap, human approval required
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GCK2IIIS5G3SIUJPTSSJIC5CSUMLTWZ737DSQTB2KJR63I5XJD47YFOJ
- operations
- 1
- op 0 · movement
- 917854.1958111 XLM → GAI32BDAUBEHV7QNDFUCCPAF3MJSIJ7GE4WV2DVK3QJXQDBZUNUJ7GJ6
- memo (not trusted)
- invoice 870b7f
- tool_call (not trusted)
- settle_invoice(vendor="pixel foundry")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pixel foundry · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce 745d1aa30b176eb8 · signed
- clock skew
- 1.0s against a 60s replay window
- tool approved
- settle_invoice · cf8afbea802e68958853cc09…
- tool executing
- cf8afbea802e68958853cc09… · unchanged
- policy commitment
- 666fffa405f3422198fd9451…
provenance
- mandate
- field maintenance
- mandate hash
- 62054781513a89f3a21a0a59406754dbe61fba9c570cf7a9e437c93e2b2292f5
- rule hash
- 666fffa405f3422198fd9451df1674b17ec570e17de6c136b287abe831f35e8d
- request hash
- 0f130ba2c1c08a711b8882e224351e00602923536a8943789405b16804b36eeb
- transaction
- 6601713b2fa5329590a2903878203128ffb1128c4e264b46ed5b6cedfb3654ab
the receipt
- entry
- 4699 of 7406
- previous entry
- 6dadaac90df644c9be972810fcfc2f3669ec5cf3b70f4adb7539552ee2c2ce5c
- leaf hash
- 4234f0cc6078acb3308a018bcfc523db6f5991a89d85879a07cfe0eb4150b520
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- sFoCM5JuZITNPnloTHtLygqF5DY1NJx/YoXkwnLn5U3D8l1haMRL5taXHfFNRjhjSTaEvLUn/rRL9NFu6dGnCA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 1d93d28ccd…36a7f5
0left6dadaac90df644c9be…2ee2c2ce5c
1leftc88622a93c33a1eafa…1d8c4b1d87
2right6269cacf91cc49452f…36848ecb21
3left2e80558216e8ce7cea…c32d27d878
4left25c0475b285b30069f…7bdeb39a72
5right26b18594cab304e165…1e03463fbf
6lefte724e5d59f6bdc3d8f…255aa4c106
7rightcc9a222bfb3ac40cc5…dd0cf81745
8rightf4014cf557446bb624…43642a4211
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11rightfefea12d8df29f369c…c6be990466
12leftdc8527842d65829ab0…fb53df942a
root
1d93d28ccd1b7f353c7b5a4e615f030dd36a312c3c0de432d53c97173736a7f5