how it was scanned
01·realitynot reached — an earlier check ended the verdict
02✕mandate scopeop 0 pays 2102872.05, cap is 1031814.27
03✓velocityclear
04·counterpartynot reached — an earlier check ended the verdict
05·privacynot reached — an earlier check ended the verdict
06✓rail integrityhorizon-submit, -0.3s skew, nonce fresh
07·post approval integritynot reached — an earlier check ended the verdict
why
mandateamount_exceeds_cap
op 0 pays 2102872.05, cap is 1031814.27
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GCK2IIIS5G3SIUJPTSSJIC5CSUMLTWZ737DSQTB2KJR63I5XJD47YFOJ
- operations
- 1
- op 0 · movement
- 2102872.0476663 XLM → GAJPJ4LEUZBCG6WF76DJIFUQT5F4FJV6LPVBUMKHJ7VZ6RUBEPJYJZRB
- memo (not trusted)
- invoice a568e4
- tool_call (not trusted)
- settle_invoice(vendor="sable audit")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- sable audit · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 107 days
- rail
- horizon-submit · as the mandate names
- envelope
- nonce 016bf9002f1bf96f · signed
- clock skew
- -0.3s against a 60s replay window
- tool approved
- settle_invoice · cf8afbea802e68958853cc09…
- tool executing
- cf8afbea802e68958853cc09… · unchanged
- policy commitment
- 666fffa405f3422198fd9451…
provenance
- mandate
- field maintenance
- mandate hash
- 62054781513a89f3a21a0a59406754dbe61fba9c570cf7a9e437c93e2b2292f5
- rule hash
- 666fffa405f3422198fd9451df1674b17ec570e17de6c136b287abe831f35e8d
- request hash
- 36676d547784a4af88e53b66a68a4b1e22b51eb6748e8cf669fe598431a32265
- transaction
- 518c63704695a3857a725d360febfc0c148b8e77838e66e0ba91625def83ee33
the receipt
- entry
- 6383 of 7240
- previous entry
- a790f48e250e9c63ea782b96f75408ff9e115400d0ed0e1285e2aee3bca4713f
- leaf hash
- 5e7052b586231316b5ec26f21b7acb55a0e1c5be4355218e8dfabe31158a34b2
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- suGqC7TrsTYwu10v+6gz8gPShuTY1UH2wpUj7c80cLTYmn3gIgvMU6yhtaMPx7Ccj50SUeiqMECRZLlSfnEABQ==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root d785c20685…a13a7d
0lefta790f48e250e9c63ea…e3bca4713f
1leftdcf5125198ca3f941c…e1c3dc82b0
2left2fc2ccf25d645adb19…bba8092f25
3leftb668e5c9ba7b756be0…ffb5f22982
4right834facfbda8eecf072…92e4a3ae84
5lefteeac0b47ead8516325…c9d02691a3
6left2837f0d2fdf056aff2…51733dfe2c
7left281c02aa0e8b3e7d37…dd9f4535ca
8rightf1802e138ad8e1e868…7ccc6953ce
9rightf1501cd5c083126291…586061c99b
10right6807d671775c07e780…6074e6d011
11left4043c82f03366d541c…af7a3fd4fe
12leftdc8527842d65829ab0…fb53df942a
root
d785c2068536ae029ced9961c60607eb083681a381f997782ce66ab6efa13a7d