how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 60d ago
05✕privacymemo carries an iban, and this field is written to a public ledger
06✓rail integritysoroban-direct, 1.3s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
why
data_leakiban_in_memo
memo carries an iban, and this field is written to a public ledger
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBSDR4ZCBLW5J37XVUSEME44BFA53OHVEAHRKX7JKL6LUFBTMJIO3MJS
- operations
- 1
- op 0 · movement
- 4117.3940390 USDC → GBODUHRP5FMOMWB6DT4SV7KDYMUXSNAOGPYJIMJHOB3ARCGWUGLQKMVB
- memo (not trusted)
- remit GB86NWBK7995290893555017
- tool_call (not trusted)
- settle_invoice(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 789eae038d0fc873 · signed
- clock skew
- 1.3s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 8e97883364c6bf8c79ba7143876fa48b2e85cacfffdc9301dfebfd4a5fcfd8bb
- transaction
- 1dae23c66754992f613fedf219f7767f9144e367fd46da484b1661cc588a5c26
the receipt
- entry
- 4789 of 7402
- previous entry
- 5a0851ca246e9c58a13694dcb6248894446834119816a167ea8fceaa5ac185d0
- leaf hash
- 5cc63d8558e31368efe8e5b649529c2d246d26c8b2a91f0c7e953dea7b8ede4c
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- eugtI+Ce5Ms3K5Lqn2SoRQbKKwwFIsU4vhrz9nkTLxl6bY5eceQykr+iQWl4HFnfPWeGfPrZM8f3NfnHz5CCCQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 308aaf868d…afd4a1
0left5a0851ca246e9c58a1…aa5ac185d0
1right5b75586c54b4a26412…7673c96678
2lefte8a257b0bbf1895a79…a623dce15d
3right559b422425a8b56261…b98acc4a18
4left8e41b921f91d25d092…65b78663ce
5left75c1c05e1b29ce21e2…0488dbd638
6right029624cbfb49088154…b769e4bfad
7left8ff71191901628c93a…62d334e864
8rightf4014cf557446bb624…43642a4211
9left5efccc17def2020d29…64ff5d7d00
10right78d79e50c934cffc8b…2cef11de30
11rightd3c0bfb7876a95c9b4…a043cba499
12leftdc8527842d65829ab0…fb53df942a
root
308aaf868d3fbda789f304cf6cdbc613041b63a44b31595ac0fcd09d49afd4a1