how it was scanned
01✕realityenvelope is not valid transaction xdr
02✓mandate scopeclear
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integritysoroban-direct, -1.0s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
decodeundecodable_envelope
envelope is not valid transaction xdr
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 0
- memo (not trusted)
- invoice 655888
- tool_call (not trusted)
- settle_invoice(vendor="tidal bandwidth")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- tidal bandwidth · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 60 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 921b8b8010fa386f · signed
- clock skew
- -1.0s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- e1f552492c1386781af64c2989af7b92f7729839cc835ec5b26f5d5f0eec93c4
- transaction
- — envelope never decoded —
the receipt
- entry
- 5855 of 7404
- previous entry
- 977360e306c25ff2c949967354ef5580a70b7d8e83edf4d54a87b3d5dd6dec5c
- leaf hash
- 5cffde40cdd9804a626a3d3323761d39bf923d9ab06d545e7fad1f2ca6a57da4
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- MTzERuFto4NvoFr2jY8QkWXCFKdUI+L51zgTHxwpZ+SAa6xr/Gg33yn/YizGa7XCYquoUgCZexlHNVAleozvAA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 03c79c2f42…8ff52b
0left977360e306c25ff2c9…d5dd6dec5c
1leftb4c221ea848d4f7518…932047d12d
2left651e234bbb1d156866…701b434a2f
3leftf5a6b02336e31bb2c9…615efed6f6
4left40c9259a49d159151b…ad3f80f999
5right0d2db8f4d5ef432138…a3275e9ce9
6left86495863153fd4c9a8…c8c60acadc
7left0f1f51934b7f258d16…3d79f3a9a6
8right23c4f0831b90f59516…a26a59256b
9left3fe0d5d17979ce94c0…bd6b56d925
10left120af2267f3c31cbf3…425e6ed072
11right747f12f58baa04ca90…65cc7dde22
12leftdc8527842d65829ab0…fb53df942a
root
03c79c2f42ca9255de2536781df0b75d1aaa59b2e3ec0ffb772f49bf0a8ff52b