how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays EURC, mandate allows XLM
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integrityhorizon-submit, 0.5s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandateasset_mismatch
op 0 pays EURC, mandate allows XLM
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GC2INQVFOD5FIUSHLISGEABLIVGH5IZIDZKHRODMP5ZZYKREXYLUTZID
- operations
- 1
- op 0 · movement
- 24435.6263132 EURC → GAJPJ4LEUZBCG6WF76DJIFUQT5F4FJV6LPVBUMKHJ7VZ6RUBEPJYJZRB
- memo (not trusted)
- invoice 63e9ce
- tool_call (not trusted)
- settle_invoice(vendor="sable audit")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- sable audit · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 107 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce 4615cab46556a096 · signed
- clock skew
- 0.5s against a 60s replay window
- tool approved
- settle_invoice · cf8afbea802e68958853cc09…
- tool executing
- cf8afbea802e68958853cc09… · unchanged
- policy commitment
- 666fffa405f3422198fd9451…
provenance
- actor
- agt_fx-sweeper_118c
- mandate
- field maintenance
- mandate hash
- 62054781513a89f3a21a0a59406754dbe61fba9c570cf7a9e437c93e2b2292f5
- rule hash
- 666fffa405f3422198fd9451df1674b17ec570e17de6c136b287abe831f35e8d
- request hash
- 65248537ae3fed46819296f025bdb87665e31fe851eda80eedb233b209af8ed1
- transaction
- 8b7bbe7009e3d54bf4a6c2e506fdf6baafe1ddc2e96ab984830ce4b341e0fb53
the receipt
- entry
- 6715 of 7344
- previous entry
- d477d70cd01e2b621719f142762d17c478e18d01a74c9c883aaf9364146ce061
- leaf hash
- 440826d9c6a0949db9211cc1e53d1c1743011daaf9e0b66b764baf0a69aa52f5
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- fjOXFZ/9aXvlpqlElvHo7PjAqyHFjDr1Z9vF1KQprLrRELuvlJslGVlg7R0Y+s8g8FtMkMDAuEgfP8UhHKxnBQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 68a7a84721…c2ddcc
0leftd477d70cd01e2b6217…64146ce061
1leftef93390fd6b154f1f1…73e19ece2e
2right0dfe0c452cde0522da…432f4c7f8e
3lefta8c762b7bad68006e7…0f5b1901c9
4leftef2a6d8f098331f88d…81029dd56a
5leftd1d99f27ef20697011…ac5fa13f41
6right79b9797cd1ba3b11b2…3e42daea9e
7rightb83a4a5bbec03240ca…dba2f1d9d9
8right2e9def86dd618400c6…2405603d8f
9left96c0eb2bff9c529bfd…5dcced0eb9
10right3fb20da47046949e02…e67af91b8e
11left4043c82f03366d541c…af7a3fd4fe
12leftdc8527842d65829ab0…fb53df942a
root
68a7a84721d316cd7f6ba44f1a213f10c9288673a9fe2084f084bf0465c2ddcc