how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 0.3s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 7105.2561862 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice 583f08
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 5d3ea471d5b4607e · signed
- clock skew
- 0.3s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- be9958d4c4949fff288dd5f95952f7f435bf3fd6e0006ae68825f9c826face59
- transaction
- fb2b98f477e033789a019219f3c7b47f3ba3e2a5da792fc8a5a2f343a348f28d
the receipt
- entry
- 6775 of 7897
- previous entry
- 730a051a2199be3e7cd4e477ef9d6a82c3f20af0b29caea68a0b7e986753aa88
- leaf hash
- 59270fb69376cf156cfe01565d48d093c1364065ba787ba3b18c025632a944d2
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- 3kEdDevpFaAvexKYnWCKL04cyBK3wbprd4fT2ReBcJF+MlxH7c3owexJeiEjLOcfuTxmVXpDmU7v+MVar/gLBg==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 654adf3b95…c27b03
0left730a051a2199be3e7c…986753aa88
1left23cb4bfd74be1ac80a…edacb3ae36
2left020785c4128a55c443…39a80343ba
3right4205078b46cf80b762…7cd8f6e65b
4left1489d2a6d125db7597…df3fd3128a
5lefta45ff36f94f702785f…8b53858c48
6left2bcdf3691e2856fbc4…2646f11b4c
7rightb83a4a5bbec03240ca…dba2f1d9d9
8right2e9def86dd618400c6…2405603d8f
9left96c0eb2bff9c529bfd…5dcced0eb9
10right724a8f9f51c656481a…48c664e87c
11left4043c82f03366d541c…af7a3fd4fe
12leftdc8527842d65829ab0…fb53df942a
root
654adf3b95b30058a74f58a66bcbe48f91a6e05f4c7de2db9e9bcd6759c27b03