how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 209d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 0.7s skew, nonce fresh
07✓post approval integritybuy_capacity unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GCJQU7XXJOSMVJYLGACPS5JMIP2HB3IECAHYALQGJREFNL3XYLZAT5Z5
- operations
- 1
- op 0 · movement
- 4016.0678070 USDC → GAI32BDAUBEHV7QNDFUCCPAF3MJSIJ7GE4WV2DVK3QJXQDBZUNUJ7GJ6
- memo (not trusted)
- invoice b151eb
- tool_call (not trusted)
- buy_capacity(vendor="pixel foundry")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- pixel foundry · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 209 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 5835938478686a7b · signed
- clock skew
- 0.7s against a 60s replay window
- tool approved
- buy_capacity · e36a5e92928cb61982b86bfa…
- tool executing
- e36a5e92928cb61982b86bfa… · unchanged
- policy commitment
- a3959ef915d5368820c53ef9…
provenance
- mandate
- customer refunds
- mandate hash
- a6fe0774aa8a60312784220227a16c52c711988d4dfe0bf0e426907a77ba7055
- rule hash
- a3959ef915d5368820c53ef9c3def8ff05e256ee3c37f1b68d5a33eb0332cad8
- request hash
- 74bd3893f88bd2d7ced3931f2cac79f7c8621c585cf50afb424a4764b9767b37
- transaction
- fde3d81c7fcfbb193cfeb835d1d3acbe88ac6507e5cc845811f6f66899d1c3f1
the receipt
- entry
- 2469 of 7496
- previous entry
- c4ddbd40a56d64856ba7ebfbf723bbef02eda16ae5fc35f0573410e2cfc367a9
- leaf hash
- 548f9c263e95aca7fbd2735f90d04fcc60790681d1e2b6e312dc40cc9acc82d1
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- wgoWxHZNpr1xOntqrqcS3tfwmq1L1nLkYHZRTpgkxGuRJl9lkrnrFyzP83PPcq/BMLISXbklrvJwaNQiqDtDAg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 88692cb158…795bec
0leftc4ddbd40a56d64856b…e2cfc367a9
1rightdd1646bea2a84561fb…939a6c2e59
2lefta12a41e9d07e61ebdf…d0c67d1cb0
3rightb873f4cc61b30b6df2…fd3c823685
4rightf23e862ddb2b199b8b…992e1b5420
5leftf9a10b62c8412bf51f…6c10c7eeb4
6right1dbd9a427cbfd212d6…4aa400fe1a
7left72ef2d9386f1e7eb75…05d567c848
8leftaabda09cb1f348fd11…e260f45846
9righte799ad94e5ec8f5b18…1eb984ac76
10rightd0305720808f0f38a5…b7c09f13a2
11left41d620122bde1d9fe8…e0f8c70997
12rightcd1f28ce93fc5377e2…d24e2f47c4
root
88692cb158753c608c6672ce241cf4ce70532f6fc3c4a06a3322e7698a795bec