how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays 89164.07, cap is 50000.00
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, 1.4s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandateamount_exceeds_cap
op 0 pays 89164.07, cap is 50000.00
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GAZX2QOPWIJMCJLQTTFPKBNKBIS7KRPS5A3TS4UAAAM6XZTMEWBRWWMV
- operations
- 1
- op 0 · movement
- 89164.0680085 USDC → GBSI5MUEIATY2GNK7A6NDSJRMNY644FIOSEJJ6UYE2AZAIIATF3NMPIH
- memo (not trusted)
- invoice 3ee654
- tool_call (not trusted)
- settle_invoice(vendor="ferry logistics")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- ferry logistics · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 287 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 01bc14a00dbcb78f · signed
- clock skew
- 1.4s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- actor
- agt_cloud-spend_12d8
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 2381a2885e5a78e62f6dbaf29a2a8f8690623aa57bfe555cbc3f5e62d24b30e1
- transaction
- 4be30a37466b411664d1d88c4a179fcebb86014c705f02e7ab3168a8df12ab8f
the receipt
- entry
- 5711 of 7341
- previous entry
- 82f442cda1b4f097faf4a3a115ba48357c3274094b8e36b698f40ca6ef9b1b8a
- leaf hash
- 5b060e5659ddda1e2bc70b3957a0185624046eecd65a51bf20dd4a39f976b407
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- Zpd/rIJW9kvFRkDkCEdSaRDCW1RpVgD+stx+Bb12LZ5KCQUbavAh2qO8TLMuDpoQZGh30emnRYMM8odlkRy7BA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 560bf0f5f0…bb115f
0left82f442cda1b4f097fa…a6ef9b1b8a
1left153b1412160a1aed5e…0aab50f8bc
2left4736ecae6e84604efa…31e7099fbe
3left037a7a24df962a2670…7e8d65cfbd
4right18457e917e962d6aae…0daefec028
5right36aa8bc2b45d6a5595…d8537f4088
6left666731f8785ef2e37f…68e081529e
7right5cfacfeb6960aa5e16…21a087e24f
8right23c4f0831b90f59516…a26a59256b
9left3fe0d5d17979ce94c0…bd6b56d925
10left120af2267f3c31cbf3…425e6ed072
11rightb29c24f63a25899d26…21a3d78898
12leftdc8527842d65829ab0…fb53df942a
root
560bf0f5f0d62ad0ef633bf63bc60afaa05a4ddbd6378798bdf836e783bb115f