how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, -0.9s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAO7VSWNNZZQWYUNNSUJXO6FWEHC5VLUGDWAEOOWG5DRYYY56Q2Q52LZ
- operations
- 1
- op 0 · movement
- 4622.8110733 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice 38a8cd
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 010ff23248b6a936 · signed
- clock skew
- -0.9s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 47566b46ab058c8f83175b606612621df889013b4d4ead3c9a7f89fa00b30eb1
- transaction
- 4ffe26099d757bb9bb6edf33b370f3c48d2e5b741af086748c2d016e88ded20f
the receipt
- entry
- 6025 of 7402
- previous entry
- 7f74e9b396985373f0931606489ea0dca6f540f5bbbd3bcfc896926c0a0d00ea
- leaf hash
- 4b2a9d112ef7381be1c82d15b43107b368ee2bcba253eef9cb9cdad4e62a0ec4
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- EdyGG49j8MK+wU5TUs2MVNQCiDp6NnOX9dM6eSo3J/+BbZ6O70EfUYxBdW0dfMD/Fy3AefePydsPIQqFO1JSDA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 308aaf868d…afd4a1
0left7f74e9b396985373f0…6c0a0d00ea
1rightc22aa28480731563a2…38bea1c20b
2right67803fd6529b35eb1f…adcf36210e
3lefta615c237a45abd1e6d…1428e6d1cc
4righte22a368f99d725aa50…74084e5c4e
5rightc37542ed6d51b1cbc9…02f219b36d
6right57269a444bc73d11d9…37967cb4bd
7left5932c619752e887b10…eff94faaac
8left602b53294959c78e65…8fc8212342
9left3fe0d5d17979ce94c0…bd6b56d925
10left120af2267f3c31cbf3…425e6ed072
11rightd3c0bfb7876a95c9b4…a043cba499
12leftdc8527842d65829ab0…fb53df942a
root
308aaf868d3fbda789f304cf6cdbc613041b63a44b31595ac0fcd09d49afd4a1