how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays MAHY2PWKA5CHTFVOVB4JGC5HTCYRH4ZIAMCE757OWM346R74L3SY5AAAAAAAAAAAAAAAAAAAAA, which is not in the allowlist
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, 0.2s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandatedestination_not_allowed
op 0 pays MAHY2PWKA5CHTFVOVB4JGC5HTCYRH4ZIAMCE757OWM346R74L3SY5AAAAAAAAAAAAAAAAAAAAA, which is not in the allowlist
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GB4OYDZTVAKAY3CX3NTLXUE5AZAI3PEE545U7PKEJM6WX35ZLRCXJFI4
- operations
- 1
- op 0 · movement
- 197.1558247 USDC → MAHY2PWKA5CHTFVOVB4JGC5HTCYRH4ZIAMCE757OWM346R74L3SY5AAAAAAAAAAAAAAAAAAAAA
- memo (not trusted)
- invoice 9cd698
- tool_call (not trusted)
- release_escrow(vendor="lumen datasets")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- lumen datasets · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 21 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce c5e8e1e7ba15db30 · signed
- clock skew
- 0.2s against a 60s replay window
- tool approved
- release_escrow · f9a055f3564d4214d5dc8d13…
- tool executing
- f9a055f3564d4214d5dc8d13… · unchanged
- policy commitment
- d3ef096bdabb7e3f168cca35…
provenance
- actor
- agt_ad-buyer_0829
- mandate
- courier float
- mandate hash
- 44b4f567358a7907d331809f81bd053a5bd1ff4adbe8b38d148368d6a597ce2b
- rule hash
- d3ef096bdabb7e3f168cca35e71b0ac1b4491cf3c712e418c538a779175ca4bb
- request hash
- ec7bbe40af6df4710c3cc643cc32aa1e878d3ca5acafa43694a21f1f40a27c91
- transaction
- f78f57c61487b43bbc36418bfabedd6f9a933830da6b85409701a530b8b8b452
the receipt
- entry
- 3076 of 8746
- previous entry
- f74f47e678968b20560441577d7848e729636b75edd8cda4e995145afc70f70d
- leaf hash
- 51806906acfb8d6eca42afc5d58c485825cd6b29d0fc32de825bf5c2cc60a042
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- YREj5ACQpxMzId4KkC9BxTlPfMWoC1+GLO0p/1e15R+rPc4KbbBg7VvkGcCAFuSa5eZuEjJkiQ3UO8o/9h+3CA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root cdcedc4fab…f6761d
0rightdee14cd7aa5e7b6791…c236b28b27
1rightde98950f44c0117c81…f41348e62f
2leftfa53f0f025f43d44ea…5a513ef137
3right4080008a524feee04d…ba29dc9b1c
4right128f005cba08b775ab…94f94c5faa
5right28cbac2fb4e1c9d187…dd05cbfaf8
6right01258f1bbd8ecdee06…f6cceb83e8
7rightb301653ed33d37c64f…649ddab9bf
8right2a9459ab386a2a6911…2cfee0febb
9rightd455e87f03300cd42e…d51b14eb31
10left5c0713f6dd12def302…5b7f738edd
11left41d620122bde1d9fe8…e0f8c70997
12right0b5e57bc5146127654…127b54a3f3
13right62f1cb2706d7d6eaa1…0836630b50
root
cdcedc4fab4ebb7458f06f10c31b53f314ed7b8f10c0511c6566adfe61f6761d