how it was scanned
01✓realityclear
02✓mandate scopeclear
03✓velocityclear
04✓counterpartyclear on ofac sdn + eu csl, 2026-08-01, first seen 317d ago
05✓privacy2 annotation fields scanned, nothing sensitive
06✓rail integritysoroban-direct, 0.6s skew, nonce fresh
07✓post approval integritysettle_invoice unchanged since approval
what the engine read
decoded from the envelope itself. the memo and the tool call are shown because they were ignored — a label is not evidence of what a transaction does.
- actor account
- GBB2Y7BO4IS7HWPIOVMTP5ADGM5GMFP2VRBSO5Y5SM5AZYDKIB5MDOOA
- operations
- 1
- op 0 · movement
- 1146.8319395 USDC → GBURYWFQN5XY66A3X7JQLHOE2XWSDJWUJ4VBB4VAFKQBZZ7DDFW7TVTH
- memo (not trusted)
- invoice 630a21
- tool_call (not trusted)
- settle_invoice(vendor="cloudscale hosting")
what checks four to seven were given
the counterparty feed, the transport envelope and the approval-time snapshot. they are recorded on the entry because a verdict nobody can re-derive is only an assertion.
- counterparty
- cloudscale hosting · clean
- screened against
- ofac sdn + eu csl, 2026-08-01
- destination age
- 317 days
- rail
- soroban-direct · as the mandate names
- envelope
- nonce 056cdb5bfdf507cf · signed
- clock skew
- 0.6s against a 60s replay window
- tool approved
- settle_invoice · 00198884d83611502bb48a12…
- tool executing
- 00198884d83611502bb48a12… · unchanged
- policy commitment
- c39b42efb504654abe017035…
provenance
- mandate
- cloud infrastructure
- mandate hash
- ed67197142edb3f44244f205d12962fdb4f0a93bc58d0d94f3b668240548ecbb
- rule hash
- c39b42efb504654abe0170359ff9924c5ad2161fca8c4b77c28ba9b173888ad5
- request hash
- 7120b44b8ca1afc0255df8e8dc6830d8c1f6d34aa3b28d5043ed9968e53413dc
- transaction
- 8db259b140ce791304157796b4e3da62d172f905bfc1bc08cb03d4dca868c5f0
the receipt
- entry
- 4251 of 7446
- previous entry
- f94d1b31d48cc0c5f19cfaa1a5167ba8214765b3d9c6e34625ada9917552eb7b
- leaf hash
- 5fa45f19c842717b4582d71e7dc7d7a6b5b7bc4736244a944dea64e15e42733b
- engine key
- GC4JH7M7F6TGKHPUTVSA3MZUTWWAXQTNMBJIT5XIB7XHNFKBKNRWPMSC
- signature
- i7ln5/QJz5NYvtBT0LMjO8rpHr9/kA/mF12UcK3cpw/5cAbfbovhmfJ/TW/Rnfe5jYLlR3KehBlYU0P3vzn+BA==
inclusion proof
the leaf was rebuilt from the payload above, the signature checked against the engine key, and the path below walked back to the published root. all three ran when this page was rendered.
leaf rebuilt from payloaded25519 signature validincluded in root 521b33d72c…eec67a
0leftf94d1b31d48cc0c5f1…917552eb7b
1leftf97a66cae596fb0fa8…3412955862
2right7ec0dd93b88c2cf3c2…fa6fec0511
3leftf1708ad43f1f66ff25…c43595d651
4leftd7627d214e261c4084…f42ef67c9b
5right81190403dcf9a85c34…eb8ef5bc3d
6right1b4d02f8dbba2cefa4…2282a4182f
7lefta9096948f77ef5d4e1…51cdb1d2cc
8rightc4ef35061cd7edaa58…68e4521d67
9rightcceadbe3aa211130c6…9fbf263854
10right78d79e50c934cffc8b…2cef11de30
11right6f8a654b0adbb7ac40…21c659034c
12leftdc8527842d65829ab0…fb53df942a
root
521b33d72c4498e302ef01b501b1d16dcfcd9a6cdc594090d9bf54a698eec67a